Acceptable Use Policy

This Acceptable Use Policy (“AUP”) governs access to and use of Sloancode AI Services provided by Sloancode Technology Group LLC (“Sloancode,” “we,” “us,” or “our”).

This AUP is incorporated into the agreement governing use of the Services (“Agreement”). Capitalized terms not defined here have the meanings in the Agreement.

The AUP applies to Customers, Authorized Users, administrators, developers, agents, contractors, End Users to the extent applicable, and any person who accesses or uses the Services through Customer credentials, APIs, integrations, applications, or Customer-configured workflows.

Customer is responsible for its Authorized Users, configurations, Customer Content, connected systems, AI-agent permissions, and uses of the Services. Customer must not enable, instruct, encourage, or knowingly permit another person to use the Services in a manner prohibited by this AUP.

The restrictions below apply to Sloancode AI’s horizontal AI capabilities, Industry Clouds, AI agents, voice and conversational AI, workflow automation, APIs, integrations, analytics/intelligence capabilities, and omnichannel communications.

1. Core Standard

You may use the Services only for lawful, authorized, legitimate business purposes consistent with the Agreement, Documentation, Customer permissions, applicable law, and this AUP.

You may not use the Services to cause or facilitate material harm to people, property, rights, systems, public safety, or the integrity of the Services.

A use may be prohibited even if not expressly listed below where it is materially equivalent to a listed prohibited use or is reasonably designed to evade a restriction.

2. Illegal Activity and Facilitation of Crime

You may not use the Services to plan, execute, materially facilitate, conceal, or promote unlawful activity.

• fraud, theft, extortion, bribery, money laundering, sanctions evasion, or deceptive commercial schemes;
• trafficking, exploitation, unlawful coercion, or other serious criminal activity;
• creation or use of forged documents, credentials, evidence, records, invoices, identities, or signatures for unlawful purposes;
• evasion of lawful regulatory, court, law-enforcement, tax, licensing, or compliance obligations;
• generation of instructions whose primary purpose is to materially enable serious wrongdoing.

3. Fraud, Deception, Impersonation, and Misrepresentation

You may not use the Services to deceive another person in a manner likely to cause financial, legal, reputational, privacy, safety, or other material harm.

• impersonate a government agency, company, executive, employee, customer, vendor, professional, or other person without lawful authorization;
• create phishing, credential-harvesting, invoice-diversion, business-email-compromise, tech-support, romance, investment, payment, refund, or similar scams;
• misrepresent the origin, authority, authenticity, endorsement, or sponsorship of a communication;
• use synthetic voice, generated text, images, or other AI output to deceive a person about the identity of a speaker or actor in a materially harmful context;
• falsify customer interactions, reviews, testimonials, transaction records, consent records, audit evidence, or compliance evidence.

4. Identity, Voice Cloning, Synthetic Media, and Deepfakes

You may use voice cloning, synthetic voice, avatars, or other identity-related AI capabilities only where you have lawful authority and all required permissions or consents.

• clone or simulate a real person’s voice, likeness, signature, or identity without authorization where authorization is required;
• use synthetic media to facilitate fraud, extortion, harassment, defamation, voter deception, unauthorized endorsement, or material impersonation;
• circumvent identity-verification, authentication, consent, provenance, or disclosure safeguards;
• represent an AI-generated or synthetic communication as authentic human communication where disclosure is legally required or where the omission is intentionally deceptive in a material context.

5. Harassment, Threats, Abuse, and Exploitation

You may not use the Services to threaten, stalk, harass, intimidate, blackmail, shame, exploit, or coordinate targeted abuse of an individual or protected group.

You may not use the Services to generate or distribute non-consensual intimate imagery, sexual extortion material, or content intended to facilitate exploitation or abuse.

6. Child Safety

The Services may not be used to create, solicit, store, distribute, transform, sexualize, facilitate, or promote child sexual abuse or exploitation material, grooming, sexual exploitation of minors, trafficking of minors, or other unlawful harm to children.

Sloancode may take immediate protective action, preserve relevant information where legally permitted or required, and make legally required reports to appropriate authorities or designated reporting organizations.

7. Hate, Discrimination, and Unlawful Exclusion

You may not use the Services to unlawfully discriminate against individuals or groups, facilitate discriminatory denial of legally protected opportunities, or generate targeted harassment based on protected characteristics.

The Services may not be configured to make or materially determine high-impact decisions based on legally protected characteristics or unlawful proxies.

8. High-Impact Decisions and Regulated Decisionmaking

Unless the applicable Service is expressly approved for the use and all required safeguards are implemented, you may not use Sloancode AI as the sole or determinative basis for decisions that produce legal or similarly significant effects concerning:

• employment, hiring, termination, promotion, compensation, or worker evaluation;
• housing, tenancy, admission, eviction, or access to housing;
• credit, lending, financial eligibility, or material financial terms;
• insurance eligibility, underwriting, or claims decisions;
• healthcare access, diagnosis, treatment, or medical eligibility;
• education admissions, access, grading, or significant educational opportunity;
• criminal justice, law enforcement, bail, sentencing, or similar governmental determinations;
• other high-impact decisions regulated by applicable law.

Where AI is permitted to assist such workflows, Customer must maintain legally appropriate notice, assessment, validation, non-discrimination testing, human review, explanation, appeal, and oversight.

9. Professional and Safety-Critical Use

You may not treat AI Output as a substitute for licensed or qualified professional judgment where applicable law or the nature of the risk requires professional review.

You may not deploy the Services as the sole control mechanism for emergency response, life-safety systems, critical infrastructure control, medical treatment, hazardous machinery, structural safety, or other safety-critical activity unless expressly approved by Sloancode in writing and appropriate independent safeguards exist.

10. Weapons and Physical Harm

You may not use the Services to materially facilitate unlawful acquisition, construction, modification, deployment, concealment, or use of weapons, explosives, or other mechanisms intended to cause serious physical harm.

Legitimate high-level safety, compliance, emergency-preparedness, or defensive information is not prohibited merely because it concerns a hazardous subject, provided the use is lawful and does not materially facilitate harm.

11. Cybersecurity and Computer Abuse

You may not use the Services for unauthorized or malicious cyber activity.

• malware, ransomware, destructive code, credential theft, botnets, cryptojacking, or unauthorized persistence;
• phishing, credential stuffing, password attacks, session theft, token theft, or bypass of authentication;
• exploitation of systems without authorization;
• denial-of-service or resource-exhaustion attacks;
• unauthorized vulnerability scanning, penetration testing, reconnaissance, scraping, or enumeration;
• exfiltration, destruction, corruption, or unauthorized alteration of data;
• development or deployment of mechanisms whose primary purpose is to defeat security controls or conceal malicious activity.

Authorized defensive security testing may be permitted only within systems you own or are expressly authorized to test and subject to Sloancode’s security-testing rules and rate/abuse controls.

12. Security Research Against Sloancode

You may not test, scan, probe, exploit, or attempt to bypass Sloancode systems without express authorization under an applicable vulnerability-disclosure or testing program.

If Sloancode publishes a vulnerability-disclosure policy, good-faith research performed within its scope will be governed by that policy.

13. Privacy, Surveillance, and Personal Data Abuse

You may not use the Services to collect, infer, aggregate, monitor, expose, or exploit Personal Data unlawfully.

• unlawful tracking or surveillance of individuals;
• unauthorized monitoring of communications, location, activity, devices, employees, residents, tenants, customers, or other persons;
• doxxing or disclosure of highly sensitive personal information for harmful purposes;
• collection of Personal Data through deception or without required notice/consent;
• attempts to re-identify data that Sloancode or another party has lawfully de-identified where re-identification is prohibited;
• use of stolen, unlawfully obtained, or improperly disclosed datasets.

14. Biometric Identification and Sensitive Inference

You may not use the Services to create or use biometric identifiers, voiceprints, facial templates, or similar identifiers for identification or authentication unless the applicable product expressly supports the use, Sloancode has approved it where required, and all applicable legal and contractual requirements are satisfied.

You may not infer highly sensitive traits about an individual in a manner prohibited by law or use sensitive inferences to unlawfully discriminate, manipulate, exploit, or deny protected opportunities.

15. Communications, Telemarketing, Robocalls, and Robotexts

You may not use Sloancode voice, SMS, email, chat, messaging, social, or other communication capabilities to send unlawful unsolicited communications, spam, illegal robocalls, illegal robotexts, or deceptive solicitations.

• initiate communications without legally required consent or other lawful basis;
• ignore or circumvent STOP, unsubscribe, revocation, do-not-call, suppression, or legally valid opt-out requests;
• spoof caller ID or sender identity unlawfully;
• misrepresent the identity or commercial purpose of a communication;
• evade carrier, platform, registration, throughput, or anti-abuse controls;
• use AI-generated voice in violation of applicable telemarketing/communications law;
• purchase, upload, or use contact lists obtained unlawfully or without required permissions.

Customer is responsible for consent evidence, campaign classification, calling/texting rules, registration requirements, quiet hours where applicable, and legally required disclosures.

16. Voice Recording and Transcription

You may not record, monitor, transcribe, analyze, or retain a communication using the Services unless you have lawful authority and have provided any legally required notice and obtained any legally required consent.

You may not configure recording or transcription to intentionally evade one-party/all-party consent laws, employee-monitoring laws, wiretap laws, or other applicable communications/privacy requirements.

17. Spam, Manipulative Growth, and Platform Abuse

You may not use the Services for bulk unsolicited messaging, artificial engagement, fake reviews, coordinated inauthentic behavior, account farming, referral abuse, fabricated leads, deceptive lead generation, or manipulation of third-party ranking/reputation systems in violation of law or platform rules.

18. Financial Fraud, Payments, and Commerce Abuse

You may not use the Services to facilitate fraudulent payments, card testing, chargeback fraud, false refunds, unauthorized transactions, fake orders, merchant impersonation, laundering, unlawful financial schemes, or manipulation of transaction records.

You may not direct End Users to transmit full payment credentials through channels not expressly designed and approved for such information.

19. Gambling, Regulated Goods, and Restricted Commerce

You may not use the Services to facilitate transactions or promotions involving goods, services, or activities that are unlawful in the applicable jurisdiction or prohibited by the applicable payment, communications, or platform provider.

Activities involving gambling, controlled substances, firearms, alcohol, nicotine, pharmaceuticals, financial products, or other regulated categories require Customer to establish legality and obtain all required licenses, approvals, age gates, disclosures, and Sloancode authorization where the applicable product requires it.

20. Intellectual Property and Proprietary Rights

You may not use the Services to knowingly infringe or misappropriate copyright, trademark, patent, trade-secret, publicity, privacy, database, or other proprietary rights.

• upload or distribute content you lack authority to use;
• misappropriate confidential information, trade secrets, source code, credentials, or proprietary datasets;
• remove rights-management information or proprietary notices unlawfully;
• use the Services to counterfeit goods, forge licensing evidence, or falsely claim ownership or authorization.

21. Defamation and Harmful Falsehoods

You may not knowingly use the Services to create or disseminate materially false factual allegations about identifiable persons or organizations where doing so is unlawful, defamatory, fraudulent, or intended to cause wrongful harm.

Customers using AI-generated summaries, profiles, scores, or reports about individuals must implement reasonable verification appropriate to the consequences of error.

22. Political, Electoral, and Civic Integrity

You may not use the Services to unlawfully interfere with voting, election administration, voter registration, ballot access, vote counting, or other protected civic processes.

You may not impersonate candidates, election officials, government agencies, or public officials in a materially deceptive manner intended to mislead people about voting or official government action.

Any political or electoral use must comply with applicable campaign, advertising, communications, disclosure, synthetic-media, and election laws and any product-specific restrictions imposed by Sloancode.

23. Government and Law-Enforcement Uses

Governmental and law-enforcement Customers may use the Services only within lawful authority and the scope expressly contracted.

Unless expressly approved in writing, the Services may not be used for real-time biometric mass surveillance, predictive policing that unlawfully profiles protected groups, autonomous use of force, or determination of criminal guilt.

Sloancode may require additional contractual, security, privacy, and human-oversight terms for governmental deployments.

24. Employment and Workforce Monitoring

You may not use the Services for unlawful employee surveillance, covert monitoring, discriminatory scoring, or automated employment decisions that violate applicable law.

Where workplace AI is used, Customer is responsible for legally required notices, consents, assessments, bias testing, access controls, retention rules, and human review.

25. Housing, Property Management, and Tenancy

Property Management AI and related capabilities may assist operational workflows but may not be used to unlawfully discriminate in housing or to make prohibited automated decisions concerning admission, tenancy, rent, accommodations, notices, eviction, or resident rights.

Customer remains responsible for fair-housing, tenant-protection, notice, screening, accommodation, recordkeeping, and human-review obligations.

26. Healthcare and Consumer Health Information

Unless expressly approved by Sloancode for the applicable product and contractual framework, the Services may not be used to Process protected health information subject to HIPAA or specialized consumer health data requiring controls not included in the Service.

The Services may not be represented as providing medical diagnosis or treatment unless expressly designed, validated, and lawfully authorized for that purpose.

27. Restaurant and Food-Service Safety

Restaurant AI may assist with ordering, menus, reservations, customer communications, and operations, but Customer remains responsible for food safety, allergen information, ingredient accuracy, menu accuracy, alcohol restrictions, age verification, fulfillment, refunds, and legally required consumer disclosures.

You may not configure AI to fabricate ingredient, allergy, dietary, or safety information when authoritative information is unavailable.

28. Field Services, Facilities, Construction, and Physical Operations

You may not rely on Sloancode AI as the sole authority for structural, electrical, mechanical, environmental, fire/life-safety, occupational-safety, building-code, permit, inspection, or other regulated physical-world determinations.

AI recommendations must not be used to bypass required licensed professionals, inspections, permits, safety procedures, lockout/tagout requirements, or site controls.

29. Agentic AI and Tool-Use Restrictions

You are responsible for the permissions and tools granted to AI agents. You may not deliberately configure an agent with broader authority than reasonably necessary for its authorized business function.

• permit an agent to access systems, records, accounts, or credentials without authorization;
• configure an agent to bypass approval gates, spending limits, segregation-of-duties controls, or legally required human review;
• use an agent to conceal its actions, falsify audit logs, or suppress legally required records;
• direct an agent to repeatedly retry prohibited actions or route around a safety/control refusal;
• provide production secrets or unrestricted administrative credentials to an agent when narrower scoped credentials are reasonably available.

Higher-risk agent actions should use least privilege, scoped tools, transaction limits, human approval, audit logging, and escalation appropriate to the consequences of error.

30. Customer Integrations and Third-Party Platforms

You may connect only systems and accounts you are authorized to access. You may not use integrations to circumvent a Third-Party Service’s security, access, privacy, contractual, or technical restrictions.

Customer is responsible for compliance with lawful third-party platform rules applicable to Customer’s use. Sloancode may disable an integration where necessary to address abuse, legal requirements, or material platform risk.

31. API, Automation, Scraping, and Rate-Limit Abuse

You may not use APIs, bots, automation, or scripts to evade usage limits, overload the Services, scrape non-public information, enumerate accounts, harvest credentials or Personal Data, or interfere with normal operation.

You may not rotate accounts, keys, tenants, IP addresses, or other identifiers for the purpose of circumventing contractual, entitlement, safety, or technical limits.

32. Reverse Engineering and Model Extraction

Except to the extent a restriction is prohibited by law, you may not reverse engineer, decompile, disassemble, extract, reconstruct, discover, or attempt to derive non-public source code, model weights, system prompts, safety mechanisms, proprietary datasets, algorithms, or underlying architecture.

You may not systematically query the Services to extract or replicate non-public model behavior, proprietary prompts, confidential configuration, or Sloancode intellectual property for a competing service.

33. Service Integrity and Interference

You may not interfere with the availability, integrity, confidentiality, or performance of the Services, including by excessive automated requests, resource exhaustion, malicious payloads, denial-of-service activity, or deliberate triggering of failures.

You may not use the Services in a manner that materially degrades service for other customers or imposes abnormal infrastructure load inconsistent with purchased capacity.

34. Credential and Access Abuse

You may not obtain, sell, share, transfer, or use credentials, API keys, tokens, or sessions without authorization.

You may not knowingly permit access by a terminated user, unauthorized third party, or person prohibited by applicable sanctions or export restrictions.

35. Circumvention of Safety and Compliance Controls

You may not intentionally bypass, disable, tamper with, or defeat Sloancode safety systems, entitlement controls, privacy controls, content controls, consent mechanisms, audit logging, security controls, rate limits, approval gates, or other protective mechanisms.

Prompting, encoding, obfuscation, multi-step routing, external tools, or agents may not be used for the purpose of obtaining functionality that is prohibited by this AUP.

36. False Compliance Evidence and Audit Manipulation

You may not use the Services to fabricate, alter, backdate, conceal, or misrepresent compliance evidence, audit records, consent logs, security records, test results, approvals, certifications, incident histories, or regulatory documentation.

Legitimate correction of inaccurate records must preserve appropriate history and auditability where required.

37. Sanctions, Export Controls, and Restricted Parties

You may not access, export, re-export, transfer, supply, or use the Services in violation of U.S. economic sanctions, export controls, or other applicable trade restrictions.

You may not use the Services for the benefit of a blocked or prohibited party or in a prohibited jurisdiction where the applicable transaction or service is not authorized.

Customer must provide information reasonably requested for sanctions/export compliance and must not structure transactions or access to evade geographic, end-user, or end-use restrictions.

38. Customer Content and Data Legality

You may submit Customer Content only if you have lawful authority to possess, use, disclose, and instruct Sloancode to Process it.

You may not knowingly submit stolen datasets, unlawfully scraped Personal Data, trade secrets obtained without authorization, illegal recordings, unlawfully intercepted communications, or content whose possession or processing is itself unlawful.

39. Prohibited Representations About Sloancode

You may not falsely represent that Sloancode endorses, certifies, licenses, guarantees, audits, supervises, or assumes responsibility for Customer’s business, AI decisions, compliance, products, or services.

You may not claim that Sloancode or Sloancode AI holds a certification, regulatory status, partnership, or approval that Sloancode has not expressly confirmed in writing.

40. No Resale or Unauthorized Service Bureau

Unless expressly permitted by the Agreement, you may not resell, sublicense, rent, lease, white-label, timeshare, or provide the Services as a service bureau to unrelated third parties.

Authorized channel, reseller, embedded, OEM, or managed-service arrangements require separate written terms.

41. Attempts, Assistance, and Evasion

A prohibition includes attempts to perform the prohibited activity and knowingly providing material assistance, infrastructure, credentials, automation, prompts, workflows, or instructions designed to enable another person to perform it.

You may not divide a prohibited workflow across multiple accounts, tools, agents, channels, or providers to evade this AUP.

42. Monitoring and Abuse Detection

Sloancode may use automated and human measures reasonably designed to detect security threats, abuse, fraud, violations of this AUP, or risks to the Services, consistent with the Agreement, Privacy Policy, DPA, and applicable law.

Sloancode does not undertake a general obligation to monitor all Customer Content and does not assume responsibility for Customer’s compliance merely because technical monitoring exists.

43. Investigation and Cooperation

Sloancode may investigate suspected violations and may request information reasonably necessary to determine whether use is authorized, lawful, or safe.

Customer will reasonably cooperate with an investigation involving its account, including preserving relevant information where legally required and addressing compromised credentials or configurations.

Sloancode may preserve information as required by law, valid legal process, security needs, or legitimate investigation requirements.

44. Enforcement Measures

Depending on severity, urgency, history, and risk, Sloancode may use proportionate enforcement measures, including warning; requiring remediation; disabling a feature, integration, key, campaign, workflow, agent, or user; applying rate limits; quarantining content or functionality; suspending affected Services; terminating access; or making reports required by law.

Sloancode may take immediate action without prior notice where reasonably necessary to prevent imminent harm, stop unlawful activity, protect systems or third parties, comply with law, or address a material security threat.

Where practicable for non-urgent violations, Sloancode will seek to provide notice and a reasonable opportunity to cure.

45. Appeal and Reconsideration

Where Sloancode materially restricts or terminates a paid Customer for an alleged AUP violation and an appeal is legally or contractually appropriate, Customer may request reconsideration through [CONFIRM AUP/LEGAL CONTACT].

Sloancode may require relevant facts, remediation evidence, and assurance that the conduct will not recur. An appeal does not require Sloancode to restore functionality while a material risk remains.

46. Emergency and Legal Reporting

Sloancode may report conduct or information to law enforcement, regulators, emergency services, child-safety reporting organizations, communications providers, security partners, or other appropriate entities where required by law or where legally permitted and reasonably necessary to address imminent serious harm, fraud, abuse, or security threats.

Nothing in this AUP creates a duty to report beyond applicable law or an express contractual commitment.

47. Changes to this AUP

Sloancode may update this AUP prospectively to address new Services, new abuse patterns, legal developments, safety risks, technology changes, or platform requirements.

Material changes will be communicated in accordance with the Agreement and applicable law. Changes will not retroactively convert previously authorized conduct into a contractual violation.

Where a change materially restricts a committed enterprise use case, applicable negotiated terms and change provisions in the Agreement will govern.

48. Relationship to Other Terms

This AUP supplements the Sloancode AI Terms of Service/MSA, DPA, Privacy Policy, Voice & Audio Privacy Notice, Voice/Communications Terms, Order Forms, and applicable product supplements.

If a signed Customer agreement expressly permits a use otherwise restricted here, the signed agreement controls only to the extent the exception is lawful and specifically identified.

No Customer agreement may authorize conduct that Sloancode is legally prohibited from facilitating.

49. Contact and Reporting Abuse

Suspected abuse or violations may be reported to:

Sloancode Technology Group LLC
Attn: Sloancode AI Trust / Legal
99 Wall Street
Suite 3772
New York, NY 10005
United States

Abuse / Trust Contact:
Contact:

Legal: legal@sloancode.com

Support: support@sloancode.com

Privacy: privacy@sloancode.com