Acceptable Use Policy

This Acceptable Use Policy ("AUP") supplements the Terms of Service at /terms for Apograph. Capitalized terms have the meaning given there. Customer is responsible for compliance by each of its Authorized Users.

Permitted use

• Drafting and reviewing outbound correspondence in your own name, or in a name you are authorized in writing to use.
• Researching recipients you are lawfully permitted to contact, using information you are permitted to hold.
• Running voice and claim gates on that work before a human sends it.

Your responsibilities as sender

• Sending law. You are responsible for compliance with anti-spam, marketing, telecommunications, and data-protection law in each recipient's jurisdiction, including CAN-SPAM, CASL, and GDPR and PECR where they apply. This includes accurate sender identification, a lawful basis for contact, and honoring opt-out and do-not-contact requests promptly.
• Recipient data. You may upload or process personal data about recipients only if you obtained it lawfully and in compliance with the terms of its source. Data obtained by scraping, purchased in violation of applicable law, or exported in breach of a source platform's terms may not be used. A Customer's own LinkedIn connection export is permitted; scraping LinkedIn is not. Do not submit sensitive personal data (health, biometric, financial account, government identifiers, or similar) about any recipient.
• Human review. Every draft must be read and approved by a human before it is sent. Do not build or use tooling that sends Output without human review.

Prohibited use

You may not use the Service to:

• send spam, phishing, fraudulent, deceptive, defamatory, harassing, or otherwise unlawful communications;
• impersonate any real person or organization, or use a name or voice you are not authorized to use;
• circumvent or disable voice or claim gates, or present a Held or unverified draft as Cleared or verified;
• misrepresent Output as having been written or sent by Genstrata, or as having been independently verified when it was not;
• attack, probe, scrape, overload, or disrupt the Service, or access another tenant's data;
• share, transfer, or resell invitations or access, or bypass invite-only controls;
• reverse engineer the Service, or use Output to train or improve a competing voice, drafting, or verification model;
• develop malware, generate or refine disinformation, or facilitate any activity that is illegal where you or the recipient are located;
• contact anyone who has told you, or told us, that they do not wish to be contacted.

Regulated professions

If you work in a regulated profession (law, insurance, financial services, healthcare, or similar), you are responsible for ensuring that your use of the Service and every message you send complies with the rules of your profession, including rules on solicitation, advertising, and confidentiality.

Security research

We welcome good-faith security research. Report vulnerabilities to security@genstrata.com before any public disclosure and give us a reasonable period to remediate. Do not access, modify, or exfiltrate other tenants' data, degrade the Service, or use social engineering against our staff or customers. We will not pursue legal action against researchers who comply with this section, and we will work with you on coordinated disclosure.

Enforcement

We may hold drafts, suspend features, or suspend or terminate access for actual or suspected violation of this AUP, with or without notice depending on severity. We may report unlawful conduct to law enforcement. We may update this AUP; material changes will be notified as described in the Terms.