Acceptable Use Policy

This policy applies to every trial, paid, and invited user, and to every integration, agent, workflow, and send that runs under your workspace. If you are an agency, it applies to work you do for clients on the platform.

NowStack is responsible for operating the platform and for enforcing these rules. You are responsible for how you and anyone you invite use the platform, including:

• Content stored in tasks, CRM, inbox, files, and agent artifacts.
• Messages, emails, posts, and other outbound you or an agent send after your approval or with your credentials.
• Prompts, connected accounts, and data you expose to model providers.
• Compliance with email, SMS, telemarketing, recording, privacy, advertising, and industry rules that apply to your business (including CAN-SPAM, TCPA, GDPR, and similar laws where they apply).
• Your clients’ and end users’ rights in data you upload.

Human-in-the-loop review is a product control, not a transfer of legal duty to NowStack. If an agent drafts something and you (or an automation you enabled) send it, that send is yours.

• Illegal content under applicable law.
• Sexual or exploitative content involving minors, or any CSAM. We will report and preserve as required by law.
• Content that infringes intellectual property, privacy, or publicity rights.
• Malware, exploit kits, or instructions whose primary purpose is unauthorized access to systems you do not own.
• Content that promotes violent crime, terrorism, or targeted harassment.
• Regulated offerings you are not licensed to provide (including certain financial, medical, or legal representations presented as professional advice).

• Breaking the law or asking the service to break it for you.
• Unsolicited bulk email, SMS, or social spam; purchased lists you do not have permission to message; spoofing headers or forged identity.
• Phishing, scams, or deceptive funnels.
• Attacking, scanning, or load-testing systems you do not own or do not have written permission to test — including NowStack, other tenants, or third-party APIs.
• Bypassing tenant isolation, rate limits, billing, approvals, or authentication.
• Sharing logins in a way that evades seats, or reselling the service without a written partner agreement.
• Scraping the product beyond ordinary interactive use, or using the API to exfiltrate another customer’s data.
• Reverse engineering except to the limited extent a statute forbids that restriction.
• Using agents for high-risk automated decisions about individuals (credit, employment, housing, insurance, or similarly significant legal effects) without a qualified human decision-maker and a lawful basis.
• Uploading data you do not have the right to process.

Agents act with your workspace context and, when you connect them, your third-party credentials. You will keep approval gates on for customer-facing sends unless we have agreed otherwise in writing. You will not disable safety controls in order to spam, defraud, or evade platform limits.

We may investigate reports and technical signals. If we find a violation, or if we reasonably believe continued access creates legal, security, or tenant risk, we may do any of the following, with or without prior notice:

• Block a send, workflow, integration, or agent.
• Suspend the user or the entire workspace.
• Permanently terminate (“boot”) the account and invited users.
• Delete or quarantine content.
• Report the matter to payment networks, vendors, or law enforcement.
• Refuse future trials from the same people, companies, or payment methods.

Termination for cause does not require a refund of unused subscription time or credits, except where law says otherwise. We are not required to monitor all use; enforcement can be reactive.

If you believe we acted in error, write via /contact with the workspace name and what you want reviewed. We will consider good-faith appeals. We do not have to restore an account that still presents risk.

We may update this policy as products and laws change. Continued use after we post a new version is acceptance. The Terms explain how changes are published.