Acceptable Use Policy

1. PURPOSE AND SCOPE

This Acceptable Use Policy (the “Policy”) applies to every Customer, Authorized User, end user, contractor, agent, administrator, and other person who accesses or uses the HELIX Platform, Services, Documentation, APIs, communication tools, AI Features, integrations, websites, funnels, forms, automations, or related systems. Capitalized terms not defined in this Policy have the meanings assigned in the HELIX Master Services Agreement (“MSA”) or HELIX Platform Terms of Service (“Terms”).

Customer is responsible for the conduct of all Authorized Users and for all activity occurring through Customer accounts, credentials, phone numbers, domains, campaigns, integrations, and configurations, whether authorized by Customer or resulting from Customer’s failure to safeguard access.

2. GENERAL USE REQUIREMENTS

Users may use the Services only for legitimate business purposes, in accordance with applicable law, the HELIX Master Services Agreement, the HELIX Platform Terms of Service, this Policy, provider requirements, and all documentation or instructions supplied by HAVOK. Customer must maintain accurate account information, use commercially reasonable security practices, cooperate with abuse investigations, and promptly stop any activity identified by HAVOK as creating legal, security, operational, reputational, or provider risk.

A use is prohibited if it is unlawful, deceptive, abusive, harmful, infringing, unauthorized, materially disruptive, or reasonably likely to expose HAVOK, HELIX, a provider, a recipient, or another person to liability or harm, even if the activity is not expressly listed below.

3. ILLEGAL, FRAUDULENT, OR DECEPTIVE ACTIVITY

Users must not use the Services to engage in, facilitate, promote, conceal, or assist unlawful, fraudulent, or deceptive conduct, including:

Fraud, identity theft, impersonation, forgery, phishing, credential theft, payment fraud, chargeback fraud, or deceptive lead generation.

Misrepresenting a business, product, service, affiliation, authorization, price, offer, legal status, location, or identity.

Operating unlawful lotteries, pyramid schemes, chain-referral schemes, deceptive business opportunities, or prohibited gambling activities.

Collecting money, payment credentials, donations, investments, or sensitive information through false pretenses or material omissions.

Evading sanctions, export controls, court orders, law-enforcement restrictions, or legally binding regulatory requirements.

Using the Services to threaten, extort, blackmail, intimidate, stalk, harass, exploit, or defraud any person.

4. COMMUNICATIONS, MARKETING, AND CONSENT

4.1 Customer Responsibility

Customer controls the content, recipients, timing, frequency, targeting, and initiation of communications sent through the Services. HAVOK provides technology and related services but does not determine whether Customer has valid consent or a lawful basis to contact any recipient. Customer is solely responsible for obtaining, documenting, maintaining, and honoring all required permissions, consents, disclosures, opt-outs, suppression requests, and do-not-contact instructions.

4.2 Prohibited Communications Practices

Sending spam, unsolicited bulk communications, or messages to purchased, scraped, harvested, rented, or improperly shared lists.

Sending telemarketing calls, texts, prerecorded messages, ringless voicemail, or automated communications without legally sufficient consent or other lawful authority.

Ignoring STOP, unsubscribe, revocation, do-not-call, suppression, or similar requests, or making opt-out mechanisms difficult, misleading, or ineffective.

Using misleading caller ID, sender names, domains, reply addresses, routing data, subject lines, or message headers.

Sending communications outside legally permitted hours or at unreasonable frequency, or repeatedly contacting a person with intent to annoy, abuse, pressure, or harass.

Using shortened links, redirects, domains, or message content to conceal identity, destination, or a prohibited offer.

Sending content that violates carrier, telecom, email, messaging, social platform, payment processor, or industry rules.

Using another person’s consent records, brand, phone number, domain, or sending identity without authorization.

4.3 Compliance Framework

Customer must comply with all laws and rules applicable to its communications, which may include the Telephone Consumer Protection Act, Telemarketing Sales Rule, National and state Do Not Call requirements, CAN-SPAM Act, state mini-TCPA laws, privacy and consumer-protection laws, carrier registration requirements, and platform-specific messaging policies. Customer must maintain records reasonably sufficient to demonstrate compliance.

5. DATA, PRIVACY, AND SENSITIVE INFORMATION

Users must not collect, upload, disclose, process, or use personal information through the Services unless they have a lawful basis, have provided required notices, and have obtained all required rights and consents. Users must not use the Services to unlawfully monitor, profile, discriminate against, or make consequential decisions about individuals.

Unless HAVOK expressly agrees in a signed writing and the applicable Services are designed for that use, users must not submit or process:

Protected health information subject to HIPAA or similar health privacy laws.

Payment card data outside approved payment fields and PCI-compliant payment workflows.

Social Security numbers, government identification numbers, full financial account credentials, biometric identifiers, genetic data, precise geolocation, or similar highly sensitive data.

Data concerning children or minors where parental consent, age assurance, or specialized protections are required.

Passwords, authentication secrets, private keys, access tokens, or credentials except through designated secure fields or approved integration methods.

Information obtained through unlawful surveillance, scraping, tracking, or data brokerage practices.

6. SECURITY AND SYSTEM INTEGRITY

Users must not interfere with, compromise, test without authorization, or attempt to bypass the security, availability, integrity, or operation of the Platform or any connected system. Prohibited activity includes:

Introducing viruses, ransomware, malicious code, destructive payloads, hidden scripts, or unauthorized tracking mechanisms.

Attempting to gain unauthorized access to accounts, data, systems, networks, APIs, administrative functions, or nonpublic features.

Credential stuffing, password spraying, brute-force activity, port scanning, vulnerability scanning, penetration testing, or security research without prior written authorization.

Circumventing usage limits, rate limits, authentication controls, billing controls, security controls, geographic restrictions, or provider safeguards.

Overloading, flooding, disrupting, degrading, or interfering with the Services or another user’s access.

Sharing credentials publicly, permitting unauthorized account sharing, or failing to disable access for departed personnel.

Using bots, scrapers, crawlers, scripts, or automated tools except through authorized features and documented APIs.

Publishing vulnerability information before HAVOK has had a reasonable opportunity to investigate and remediate it.

7. INTELLECTUAL PROPERTY AND PLATFORM MISUSE

Users must not infringe or misappropriate copyrights, trademarks, patents, trade secrets, publicity rights, privacy rights, database rights, or other proprietary rights.

Users must not copy, reproduce, modify, translate, reverse engineer, decompile, disassemble, or attempt to derive source code, nonpublic architecture, workflows, prompts, system logic, or protected components except as expressly permitted by law and not waivable by contract.

Users must not remove, obscure, or alter ownership notices, watermarks, attribution, security labels, or technical restrictions.

Users must not resell, sublicense, lease, transfer, white-label, or provide access to the Services except as expressly authorized in writing.

Users must not use the Services, Documentation, HELIX Work Product, or nonpublic information to build, train, benchmark, or support a competing platform, service, model, or product.

Users must not upload content or code they do not have the right to use, or falsely claim ownership of another party’s work.

8. HARMFUL, ABUSIVE, AND EXPLOITATIVE CONTENT

Users must not create, host, transmit, promote, or facilitate content or activity that:

Encourages violence, terrorism, violent extremism, targeted harassment, credible threats, or physical harm.

Promotes child sexual abuse material, sexual exploitation, trafficking, non-consensual intimate imagery, or sexual content involving minors.

Is unlawfully discriminatory or is used to deny legally protected rights or opportunities based on protected characteristics.

Promotes self-harm, suicide, eating-disorder abuse, or dangerous conduct in a manner reasonably likely to cause harm.

Contains malicious impersonation, fabricated endorsements, fraudulent reviews, manipulated evidence, or materially deceptive media.

Facilitates the sale or distribution of illegal drugs, unlawfully regulated goods, counterfeit goods, stolen property, or prohibited weapons.

Is defamatory, invasive of privacy, obscene, or otherwise unlawful in the jurisdiction where it is created, transmitted, received, or targeted.

9. ARTIFICIAL INTELLIGENCE AND AUTOMATION

Users remain responsible for all prompts, inputs, configurations, decisions, outputs, and actions involving AI Features and automations. Users must review AI-generated content before relying on or distributing it and must not represent machine-generated output as professionally verified when it has not been reviewed by a qualified person.

Users must not use AI Features or automations to:

Generate or distribute unlawful, fraudulent, infringing, deceptive, defamatory, discriminatory, or harmful content.

Make fully automated decisions producing legal or similarly significant effects on individuals without required notice, review, safeguards, and lawful authority.

Impersonate a person, create deceptive synthetic media, or mislead recipients about whether they are interacting with a person or automated system where disclosure is required.

Provide individualized legal, medical, financial, employment, housing, credit, insurance, or other regulated advice or decisions without appropriate professional oversight.

Extract, infer, or disclose sensitive personal information without lawful authorization.

Bypass provider safety controls, content filters, access restrictions, model policies, or usage limitations.

Use outputs as the sole basis for high-risk decisions or actions where errors could cause material injury.

10. REGULATED AND HIGH-RISK USES

Customer must not use the Services in a regulated or high-risk context unless Customer has independently determined that the Services are suitable, has obtained HAVOK’s written approval where requested, and has implemented all legally required controls. This includes healthcare, financial services, lending, debt collection, insurance, employment screening, housing, education admissions, legal services, political communications, public safety, and other regulated activities.

The Services are not designed as an emergency communications system, life-safety system, medical device, emergency dispatch service, or system whose failure could reasonably cause death, serious bodily injury, or catastrophic property or environmental damage.

11. THIRD-PARTY SERVICES AND PROVIDER RULES

Use of Third-Party Services is subject to the applicable provider’s terms, policies, technical requirements, and restrictions. Users must not take any action that could cause HAVOK or another customer to lose access to a provider, phone number, messaging route, email domain, payment account, integration, API, application, or other service. If a provider prohibits, restricts, blocks, filters, or suspends activity, HAVOK may take corresponding action without liability.

12. EXCESSIVE USE AND RESOURCE ABUSE

Users must not use the Services in a manner that is excessive, abusive, or materially inconsistent with the purchased plan, intended use, fair use expectations, or technical capacity of the Platform. HAVOK may require configuration changes, rate limits, upgrades, prepaid usage, additional Fees, or reduced activity where use creates unusual cost, operational burden, deliverability risk, or performance degradation.

13. INVESTIGATIONS, MONITORING, AND COOPERATION

HAVOK may investigate suspected violations using account records, usage data, logs, provider notices, complaints, content reasonably necessary to investigate, and information supplied by Customer or third parties. HAVOK is not obligated to monitor all activity or pre-screen content. Customer must cooperate with reasonable investigations and provide consent records, source information, campaign details, security information, and other evidence reasonably requested.

HAVOK may preserve and disclose information when reasonably necessary to comply with law, enforce agreements, protect rights or safety, respond to legal process, investigate fraud or abuse, or work with providers and authorities. Any disclosure will remain subject to applicable law and the HELIX Privacy Policy and HELIX Data Processing Addendum where applicable.

14. ENFORCEMENT

14.1 Protective Actions

HAVOK may take immediate action when it reasonably believes activity violates this Policy or creates legal, security, deliverability, financial, reputational, provider, or operational risk. Actions may include warning the Customer, requiring remediation, limiting features, throttling usage, disabling campaigns, quarantining content, blocking recipients or destinations, removing content, suspending integrations, restricting administrators, suspending accounts, or terminating Services.

14.2 No Refunds for Violations

Suspension, restriction, or termination resulting from a violation does not relieve Customer of payment obligations and does not create a right to a refund or credit, except as required by law.

14.3 Costs and Remediation

Customer is responsible for costs reasonably incurred because of its violation, including provider penalties, chargebacks, remediation, investigation, reactivation, number replacement, domain remediation, legal response, and additional support, to the extent permitted by the HELIX Master Services Agreement and applicable law.

14.4 Reporting

HAVOK may report suspected unlawful activity to service providers, affected parties, regulators, or law enforcement and may preserve relevant evidence. HAVOK may also respond to valid subpoenas, warrants, court orders, and other legal process.

15. REPORTING ABUSE

Suspected abuse or violations may be reported to [email protected]. Reports should include the relevant account, phone number, domain, message, URL, date, time, screenshots, and other information reasonably necessary to investigate. HAVOK may request additional information and is not required to disclose investigation details or enforcement actions to the reporting party.

16. CHANGES TO THIS POLICY

HAVOK may update this Policy to address changes in law, provider requirements, security risks, technology, Platform functionality, or business practices. Material changes will be communicated or posted as required by the HELIX Master Services Agreement, HELIX Platform Terms of Service, or applicable law. Continued use after clear notice of an update constitutes acceptance where legally permitted. Payment of an invoice acknowledges the applicable billing notice but does not replace affirmative acceptance procedures where such procedures are required. If Customer has a signed agreement requiring a different amendment process, that agreement controls.

17. ORDER OF PRECEDENCE AND SEVERABILITY

This Policy supplements the HELIX Master Services Agreement and HELIX Platform Terms of Service. If there is a conflict, the HELIX Master Services Agreement controls, followed by any applicable signed statement of work or order document, then the HELIX Platform Terms of Service, then this Policy, except where a higher-ranking document expressly provides otherwise. If any provision of this Policy is unenforceable, it will be limited to the minimum extent necessary, and the remaining provisions will remain effective.

18. CONTACT INFORMATION

HAVOK Consulting LLC d/b/a HELIX
ATTN: Legal / Compliance
1032 E Brandon Blvd, #7286
Brandon, Florida 33511
Email: [email protected]