Acceptable Use Policy

1. Overview

This Acceptable Use Policy ("AUP") governs the use of all services, platforms, and products provided by DA592 LTD, trading as Masheev ("Company," "we," "us," or "our"), including our website at masheev.com, our platform at app.masheev.com, our API at api.masheev.com, and any related software, tools, features, or functionalities (collectively, the "Services").

This AUP applies to all users, customers, and any individual or entity that accesses or uses the Services. By using the Services, you agree to comply with this AUP. Violation of this AUP may result in suspension or termination of your access to the Services, with or without notice, at our sole discretion.

This AUP is incorporated into and forms part of our Terms of Service. Capitalized terms used but not defined in this AUP have the meanings given to them in the Terms of Service. Violations of this AUP may trigger your indemnification obligations under Section 13 of the Terms of Service. If this AUP conflicts with the Terms of Service, the order of precedence in Section 18.8 of the Terms of Service applies.

2. Prohibited Content

You may not use the Services to store, transmit, distribute, or make available any content that:

Is unlawful, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, or otherwise objectionable;
Infringes any patent, trademark, trade secret, copyright, or other proprietary or intellectual property rights of any party;
Violates the privacy or publicity rights of any individual;
Contains software viruses, worms, Trojan horses, or any other computer code, files, or programs designed to interrupt, destroy, or limit the functionality of any computer software, hardware, or telecommunications equipment;
Constitutes unsolicited or unauthorized advertising, promotional materials, junk mail, spam, chain letters, pyramid schemes, or any other form of solicitation not expressly permitted by the Company;
Contains false, misleading, or deceptive statements or claims;
Promotes illegal activities or provides instructional information about illegal activities;
Impersonates any person or entity, or falsely states or otherwise misrepresents your affiliation with a person or entity;
Exploits minors in any way, including but not limited to child sexual abuse material (CSAM);
Constitutes terrorist content, including material that incites, glorifies, or promotes terrorism, or content produced by or on behalf of designated terrorist organizations;
Promotes or facilitates discrimination, hatred, or violence against any individual or group based on race, ethnicity, national origin, religion, sex, gender identity, sexual orientation, disability, age, or any other protected characteristic; or
Facilitates or promotes the sale, trafficking, or distribution of illegal drugs, controlled substances, weapons, or other contraband.

3. Prohibited Activities

You may not use the Services to engage in or facilitate any of the following activities:

3.1 Illegal Activity

Conducting or facilitating any illegal activity;
Using the Services to solicit, facilitate, or participate in money laundering or terrorist financing;
Facilitating or promoting human trafficking, forced labor, sexual exploitation, or any form of modern slavery in violation of the Trafficking Victims Protection Act (TVPA), the UK Modern Slavery Act 2015, FOSTA-SESTA, or any other applicable anti-trafficking law;
Facilitating or promoting the sale, manufacture, or distribution of illegal drugs, controlled substances, firearms, explosives, or other contraband;
Using the Services for unlicensed gambling operations or facilitating illegal gambling activity.

The following are strictly prohibited. This list is non-exhaustive.

(a) Vishing and Phone-Based Fraud

Using the voice AI features of the Services to conduct vishing (voice phishing), phone scams, or fraudulent calls, whether automated or semi-automated;
Using AI-generated voice to impersonate financial institutions, government agencies, law enforcement, tax authorities, utility companies, or any other organization for the purpose of extracting money, credentials, or personal information from individuals;
Creating false urgency, fabricated emergencies, or fake crisis scenarios (including but not limited to fake kidnappings, fake arrests, or fake medical emergencies) to pressure individuals into making payments or disclosing sensitive information.

(b) Credential Harvesting and Account Takeover

Using the Services to collect, solicit, or harvest passwords, PINs, one-time passcodes, account numbers, social security numbers, or other authentication credentials through voice, chat, SMS, or any other channel;
Facilitating account takeover (ATO) attacks by using the Services to trick individuals into providing credentials, authorizing fraudulent transactions, or granting access to their accounts;
Using AI-powered conversations to bypass security questions, knowledge-based authentication, or voice biometric verification.

(c) Business Email Compromise and Invoice Fraud

Using the Services to impersonate executives, employees, vendors, or business partners for the purpose of directing fraudulent wire transfers, payment redirections, or financial transactions (Business Email Compromise / CEO fraud);
Sending or facilitating the sending of fraudulent invoices, fake payment requests, or manipulated banking details through the Services;
Using AI to craft or automate communications that impersonate legitimate business contacts to redirect payments.

(d) Romance, Advance-Fee, and Investment Scams

Using the Services to conduct romance scams, advance-fee fraud, or confidence schemes;
Using AI to establish, maintain, or scale fraudulent relationships with individuals for the purpose of extracting money or sensitive information;
Using the Services to conduct "pig butchering" schemes, pump-and-dump campaigns, or other cryptocurrency and investment fraud;
Operating or promoting Ponzi schemes, pyramid schemes, or other fraudulent investment vehicles through the Services.

(e) Synthetic Identity and Impersonation Fraud

Creating, maintaining, or scaling synthetic identities (fabricated personas combining real and fictitious information) using the AI features of the Services;
Using the Services to build or operate networks of fake personas, sock puppet accounts, or coordinated inauthentic identities;
Engaging in identity theft or using another person's identity without authorization.

(f) General Fraud and Deception

Phishing, spear-phishing, smishing (SMS phishing), or any form of social engineering designed to trick individuals into disclosing sensitive information or taking harmful actions;
Engaging in deceptive or manipulative practices directed at individuals or businesses;
Tech support scams, government impersonation scams, lottery/prize scams, or any other scheme designed to defraud individuals;
Using AI features to increase the scale, sophistication, or persuasiveness of any fraudulent activity.

3.3 Unauthorized Access and Security Violations

Attempting to gain unauthorized access to the Services, other users' accounts, or any computer systems or networks connected to the Services;
Circumventing, disabling, or otherwise interfering with security-related features of the Services, including authentication mechanisms, access controls, or usage limits;
Introducing malware, viruses, ransomware, or any other malicious code to the Services or to any third party through the Services;
Probing, scanning, or testing the vulnerability of any system or network associated with the Services without our prior written authorization.

3.4 Service Disruption

Overloading, flooding, or otherwise disrupting the Services or the servers and networks that host them;
Using the Services in any manner that could interfere with, disrupt, negatively affect, or inhibit other users from fully enjoying the Services;
Taking any action that imposes an unreasonable or disproportionately large load on our infrastructure.

3.5 Reverse Engineering and Scraping

Scraping, crawling, or harvesting content or data from the Services by automated means without our prior written consent;
Reverse engineering, decompiling, disassembling, or otherwise attempting to discover the source code, underlying algorithms, or structure of the Services;
Copying, modifying, distributing, or creating derivative works based on the Services.

3.6 Unauthorized Resale

Reselling, sublicensing, or otherwise making the Services available to any third party without our prior written authorization;
Using the Services to build or support, directly or indirectly, a product or service that competes with the Services.

3.7 Surveillance and Discrimination

Using the Services for mass surveillance, bulk data collection, or intelligence-gathering activities targeting individuals or groups without a lawful basis;
Using the Services to discriminate against individuals based on protected characteristics, including through the configuration or training of AI agents to provide different levels of service based on race, ethnicity, national origin, religion, sex, gender identity, sexual orientation, disability, or age;
Using the Services to facilitate the creation or maintenance of blacklists, scoring systems, or profiling mechanisms that discriminate based on protected characteristics.

4. AI-Specific Restrictions

The Services include AI-powered features, including large language models (LLMs), text-to-speech, and speech-to-text capabilities. You agree to the following additional restrictions when using AI features:

4.1 Automated Decision-Making

You may not use AI features to make solely automated decisions that produce legal effects on individuals or similarly significantly affect individuals without appropriate human oversight, review, and intervention mechanisms.

4.2 High-Risk, Prohibited, and Consequential-Decision Uses

You may not use the AI features, alone or as part of a wider process, to:

carry out any practice prohibited by Article 5 of the EU AI Act, including manipulative or deceptive techniques that distort a person's behaviour, exploiting a person's age, disability, or social or economic situation, social scoring, emotion recognition in a workplace or educational setting, biometric categorisation by sensitive characteristics, or untargeted scraping of facial images;
recruit, screen, rank, evaluate, or make decisions about job applicants, workers, or contractors, including monitoring or evaluating their performance or behaviour;
assess creditworthiness, set credit terms, or decide on loans, mortgages, or other financial products;
assess risk or set prices for life or health insurance, or decide on insurance claims or coverage;
decide on or screen access to housing, education or training, healthcare, or public benefits or services;
evaluate, classify, or prioritise emergency calls, dispatch emergency services, or triage patients;
identify or categorise people using biometric data, or recognise emotions from voice, face, or other biometric data;
support law enforcement, migration, asylum, border control, the administration of justice, or elections; or
otherwise make, or be a substantial factor in making, a decision that produces legal effects or similarly significant effects for a person.

The AI features may collect information that a person chooses to give and pass it to your staff, who make any such decision themselves. If you are unsure whether a use is permitted, ask us in writing before you start.

4.3 Professional Advice

You may not configure or use the AI features to give individual legal, medical, mental health, financial, tax, or similar professional advice, to diagnose or assess symptoms, or to make clinical, legal, or financial judgements. The AI features may share your own published, general information and refer people to a qualified person.

4.4 AI System Integrity

You may not attempt to bypass, circumvent, or disable AI rate limits, safety guardrails, content filters, or usage restrictions;
You may not attempt to extract, reconstruct, or reverse-engineer training data, model weights, system prompts, or other proprietary information from the AI features;
You may not use prompt injection, jailbreaking, or similar techniques to cause the AI features to produce outputs that violate this AUP or any applicable law.

4.5 Deceptive Use of AI Outputs

You may not use AI-generated outputs to create misleading or deceptive content that is presented as human-created without appropriate disclosure;
You are responsible for reviewing and validating all AI-generated outputs before relying on them or distributing them to third parties.

4.6 Voice Cloning, Deepfakes, and Synthetic Media

You may not use the voice AI features of the Services (including text-to-speech and speech-to-text) to clone, replicate, or synthesize the voice of any individual without that individual's explicit, informed consent;
You may not use AI features to create deepfakes, synthetic media, or manipulated audio/visual content that misrepresents the identity, statements, or actions of any real person;
You may not use AI-generated voice or text outputs to impersonate government officials, law enforcement, financial institutions, or any other person or entity for fraudulent or deceptive purposes;
You must not disable, obscure, or contradict the AI disclosures the Services give, and you must not configure an AI agent to claim to be human. All AI-generated voice and messaging interactions must comply with applicable disclosure requirements, including EU AI Act Article 50 and US state AI-disclosure laws.
If you create a cloned voice, you must hold the explicit, informed, written consent of the person whose voice it is, for use in your AI agents, and you must give us that consent on request. You may not clone the voice of a public figure, a celebrity, or anyone who has not given that consent, and you must not use a cloned voice to make a caller believe they are speaking with that person rather than an AI assistant.

4.7 Election Integrity and Political Manipulation

You may not use AI features to create, distribute, or amplify content designed to suppress voter participation, mislead voters about voting procedures, or interfere with elections or democratic processes;
You may not use AI features to generate deepfake political content, fabricated endorsements, or synthetic media depicting political candidates or public officials without clear and prominent disclosure;
You may not use AI features for astroturfing, coordinated inauthentic behavior, or the creation of fake grassroots campaigns.

4.8 Mental Health, Companionship, and Licensed Roles

You may not use the AI features to provide therapy, counselling, or other mental or behavioral health care, or to hold therapeutic conversations with clients. Scheduling, billing questions, and passing messages to a licensed professional are permitted.
You may not configure an AI agent as a companion, friend, partner, or other relationship-based character, or for any purpose other than customer service and your business operations.
You may not give an AI agent a name, title, or description that suggests it is a licensed professional, such as "Dr.", "Nurse", "RN", "therapist", "counsellor", "attorney", or "financial adviser".
If a person describes a medical emergency, immediate danger, or thoughts of suicide or self-harm, the Services direct them to emergency or crisis services. You must not change or suppress that behavior.

5. Communications Laws

You are the sender, caller, and initiator of every communication made through your account, whether a person sends it or an AI agent, automation, workflow, integration, API, SDK, MCP client, schedule, or trigger sends it for you (see Section 6 of the Terms of Service). When using the Services to communicate with individuals, you must comply with all applicable communications laws and regulations, including but not limited to:

5.1 Applicable Laws

TCPA: The Telephone Consumer Protection Act (United States) and FCC rules, including the rules for artificial or prerecorded voice calls (which include AI-generated voice), automatic telephone dialing systems, text messages, consent, and revocation of consent;
Telemarketing Sales Rule and state telemarketing, mini-TCPA, and do-not-call laws (for example, the Florida Telephone Solicitation Act);
Truth in Caller ID Act: You may not transmit misleading or inaccurate caller identification information with the intent to defraud, cause harm, or wrongfully obtain anything of value (47 U.S.C. § 227(e));
CAN-SPAM: The Controlling the Assault of Non-Solicited Pornography And Marketing Act (United States);
Call recording laws, including all-party consent laws such as the California Invasion of Privacy Act;
AI disclosure laws, including state laws that require disclosure of AI or bot interactions;
PECR: The Privacy and Electronic Communications Regulations (United Kingdom), as amended by the Data (Use and Access) Act 2025, together with UK GDPR and Ofcom rules;
CASL: Canada's Anti-Spam Legislation;
Any other applicable local, state, national, or international law governing electronic communications and marketing.

5.2 Requirements

You must obtain all required consents before sending communications through the Services, including prior express written consent where required by law, and keep records of each consent and opt-out for at least five (5) years after your last communication with the person concerned, as set out in Section 6.6 of the Terms of Service;
You must honor all opt-out, unsubscribe, revocation, and do-not-contact requests made by any reasonable means, on any channel, promptly and in accordance with applicable law;
You must screen against every applicable do-not-call or preference list, including the US National Do Not Call Registry, state lists, your internal list, and the UK TPS and CTPS, before making marketing calls or texts;
You must respect calling and texting hours and frequency limits in the recipient's local time;
You must not send unsolicited bulk communications, including mass text messages or emails, through the Services, and you must not use purchased, rented, scraped, or shared contact lists;
You must include accurate sender identification and contact information in all communications, and any opt-out instructions required by law;
For text messages, you must answer HELP requests, include opt-out instructions where carrier rules or the law require them (for example, "Reply STOP to opt out"), send no more than one confirmation after an opt-out, and not re-contact a person who opted out unless they opt back in;
You must not use false, misleading, or deceptive subject lines or headers.

5.3 Caller ID and Number Integrity

You must not spoof, falsify, or manipulate caller ID, originating phone numbers, or sender information transmitted through the Services;
You must not engage in toll fraud, traffic pumping, call pumping, or any form of telecommunications fraud;
You are responsible for ensuring that all telephone numbers used with the Services are properly registered and that you have the legal right to use them;
All information you give for carrier or platform registration, including A2P 10DLC brand and campaign registration, toll-free verification, WhatsApp Business Account details, and phone-number regulatory bundles, must be accurate, complete, and current, and your traffic must match your registered use cases.

5.4 Carrier and Platform Policies

Your communications travel over third-party networks and platforms. You must comply with the following policies as they apply to the channels you use, as updated by their owners from time to time. Where a provider requires us to bind our customers to its terms, those terms apply to you.

Twilio: the Twilio Acceptable Use Policy, Twilio Messaging Policy, and the restrictions on emergency services in Twilio's Emergency Services terms (twilio.com/legal). The Services cannot be used to reach emergency services (see Section 6.12 of the Terms of Service);
US wireless carriers and CTIA: the CTIA Messaging Principles and Best Practices, the CTIA Short Code Monitoring Handbook where it applies, and carrier codes of conduct, including A2P 10DLC and toll-free messaging requirements;
Meta: the WhatsApp Business Terms of Service, WhatsApp Business Messaging Policy and Commerce Policy, Meta Platform Terms, and Instagram Platform Policy, including WhatsApp's restrictions on general-purpose AI assistants, the 24-hour customer service window, and the requirement to give people a clear way to reach a human;
Google: the Google API Services User Data Policy and Google Business Profile policies, when you connect Google services;
Microsoft: the Microsoft APIs Terms of Use, when you connect Microsoft services;
AI providers: the Anthropic Usage Policy (anthropic.com/legal/aup), the OpenAI Usage Policies (openai.com/policies/usage-policies), the Google Generative AI Prohibited Use Policy (policies.google.com/terms/generative-ai/use-policy), and the ElevenLabs Prohibited Use Policy (elevenlabs.io/use-policy), and the policies of any other AI provider on our Sub-Processor List. This includes their disclosure requirements, such as telling people that they are talking to AI and, for voice calls, that conversations are recorded and may be shared with the provider and its AI model providers. Where an AI provider requires extra safeguards for high-risk uses, such as legal, medical, financial, insurance, housing or employment advice to consumers, you must not use the Services for that use unless Section 4 and Section 7 of this AUP allow it, and you must then have a qualified person review those outputs and tell the people you serve that they are dealing with AI.

A breach of any of these policies is a breach of this AUP. We may suspend the affected channel or account if a provider tells us of a breach or restricts our service because of your traffic.

5.5 Restricted Messaging and Calling Uses

Unless we have agreed in writing in advance, you must not use the Services to send messages or make calls for:

Marketing or telemarketing campaigns, cold outreach, or contact with people who have not first contacted you or given you their details;
Debt collection, loans, credit repair, debt relief, or other high-risk financial services;
Gambling, sweepstakes, or contests;
Marketing of cannabis, CBD, kratom, vaping, tobacco, alcohol, firearms, or other age-restricted or controlled products (see also Section 7.6);
Adult or sexual content;
Third-party lead generation, affiliate marketing, or sharing or selling consents or contact data;
Political campaigning, fundraising, or polling;
Emergency, safety-critical, or alerting services. The Services cannot reach emergency services such as 911, 999, or 112, and you must not set an emergency number as a transfer or forwarding number (see Section 6.12 of the Terms of Service); or
Any other category that a carrier or platform policy listed in Section 5.4 restricts or prohibits.

We may make an approval subject to conditions, including insurance and a prepaid balance or deposit, as described in Section 6.14 of the Terms of Service.

6. Sanctions, Export Controls, and Trade Compliance

6.1 Sanctions Compliance

You must not use the Services in violation of any applicable trade sanctions, embargoes, or restrictive measures, including those imposed by the United Kingdom (as listed on the UK Sanctions List and enforced by HM Treasury's Office of Financial Sanctions Implementation and the Office of Trade Sanctions Implementation), the U.S. Office of Foreign Assets Control (OFAC), the U.S. Department of Commerce Bureau of Industry and Security (BIS), the European Union, or the United Nations. This includes UK and US restrictions on providing IT, software and cloud services to persons connected with Russia or Belarus;
You must not provide access to the Services to, or use the Services for the benefit of, any individual, entity, or country that is the target of comprehensive sanctions or that appears on any applicable restricted party list, including the OFAC Specially Designated Nationals (SDN) List, the BIS Entity List, or any equivalent list maintained by applicable authorities;
You must not use the Services where the transaction, person, entity, destination or end use is prohibited by applicable UK, EU, US or other applicable sanctions or export-control rules. Restrictions can be targeted or territorial and change over time; the absence of a country from a published list is not permission to transact. We may restrict access where required to comply with those rules.

6.2 Export Controls

You must not use or export the Services, including any software, technology, or technical data provided through the Services, in violation of applicable export control laws, including the U.S. Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR);
You are responsible for obtaining any required export licenses or authorizations before using the Services in connection with controlled activities or end uses.

6.3 Your Obligations

You must promptly notify us if you become aware that you or any of your Users may be in violation of applicable sanctions or export control laws;
We reserve the right to screen customers, users, and transactions against applicable sanctions lists and to suspend or terminate access to the Services if we determine that continued use would violate applicable sanctions or export control laws.

7. Regulated Data and Sensitive Uses

Some sectors have their own rules about what may be said to people, what information may be collected, and who may give advice. You are responsible for knowing and following the rules for your sector and for configuring your AI Agents so they stay within this Section. Our default safeguards (Section 6.10 of the Terms of Service) reduce risk but do not make any use compliant on their own.

7.1 Health Information

HIPAA. We do not sign Business Associate Agreements and the Services are not designed to meet the HIPAA Security Rule. If you are a covered entity or a business associate under the Health Insurance Portability and Accountability Act (HIPAA), you must not use the Services to create, receive, maintain, or transmit protected health information (PHI), as defined in 45 C.F.R. § 160.103. This includes booking, changing, or confirming appointments for patients, because appointment details linked to a patient are PHI.
Other health, wellness, and aesthetics businesses. If you are not subject to HIPAA, you may use the Services for scheduling, general information about your business, and passing messages to your staff. You must configure your AI Agents not to ask for symptoms, diagnoses, medications, test results, or treatment history, and to collect no more health information than is needed to book or route a request. You are responsible for any consent, notice, and privacy policy required by consumer health data laws, including the Washington My Health My Data Act, Nevada SB 370, and the Connecticut Data Privacy Act.
United Kingdom and EEA. Health information is special category data. You may process it through the Services only as permitted by Section 4.2 of the Data Processing Addendum.
No clinical services. You must not use the Services to diagnose, assess or triage symptoms, recommend treatment, give clinical, veterinary, or pharmacy advice, or approve prescriptions or refills. You must not present an AI Agent as able to provide mental or behavioral health care. If you provide mental or behavioral health services, AI Agents may only handle scheduling, billing questions, and taking contact details and availability.
Health AI disclosure laws. Where a law requires a specific notice when AI is used in communications with patients (for example, California Health and Safety Code section 1339.75, Texas law, or Utah law for regulated occupations), you are responsible for giving it.
Medicines. You must not use the Services to promote prescription-only medicines to the public where that is unlawful, including in the United Kingdom.

7.2 Payment Card and Account Data

You must not use the Services to collect, store, process, or transmit full payment card numbers, card security codes, PINs, or other cardholder or sensitive authentication data, by any channel, including voice calls, recordings, transcripts, messages, and uploads. This applies whether or not you would otherwise be compliant with the Payment Card Industry Data Security Standard (PCI DSS).
Take payments only through a secure payment page or payment link provided by your payment provider, outside the conversation.
If an end user shares card data anyway, you must not copy, use, or forward it. We may automatically remove numbers that look like card numbers from conversations, transcripts, and logs.
The same rules apply to bank account numbers, Social Security numbers, National Insurance numbers, passport numbers, and passwords, unless we have agreed otherwise in writing.

7.3 Financial Services, Insurance, and Tax

If you are a financial institution under the Gramm-Leach-Bliley Act (including tax preparers, mortgage brokers and lenders, auto dealers that arrange financing, insurance agencies, and investment advisers), you are responsible for your obligations under the FTC Safeguards Rule, SEC Regulation S-P, and state insurance data security laws, including your oversight of service providers. We will give reasonable information about our safeguards to support your due diligence on request.
AI Agents must not give personalized financial, investment, tax, credit, mortgage, or insurance advice or recommendations; explain or compare coverage; quote, negotiate, or bind insurance; state loan or lease rates, payments, or approval chances; or accept instructions to trade, transfer, or withdraw money.
In the United Kingdom, if your communications could be financial promotions or relate to a regulated activity under the Financial Services and Markets Act 2000, you must be authorised or have your promotions approved by an authorised person. You are the communicator of every AI-generated communication sent through your account.
If you must keep records of business communications (for example under SEC Rule 204-2, SEC Rule 17a-4, FINRA rules, or FCA SYSC 10A), you are responsible for capturing and keeping them. The Services are not a regulatory archive, and conversations may be deleted under your settings or our retention schedule.

7.4 Legal Services

AI Agents must not give legal advice, prepare legal documents for end users, or tell anyone whether they have a claim or a case.
Collect only the information you need to check conflicts and book a consultation, so that you do not receive confidential information from people you cannot represent.
You are responsible for any professional conduct rules on the use of AI, including informed consent, supervision, and telling people they are speaking with an AI and not a lawyer.

7.5 Decisions About People

You must not use the Services, including AI Agents, scoring, or automations, to make or be a substantial factor in a decision about a person's eligibility for, or the terms of, employment, housing, credit, insurance, education, or essential services. This includes screening job applicants or tenants. AI Agents must not ask about, record, or take into account race, color, religion, sex, sexual orientation, gender identity, disability, national origin, age, familial status (including having children), pregnancy, or receipt of benefits or other source of income, and must not describe a neighborhood by the people who live there.

7.6 Food, Allergens, and Age-Restricted Products

AI Agents must not tell anyone that a food or drink is free from an allergen or safe for an allergy, intolerance, or medical diet. They may share your written allergen information if you have provided it, and must tell the person to confirm with your staff before ordering. You are responsible for keeping that information accurate and complete.
You must not use AI Agents to sell, or take orders for, alcohol, tobacco, vaping products, cannabis, CBD, or other age-restricted products unless a person checks age under your own process at the point of sale, collection, or delivery as the law requires. Restaurants, bars, and venues that serve alcohol on their premises may use the Services for reservations and general enquiries.

7.7 Uses We Do Not Support

Unless we have agreed in writing in advance, you must not use the Services, on any channel and whether contact is inbound or outbound, for:

Debt collection or debt buying, including any activity covered by the Fair Debt Collection Practices Act or Regulation F;
Payday or other high-cost short-term lending, credit repair, or debt relief;
Gambling, betting, sweepstakes, or lotteries;
The sale of cannabis, firearms, ammunition, or explosives;
Political campaigning, fundraising, or polling;
Emergency services, emergency dispatch, crisis lines, or suicide or self-harm support;
Services directed to children, including schools and children's activity providers where children are the users of the AI Agent;
Adult or sexual content or services.

7.8 Other Regulated Data

You may not use the Services to process education records under FERPA, criminal justice information under the CJIS Security Policy, substance use disorder records under 42 C.F.R. Part 2, biometric identifiers, or data controlled under ITAR or the EAR, without a written agreement with us that specifically addresses the applicable requirements.

7.9 Sector Disclosure and Pricing Rules

You are responsible for configuring your AI Agents to give any information your sector's rules require and to avoid statements those rules forbid. For example, funeral providers in the United States must give accurate price information by telephone when asked, so your AI Agent must give prices from your price list or connect the caller to a person during the same call. California motor vehicle dealers must state the total price of a specific vehicle in their first written reply about it. If you cannot configure an AI Agent to meet a rule that applies to you, do not use the AI Agent for that kind of conversation.

8. Child Safety

8.1 Prohibition

Customer accounts and operators must be at least 18 years old. You must not configure the Services to target children or intentionally collect children’s personal data without our prior written agreement and all legally required safeguards, including parental consent where required. Incidental end-user data must be handled under the Privacy Policy and DPA; it does not authorize a child-directed service.

8.2 CSAM Reporting

In accordance with our obligations under 18 U.S.C. § 2258A, if we become aware of any apparent child sexual abuse material (CSAM) on or transmitted through the Services, we will report it to the National Center for Missing & Exploited Children (NCMEC) and cooperate fully with law enforcement. We may also preserve and disclose related content and account information as required by law.
If you become aware of any CSAM or suspected child exploitation on the Services, you must immediately report it to us at abuse@masheev.com and to the appropriate authorities.

9. Customer Responsibility for Content and AI Configuration

9.1 Customer Content

Customer is solely responsible for all content, data, materials, and information that Customer or its Users upload, submit, store, transmit, or process through the Services ("Customer Content"), including but not limited to:

Messages, communications, and conversations sent or received through any channel;
Files, documents, images, audio recordings, and other media;
Contact lists, customer databases, and end-user information;
Knowledge bases, FAQs, and reference materials uploaded for use by AI features;
Any content generated by AI features based on Customer's configuration and instructions.

The Company does not create, author, endorse, or assume any responsibility for Customer Content. The Company acts as a neutral platform and data processor. All Customer Content is provided, controlled, and directed by Customer. Customer bears sole responsibility for the legality, accuracy, appropriateness, and rights clearance of all Customer Content.

9.2 AI Agent Configuration

Customer is solely responsible for the configuration, behavior, and outputs of AI agents created or configured through the Services, including:

System prompts and instructions: All instructions, personas, tone settings, and behavioral guidance provided to AI agents;
Tools and integrations: All tools, APIs, data sources, and third-party integrations enabled for AI agents;
Guardrails and restrictions: The adequacy of any safety guardrails, content filters, escalation rules, or human oversight mechanisms configured by Customer;
Knowledge bases and training materials: All documents, data, and reference materials provided to AI agents for use in generating responses;
Channel-specific settings: Voice, chat, SMS, email, and WhatsApp agent configurations, including language, response limits, and escalation paths.

The Company does not review, approve, or validate Customer's AI agent configurations. Customer is solely responsible for ensuring that its AI agents operate in compliance with this AUP, applicable law, and industry regulations. Any harm, liability, or regulatory action arising from Customer's AI agent configuration is Customer's sole responsibility.

9.3 End-User Interactions

Customer is solely responsible for all interactions between its configured AI agents and Customer's end-users. The Company has no direct relationship with Customer's end-users and assumes no liability for the accuracy, legality, or appropriateness of AI-generated responses delivered to end-users through the Services.

9.4 Pass-Through Liability

All third-party claims, regulatory actions, fines, penalties, lawsuits, or demands arising from or related to Customer Content, Customer's AI agent configuration, or Customer's use of the Services are Customer's sole responsibility. Customer's obligations under Sections 6 and 13 of the Terms of Service apply to all such claims, including claims, investigations, fines, and fees from end-users, recipients of communications, regulatory authorities, carriers, communications platforms, and other third parties.

The Company makes no representations or warranties regarding the accuracy, completeness, or fitness for purpose of any AI-generated output. AI features are tools that operate based on Customer's instructions and configuration; the Company is not liable for how Customer uses those tools or what those tools produce under Customer's direction.

10. Platform Rights and Monitoring

10.1 Right to Monitor and Analyze

We reserve the right, but have no obligation, to proactively monitor, scan, review, and analyze any and all content, communications, configurations, and activities on the Services, including:

Customer Content transmitted, stored, or processed through the Services;
AI agent configurations, system prompts, knowledge bases, and tool settings;
Voice recordings, transcripts, and chat logs;
API calls, webhook payloads, and integration data flows;
Usage patterns, traffic volumes, and behavioral signals.

10.2 Automated Detection

We may use automated tools, including artificial intelligence, machine learning models, pattern recognition, heuristic analysis, and rule-based systems to detect potential violations of this AUP, including fraud, abuse, illegal activity, and security threats. Automated detection may result in flagging, throttling, or temporary suspension of content or accounts pending human review.

10.3 Right to Review AI Agents

We reserve the right to review, audit, and analyze any AI agent configured by Customer through the Services, including system prompts, tool configurations, knowledge bases, and conversation logs, for the purpose of:

Investigating suspected AUP violations;
Responding to abuse reports, legal requests, or regulatory inquiries;
Ensuring compliance with applicable law and platform safety standards;
Protecting the integrity, security, and reputation of the Services.

10.4 Preservation and Disclosure

We may preserve and disclose Customer Content, account information, and usage data without Customer's prior consent when we have a good-faith belief that such action is necessary to:

Comply with applicable law, regulation, legal process, or enforceable governmental request;
Enforce this AUP or the Terms of Service;
Respond to claims that any content violates the rights of third parties;
Protect the rights, property, or personal safety of the Company, our users, or the public;
Cooperate with law enforcement investigations, including investigations of fraud, child exploitation, terrorism, or other criminal activity.

10.5 No Duty to Monitor

Nothing in this Section 10 shall be construed as imposing an obligation on the Company to monitor Customer Content or Customer's use of the Services. The Company's election not to monitor does not constitute an endorsement, approval, or acceptance of responsibility for any Customer Content.

11. Enforcement

11.1 Enforcement Actions

We reserve the right, but have no obligation, to investigate any suspected violation of this AUP. We may take any of the following actions in response to a violation or suspected violation, at our sole discretion:

Investigate the nature and extent of the violation;
Immediately suspend or terminate your access to the Services, with or without notice;
Remove, disable, restrict access to, or delete any content that violates this AUP;
Disable, modify, or restrict any AI agent configuration that violates this AUP or poses a risk to the platform, our users, or third parties;
Report the violation to law enforcement authorities if we believe the violation involves illegal activity;
Report apparent violations of child exploitation laws to NCMEC and applicable law enforcement as required by law;
Cooperate with law enforcement authorities in the investigation and prosecution of any suspected criminal activity, including providing access to relevant Customer Content, account data, and usage records;
Withhold, suspend, or offset any amounts owed to Customer;
Take any other action we deem necessary and appropriate to protect the integrity, security, and availability of the Services and the rights and safety of our users.

11.2 Immediate Action

We may take immediate enforcement action, including suspension or termination without prior notice, when we reasonably determine that:

Customer's use of the Services poses an imminent risk to the safety, security, or integrity of the Services, our users, or third parties;
Customer's use of the Services involves suspected illegal activity, including fraud, terrorism, child exploitation, or sanctions violations;
Continued access could expose the Company to material legal liability;
A law enforcement authority or regulatory body has requested or ordered the action, or has made an inquiry about your communications;
A carrier or communications platform has reported, blocked, filtered, or complained about your traffic, or has restricted our service because of it; or
Delay in action could result in irreparable harm to any person.

11.3 No Liability for Good-Faith Enforcement

The Company shall have no liability to Customer for any enforcement action taken in good faith, and on a reasonable belief, under this AUP, including suspension, termination, content removal, AI agent modification, or account restriction. Customer expressly waives any and all claims for damages, lost revenue, lost profits, business interruption, or consequential losses arising from or related to any good-faith enforcement action. This limitation applies regardless of whether the enforcement action is later determined to have been based on incomplete information or an incorrect assessment, provided the action was taken in good faith and on a reasonable belief at the time. If we find that an action was taken in error, we will restore the affected service promptly. This Section does not limit the specific refund rights in the Terms of Service.

11.4 Notice

We will endeavor to provide notice before or at the time of any enforcement action, except where:

Immediate action is necessary to protect safety or security;
Notice is prohibited by law or a law enforcement request;
The violation involves suspected criminal activity; or
Providing notice could compromise an ongoing investigation.

12. Reporting Violations

If you become aware of any violation of this AUP, or if you believe that any content or activity on the Services violates this AUP or applicable law, please report it to us at:

Email: abuse@masheev.com

For suspected child exploitation or CSAM, you may also report directly to:

NCMEC CyberTipline: www.missingkids.org/gethelpnow/cybertipline

We take all reports seriously and will investigate in a timely manner. We appreciate your assistance in maintaining a safe and compliant platform for all users.

Security research that complies with the scope and safe-harbour conditions in our Security Policy is expressly permitted under this policy. Testing outside that scope requires prior written authorization.