Acceptable Use Policy

Arbol Artificial Intelligence, Inc.
A Delaware C Corporation

Version 2.0
Effective Date: January 3, 2026
Last Updated: January 3, 2026

1. Introduction

This Acceptable Use Policy ("AUP") governs your use of the services provided by Arbol Artificial Intelligence, Inc. ("Company," "we," "us," or "our"), including our AI-powered voice communication platform (collectively, the "Services").

This AUP is incorporated by reference into our Terms of Service. Capitalized terms not defined herein have the meanings assigned in the Terms of Service.

By using our Services, you agree to comply with this AUP. Violations may result in immediate suspension or termination of your account without refund.

2. Purpose and Scope

2.1 Purpose

The purpose of this AUP is to:

• Protect our users, platform integrity, and reputation

• Ensure our Services are used for legitimate business purposes only

• Prevent misuse of AI-powered voice communication technology

• Maintain compliance with applicable United States laws

• Support responsible and ethical use of automated communication tools

2.2 Scope

This AUP applies to all users of our Services, regardless of:

• Geographic location

• Industry or business type

• Volume of usage

• Account type or subscription level

3. Core Principles

3.1 Legitimate Business Use

Our Services are designed exclusively for legitimate business communications. You must:

• Use the Services only for lawful, ethical business purposes

• Operate with transparency and good faith

• Respect the rights and privacy of call recipients

• Obtain proper consent before making automated calls

3.2 Compliance is Your Responsibility

You are solely responsible for ensuring your use of the Services complies with all applicable laws and regulations in your jurisdiction, including:

• United States federal laws (TCPA, TSR, CAN-SPAM Act, etc.)

• State-specific telemarketing and consumer protection laws

• Latin American telecommunications and data protection regulations

• Any other applicable international, national, or local laws

3.3 Zero Tolerance for Abuse

We maintain a zero-tolerance policy for:

• Spam and unsolicited bulk communications

• Harassment, fraud, or deceptive practices

• Illegal activities of any kind

• Violation of telecommunications regulations

4. Prohibited Uses

4.1 Illegal Activities

You ABSOLUTELY MAY NOT use the Services to:

• Conduct any activity that violates federal, state, or local laws

• Engage in fraud, identity theft, money laundering, or financial crimes

• Distribute, sell, or facilitate distribution of illegal goods or services

• Facilitate human trafficking, exploitation, or abuse

• Evade law enforcement or obstruct justice

• Violate export control or sanctions regulations

4.2 Spam and Unsolicited Communications

You ABSOLUTELY MAY NOT use the Services to:

• Send unsolicited bulk messages or robocalls without proper consent

• Make calls to numbers on Do Not Call registries without valid exemption

• Continue calling individuals who have requested to be removed from your contact list

• Use purchased or scraped contact lists without verified, documented consent

• Ignore or delay processing opt-out requests

• Circumvent spam filters or anti-abuse mechanisms

• Send communications that could reasonably be considered spam under applicable law

IMPORTANT: Our Services are NOT designed for cold calling or mass unsolicited outreach. You must have a pre-existing relationship or verified consent for each contact.

4.3 US Telecommunications Law Violations

You ABSOLUTELY MAY NOT use the Services to:

• Violate the Telephone Consumer Protection Act (TCPA), including:

  • Making calls using artificial or prerecorded voices without prior express written consent

  • Calling cell phones without proper consent

  • Using automated dialing systems without required consent

• Violate Do Not Call (DNC) regulations, including:

  • Calling numbers on the National Do Not Call Registry without exemption

  • Failing to maintain and honor internal Do Not Call lists

  • Calling outside permitted hours (before 8:00 AM or after 9:00 PM recipient's local time)

• Violate the Telemarketing Sales Rule (TSR), including:

  • Making misleading or deceptive claims

  • Failing to make required disclosures

  • Engaging in abusive telemarketing practices

• Caller ID spoofing for fraudulent, harmful, or deceptive purposes

• Violate state-specific telemarketing laws applicable in any jurisdiction where you operate

4.4 International Telecommunications Compliance

If you operate in or call recipients in Latin America or other international jurisdictions, you ABSOLUTELY MAY NOT:

• Violate local telecommunications regulations and consumer protection laws

• Fail to comply with local Do Not Call or Do Not Disturb registries

• Ignore local data protection and privacy requirements (e.g., LGPD in Brazil)

• Make calls without understanding and complying with local consent requirements

• Operate without required telemarketing licenses or registrations

YOU ARE RESPONSIBLE for understanding and complying with the specific laws of each country where your calls originate or terminate.

4.5 Call Recording Violations

You ABSOLUTELY MAY NOT:

• Record calls without obtaining required consent under applicable state or federal law

• Fail to provide required recording disclosures where legally mandated

• Use call recordings for purposes not disclosed to or consented by participants

• Share, distribute, or sell call recordings without proper authorization

• Violate wiretapping or eavesdropping laws

NOTE: Call recording laws vary significantly by state and country. Consult legal counsel to ensure compliance.

4.6 Harassment and Abusive Behavior

You ABSOLUTELY MAY NOT use the Services to:

• Harass, threaten, stalk, intimidate, or abuse any person

• Make repeated unwanted calls to the same individual

• Use profane, obscene, or abusive language

• Contact individuals who have explicitly requested no further contact

• Engage in any form of bullying or coercive behavior

• Send threatening or disturbing communications

• Target individuals based on protected characteristics

4.7 Fraud and Deception

You ABSOLUTELY MAY NOT use the Services to:

• Impersonate any person, business, government entity, or organization

• Create false or misleading caller identities

• Make false, misleading, or unsubstantiated claims about products, services, or offers

• Operate pyramid schemes, Ponzi schemes, or multi-level marketing scams

• Conduct phishing, pretexting, or social engineering attacks

• Perpetrate advance-fee fraud or similar scams

• Misrepresent the nature of the call (e.g., claiming a human is calling when using AI)

• Use deceptive practices to obtain personal or financial information

4.8 Privacy and Data Protection Violations

You ABSOLUTELY MAY NOT:

• Collect, use, or share personal information without proper legal basis and consent

• Violate data protection laws (GDPR, CCPA, LGPD, etc.) applicable to your operations

• Access, use, or disclose information without authorization

• Sell or share personal data with third parties without consent

• Fail to honor data subject rights (access, deletion, portability, etc.)

• Conduct unauthorized surveillance or monitoring

• Scrape, harvest, or collect data from the Services or third-party sources without permission

4.9 Harmful and Illegal Content

You ABSOLUTELY MAY NOT use the Services to transmit, distribute, or promote:

• Content depicting, promoting, or facilitating violence or physical harm

• Hate speech or content that incites discrimination based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics

• Child sexual abuse material (CSAM) or content harmful to minors

• Sexually explicit or pornographic content

• Content promoting self-harm, suicide, or eating disorders

• Terrorist content or violent extremism

• Defamatory, libelous, or slanderous statements

• Content that infringes intellectual property rights (copyright, trademark, patent, trade secret)

4.10 Technical Abuse and Security Violations

You ABSOLUTELY MAY NOT:

• Attempt to gain unauthorized access to the Services, our systems, or other users' accounts

• Probe, scan, or test vulnerabilities in the Services or related infrastructure

• Bypass, circumvent, or disable security measures, authentication, or access controls

• Introduce malware, viruses, trojans, worms, or other malicious code

• Launch denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks

• Interfere with or disrupt the Services, servers, or networks

• Use bots, scripts, or automation tools not explicitly authorized by us

• Scrape, crawl, or extract data from the Services without permission

• Reverse engineer, decompile, disassemble, or attempt to discover source code

• Overload our systems through excessive API calls or resource consumption

4.11 Unauthorized Resale and Sharing

You ABSOLUTELY MAY NOT:

• Resell, sublicense, or redistribute the Services without our prior written authorization

• Share your account credentials or API keys with unauthorized third parties

• Allow others to use your account in violation of our Terms of Service

• Operate a service bureau or use the Services on behalf of third parties without agreement

• Create derivative products or services based on our platform without authorization

5. Industry-Specific Compliance Requirements

5.1 Healthcare (HIPAA and Related Laws)

If you use the Services for healthcare-related communications, you MUST:

• Ensure full compliance with HIPAA, HITECH, and applicable state health privacy laws

• Execute a Business Associate Agreement (BAA) with us before transmitting any Protected Health Information (PHI)

• Implement appropriate safeguards for PHI

• Obtain all required patient authorizations and consents

• Provide required privacy notices and disclosures

NOTE: Our standard Services may not be suitable for HIPAA-regulated use cases. Contact us to discuss compliant options.

5.2 Financial Services

If you use the Services for financial communications, you MUST:

• Comply with all applicable financial regulations (SEC, FINRA, CFTC, state banking laws, etc.)

• Maintain required recordkeeping and supervision procedures

• Provide accurate and non-misleading information about financial products

• Not make fraudulent claims about investment returns or performance

• Comply with consumer protection laws (TILA, FCRA, EFTA, etc.)

5.3 Debt Collection

If you use the Services for debt collection, you MUST:

• Comply with the Fair Debt Collection Practices Act (FDCPA)

• Comply with state debt collection laws in all applicable jurisdictions

• Provide all required disclosures and mini-Miranda warnings

• Not harass, abuse, threaten, or use unfair practices against consumers

• Honor consumer rights including validation and dispute rights

• Respect communication time restrictions and venue limitations

5.4 Political Campaigns and Advocacy

If you use the Services for political or advocacy communications, you MUST:

• Comply with federal and state campaign finance and election laws

• Provide required sponsor identification and disclosures

• Comply with rules governing robocalls for political purposes

• Not engage in voter suppression, election interference, or misinformation

• Maintain required records of political communications

5.5 Education

If you use the Services to communicate with students or educational institutions, you MUST:

• Comply with FERPA (Family Educational Rights and Privacy Act)

• Comply with COPPA (Children's Online Privacy Protection Act) when applicable

• Obtain appropriate parental consent for communications with minors

• Protect student privacy and educational records

6. Your Responsibilities

6.1 Know and Follow the Law

You are responsible for:

• Understanding all laws and regulations applicable to your use of the Services in every jurisdiction where you operate

• Consulting with qualified legal counsel to ensure compliance

• Staying current with regulatory changes that affect your operations

• Implementing policies and procedures to ensure ongoing compliance

WE DO NOT PROVIDE LEGAL ADVICE. Compliance is entirely your responsibility.

6.2 Obtain and Document Consent

You MUST:

• Obtain proper, legally valid consent before making automated calls or sending messages

• Maintain detailed records documenting consent (method, date, scope, etc.)

• Ensure consent is clear, conspicuous, and not bundled with unrelated terms

• Use opt-in mechanisms rather than opt-out where required by law

• Provide consent records upon request by regulators or during disputes

6.3 Maintain Do Not Call Lists

You MUST:

• Maintain internal Do Not Call and Do Not Contact lists

• Honor all opt-out and unsubscribe requests immediately

• Process removal requests within the legally required timeframe (typically 30 days or less)

• Scrub your contact lists against the National Do Not Call Registry (for US operations)

• Respect company-specific Do Not Call requests

6.4 Monitor and Supervise

You are responsible for:

• Monitoring all AI Employee calls for quality, compliance, and appropriateness

• Reviewing call recordings and transcripts regularly

• Supervising all Authorized Users and ensuring they comply with this AUP

• Implementing quality control and compliance monitoring processes

• Taking immediate corrective action when violations are detected

• Training your team on compliance requirements

6.5 Test Before Deploying

You MUST:

• Thoroughly test AI Employees in a controlled environment before live deployment

• Verify that AI scripts and prompts comply with applicable regulations

• Ensure AI Employees handle edge cases and difficult scenarios appropriately

• Have human fallback and escalation procedures in place

6.6 Accurate Caller Identification

You MUST:

• Use accurate caller ID information that reflects your actual business identity

• Not spoof or manipulate caller ID for deceptive purposes

• Ensure compliance with Truth in Caller ID Act and related regulations

7. Reporting Violations

7.1 How to Report

If you become aware of any violation of this AUP by another user, please report it immediately to:

Email: tomas@arbolai.co
Subject Line: AUP Violation Report

Include in your report:

• Detailed description of the violation

• Date, time, and circumstances

• Any evidence (call recordings, transcripts, screenshots, etc.)

• Contact information for follow-up

7.2 Our Commitment

We take all reports seriously and will:

• Investigate promptly and thoroughly

• Take appropriate action based on findings

• Cooperate with law enforcement and regulatory authorities as required

• Protect reporters from retaliation to the extent possible

8. Enforcement

8.1 Investigation Rights

We reserve the right to investigate suspected violations of this AUP. We may:

• Review your account activity, call logs, and usage patterns

• Listen to call recordings and review transcripts

• Request additional information, documentation, or explanations

• Suspend access during investigations

• Cooperate with law enforcement and regulatory authorities

8.2 Enforcement Actions

Violations of this AUP may result in immediate action, including:

• Warning and corrective action requirement

• Temporary suspension of account access

• Permanent termination of account and Services

• Reporting to law enforcement, regulatory authorities, or industry partners

• Legal action to recover damages and enforce our rights

• Cooperation with regulatory investigations and proceedings

8.3 Discretion

We have sole discretion to determine whether a violation has occurred and what action to take. Our decision is final.

8.4 No Liability for Enforcement

We are not liable for any actions we take to enforce this AUP, including but not limited to:

• Account suspension or termination

• Service interruption

• Loss of data or access

• Disclosure of information to authorities

• Any resulting business or financial impact

8.5 No Refunds for Violations

Accounts suspended or terminated for AUP violations are not entitled to refunds for any prepaid fees or unused Services.

9. Updates and Changes

9.1 Right to Modify

We may update this AUP at any time to reflect:

• Changes in applicable laws or regulations

• New features or Services

• Evolving industry standards and best practices

• Lessons learned from enforcement actions

9.2 Notification

We will notify you of material changes to this AUP by:

• Posting the updated AUP on our website

• Sending email notification to your account email address for significant changes

• Providing in-app notifications where applicable

9.3 Acceptance

Your continued use of the Services after changes take effect constitutes acceptance of the updated AUP. If you do not agree with the changes, you must stop using the Services.

10. Governing Law

This AUP is governed by the laws of the State of Delaware and the United States of America, without regard to conflict of law principles. You consent to the exclusive jurisdiction of courts located in Delaware for any disputes arising from this AUP.

11. Contact Information

For questions about this AUP or to report violations:

Arbol Artificial Intelligence, Inc.
131 Continental Dr Suite 305
Newark, DE 19713
United States

Email: tomas@arbolai.co

For compliance questions, please consult your own legal counsel. We cannot provide legal advice regarding your specific compliance obligations.

12. Acknowledgment and Agreement

BY USING OUR SERVICES, YOU ACKNOWLEDGE AND AGREE THAT:

• You have read and understood this Acceptable Use Policy in its entirety

• You will comply with all provisions of this AUP

• You are solely responsible for ensuring your use complies with applicable laws in your jurisdiction

• You will not use our Services for spam, illegal activities, or prohibited purposes

• You understand that violations may result in immediate termination without refund

• You will consult legal counsel for compliance matters rather than relying on us for legal advice

Failure to comply with this AUP may result in immediate termination of your account and potential legal action.

Effective Date: January 3, 2026

This Acceptable Use Policy is designed to ensure responsible and lawful use of our AI-powered communication platform. We reserve all rights to enforce this policy and protect the integrity of our Services.