Acceptable Use Policy

1. Permitted Use

Gnosi's services are designed for legitimate business communications:

2. Prohibited Activities

2.1 Illegal Activities

• Any activity that violates local, state, national, or international law
• Fraud, money laundering, or other financial crimes
• Illegal gambling or lottery operations
• Sale or distribution of illegal substances
• Terrorism or activities supporting terrorist organizations
• Human trafficking or exploitation

2.2 Harmful Communications

• Harassment, threats, or intimidation
• Hate speech or discrimination based on race, religion, gender, sexual orientation, or other protected characteristics
• Stalking or cyberbullying
• Defamation or libel
• Impersonation of individuals or organizations
• Distribution of malicious content or malware

2.3 Spam and Unsolicited Communications

• Robocalling or automated dialing to unsolicited numbers
• Violation of Do Not Call Registry requirements
• Mass marketing without proper consent
• Phishing or social engineering attempts
• Deceptive or misleading communications
• Violation of CAN-SPAM Act or similar regulations

2.4 Technical Violations

• Attempting to access unauthorized systems or data
• Interfering with service operations or infrastructure
• Reverse engineering or attempting to derive source code
• Exceeding rate limits or usage quotas
• Using the service to develop competing products
• Automated testing without prior approval

2.5 Content Violations

• Adult content or services
• Violence or graphic content
• Gambling services (except where legally permitted with prior approval)
• Multi-level marketing or pyramid schemes
• Cryptocurrency scams or fraudulent investment schemes
• Sale of weapons or dangerous goods

3. Call Recording Compliance

When using our call recording features, you must:

• Obtain consent from all parties when required by law
• Provide clear notice that calls may be recorded
• Comply with state and federal recording laws
• Respect requests to not record conversations
• Implement appropriate data retention policies
• Ensure recordings are used only for lawful purposes

Two-Party Consent States: Special attention required in California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Oregon, Pennsylvania, and Washington.

4. Industry-Specific Requirements

4.1 Healthcare (HIPAA)

If processing protected health information:

• Must have signed Business Associate Agreement (BAA)
• Implement required safeguards for PHI
• Limit AI processing to permitted uses
• Ensure proper consent and authorizations

4.2 Financial Services

When handling financial information:

• Comply with PCI DSS for payment card data
• Never store full credit card numbers in call recordings
• Implement appropriate authentication measures
• Follow regulatory requirements (GLBA, etc.)

4.3 Legal Services

For law firms and legal professionals:

• Maintain attorney-client privilege
• Implement appropriate confidentiality measures
• Comply with professional conduct rules
• Ensure proper conflict checking procedures

5. AI and Automation Guidelines

When configuring AI agents, you must ensure:

• Transparency: Callers should be aware they're speaking with an AI
• Accuracy: Information provided must be accurate and up-to-date
• Escalation: Clear paths to human assistance when needed
• Limitations: AI should not provide legal, medical, or financial advice
• Testing: Thoroughly test scripts before deployment
• Monitoring: Regularly review AI performance and accuracy

6. Security Requirements

Users must maintain security by:

• Keeping account credentials confidential
• Using strong, unique passwords
• Enabling two-factor authentication
• Promptly reporting any security incidents
• Restricting API key access to authorized personnel
• Regularly reviewing account access logs
• Implementing IP whitelisting where appropriate

7. Resource Usage

To ensure fair service for all users:

• Stay within your plan's call limits
• Avoid excessive concurrent calls that impact service quality
• Don't use automated systems to inflate usage
• Report any unexpected usage spikes
• Implement reasonable call duration limits
• Cache frequently requested data appropriately

8. Enforcement and Violations

8.1 Investigation Process

When potential violations are reported or detected:

• We will investigate promptly and fairly
• We may request additional information from you
• Service may be temporarily suspended during investigation
• You will be notified of findings and any actions taken

8.2 Consequences of Violations

8.3 Appeal Process

If you believe action was taken in error, you may appeal by contacting legal@gnosi.io within 30 days with supporting documentation.

9. Reporting Violations

We rely on our community to maintain a safe environment. Please report suspected violations:

Include in your report:

• Nature of the violation
• Date and time of incident
• Phone numbers involved
• Any supporting evidence

10. Changes to This Policy

We may update this AUP as needed to address new threats or clarify expectations. Changes will be:

• Posted on this page with updated effective date
• Communicated via email for material changes
• Effective 30 days after posting (unless urgent)

Continued use after changes constitutes acceptance of the updated policy.

11. Contact Information