Acceptable Use Policy

1. Lawful and honest use

• Do not break any law or infringe anyone's rights, including intellectual property and privacy rights.
• Do not use Zoft to defraud, deceive or impersonate a person, company, government body or brand.
• Do not create or distribute content that is unlawful, harassing, threatening, hateful, sexually explicit involving minors, or that incites violence.
• Do not use Zoft where failure could cause death, injury or serious harm, such as emergency dispatch, medical diagnosis or safety-critical control.

2. Calls, messages and recording

• Get the consent and give the disclosures the law requires before calling, texting, emailing or recording anyone. This includes the TCPA and Telemarketing Sales Rule in the United States, CASL and the National Do Not Call List in Canada, TRAI rules in India, PECR in the UK and ePrivacy rules in the EU.
• Do not use agents for robocalling, spam, or contacting numbers on a do-not-call list. Do not spoof caller ID.
• Tell people they are speaking to an automated system where the law requires it, and let them reach a human when they ask.
• Record a call only with the consent required in every place the people on the call are located.
• Follow the policies of the carriers and messaging channels you connect, including WhatsApp.

3. Data and regulated information

• Only process personal data you have a lawful basis to process, and honour requests from the people it relates to.
• Do not send protected health information (PHI) through Zoft until you have signed a Business Associate Agreement (BAA) with us. We sign one on request.
• Do not process payment card data, biometric identifiers or children's data unless we have agreed in writing.
• Do not collect personal data at scale from websites or people who have not agreed to it.

4. Agents, Bots, browser agents and hosted sites

• Keep a person in the loop for consequential actions. Use the approvals, spend caps and kill switch described in Bot safety.
• Only operate browser agents on sites and accounts you own or are authorised to use, and follow those sites' terms. Do not evade access controls or defeat CAPTCHAs on sites that prohibit automation.
• Only connect accounts and credentials you are entitled to use, with the narrowest scopes the task needs.
• Sites you build with Zoft must follow this policy. Do not host phishing, malware, counterfeit goods, unlicensed regulated products or content that infringes others' rights.

5. Protecting the platform

• Do not probe, scan or attack the service, or bypass rate limits or access controls. Report vulnerabilities to security@zoft.ai.
• Do not reverse-engineer the service, or use it or its outputs to build a competing product or to train a model.
• Do not resell or white-label the service without a written partner agreement with us.
• Do not share credentials or create accounts by automated means.

6. Enforcement and reporting

If we reasonably believe something breaks this policy, creates risk for others, or is the subject of a lawful demand, we may investigate, suspend or remove an agent, site, workspace or account. Where practical we tell you first and work with you to fix it. We may report unlawful activity to authorities. To report misuse, use the abuse page or write to support@zoft.ai. For legal notices write to privacy@zoft.ai.

This policy is published by Zoft.AI Private Limited. Read it with the Privacy Policy and our Trust page.