Acceptable Use Policy

• Contact only people you have a lawful basis to contact. For marketing messages that means their consent, or another basis the law allows where you are and where they are.
• Honour opt-outs at once (US law allows ten business days; we apply them immediately). Every sales or marketing email sent through Kairoqcarries an unsubscribe link; don't remove it, and never email someone who has unsubscribed, bounced or complained.
• Be truthful about who you are and why you're writing: no misleading sender names, subjects or claims, and no impersonation.
• Don't buy, scrape or rent contact lists to mail them, and don't send unsolicited bulk messages. Follow the rules of the channel: WhatsApp's business and opt-in policies, and the sending rules of Gmail, Outlook and your own mail provider.
• Commercial email needs your real postal address and a working opt-out (US CAN-SPAM and similar laws). Add your address in Settings → Invoicing & GST: we print it in the footer of automated email. For calls and texts you also need the recipient's consent where the law demands it (US TCPA and state rules, India's TRAI telemarketing rules and Do Not Disturb register, Canada's CASL, the UK's PECR).
• We enforce sending limits, may pause sending that harms deliverability or draws complaints, and may require you to fix a list or process before it resumes.

• Record or transcribe a call or meeting only with the consent the law requires. Many places, including several US states (for example California, Florida and Illinois), the EU, the UK and India, need every participant's consent or a clear notice. Tell people at the start, and stop if someone objects.
• Open and click tracking in email is off by default. Switch it on only where you may: the EU and UK generally require the recipient's prior consent for it.
• Don't use the service to secretly monitor anyone, or to track people's location or devices.

• Don't put protected health information in Kairoq, or use it as a HIPAA-covered system. We don't offer a business associate agreement.
• Don't use it for children's data without the parental consent the law requires, or to market to children (under 13 in the US, 16 or the local digital age of consent in the EU, 18 in India).
• Don't use AI features for employment, credit, insurance, education or other decisions about people with legal or similar effect, for social scoring, for inferring emotions at work or school, or for any practice the EU AI Act prohibits.
• Don't use the service if you or the people you serve are subject to sanctions (see the Terms), and don't use it for unlawful gambling, weapons or illegal goods.

• Enter personal data only if you have the right to, and keep it accurate and relevant. You are responsible for requests from the people it describes.
• Don't store payment card numbers, CVVs, passwords or government ID numbers in notes or fields. Don't put in data you have no right to use, or unlawful content of any kind.
• Be careful with sensitive personal data (health, biometrics, caste, religion, sexual life, children's data): only where the law allows and you truly need it.

• Don't try to break, probe, overload or bypass the service or its limits: no load tests or scanners without our written permission, no automated mass sign-ups or mass record creation, no guessing other people's passwords.
• Don't access, or try to access, other organizations' data, or use the service to build a competing product or resell access.
• Don't upload malware or content that infringes others' rights, defames or harasses, or is unlawful.
• Don't share credentials. Use the invitation, single sign-on and roles built into the product so each person has their own account.

• Don't use AI features to generate deceptive, harassing or unlawful content, or to try to make the assistant ignore its rules or reveal other people's data.
• A person must review AI drafts before anything is sent to a customer, and important decisions about people need human review.

We look at the context and respond in proportion: a warning, limiting a feature, pausing sending, suspending a user or workspace, or ending the agreement. For serious or repeated breach, or where the law requires, we may act without notice. We may share information with authorities where the law requires.

If you think this policy is being broken, report it to us through the Support page.