Legal

Acceptable Use Policy

Rules for Using the B2B Auto Loop Platform

Version

v04

Effective

Effective on launch

Last updated

October 29, 2026

Binding on every Tenant · Incorporated into the Master Subscription Agreement v04

1. Scope, Definitions and Your Role

This Acceptable Use Policy ("AUP") applies to all use of the B2B Auto Loop platform and related services (the "Service") by every business or agency that holds an account ("Tenant" or "you"), its authorized users, its Sub-Customers, and anyone acting on its behalf. It is part of, and is incorporated into, the Master Subscription Agreement (the "Agreement"). Capitalized terms not defined here have the meaning given in the Agreement.

You are the sender and publisher. When you launch a campaign, approve a script, upload a list, select a presenter or voice, or let the Service run on your behalf, you are the party that sends and publishes the resulting emails, videos, pages and messages. We provide software and infrastructure. We do not author your campaigns, choose your recipients, or verify the claims you make, and we do not act as your lawyer or compliance officer. Automation does not shift responsibility: if the Service does something on your instruction or within settings you chose, it is your act.

Sub-Customers. If you resell or white-label the Service, you are responsible for each Sub-Customer's compliance with this AUP as if it were your own, and you must flow these rules down to them in writing. If you send for a Sub-Customer or any other third party, you must first have a written agreement with it and its documented authorization to send on its behalf, keep them, and show them to us on request. You may not grant Sub-Customers rights broader than you hold, and you may not allow further resale or sublicensing without our prior written consent.

Relationship to other documents. If this AUP and the Agreement conflict on liability, the Agreement controls. If they conflict on conduct rules, the stricter rule applies. Detailed tenant duties are set out in Schedule A: Tenant Responsibilities, which forms part of the Agreement.

2. What We Do and What You Do

So there is no ambiguity about who is responsible for what, here is how the work is divided. This is a description of how the Service operates today; features may change as described in Section 15.

3. AI-Generated Content and Disclosure

Every video that features a synthetic presenter is AI-generated media, and several laws require clear disclosure of that fact. These rules apply to every video, page and message produced through or delivered by the Service.

3.1 What we apply by default

• On-screen label. An on-screen label reading "AI-generated presenter. No human performer is depicted." is burned into the video frames for the presenter segments. Where a video is a Digital Twin of a real, consenting person under Section 5, we apply instead the distinct Digital Twin label, which names the person and states that the video is used with permission, and which does not state that no human is depicted. The exact wording of both labels is in Product Disclaimers v01 (www.b2bautoloop.com/legal/disclaimers).
• Metadata. Machine-readable markings that identify the content as AI-generated are embedded in the video file and its delivery.
• Email and page lines. A short disclosure line appears in the email body and on the landing page: "Includes a short AI-generated video." for both stock presenters and Digital Twins

3.2 What you must not do

• Remove, crop, cover, blur, obscure, shorten, re-encode away, speed-alter, mask with overlays, or otherwise defeat the label, the metadata or either disclosure line, whether inside or outside the Service.
• Strip metadata, export and re-host a video in a form that drops the label, or screen-record or re-edit a video to remove it.
• Contradict the disclosure, for example by stating or implying that the presenter is a real person, a recording of a real employee, or a real customer, or that no AI was used.
• Describe the presenter as a member of your team, give it a human identity you invent, or script it to claim personal experiences it has not had.
• Use a presenter to deliver a testimonial, endorsement, review, case study or personal results claim.

If you embed, forward, repost or repurpose any video produced through the Service, you must keep the label and disclosure visible and intact in that use as well.

3.3 Disclosure rules change

Laws on synthetic media differ by state and country and are changing quickly, including disclosure requirements for synthetic performers in advertising and for AI-generated audio and video. We may change the wording, size, placement, timing and format of the label and disclosures at any time to follow the law or a provider's terms, and the changed version then applies to new and existing content we serve. You remain responsible for any additional disclosure that applies to your own use, your industry or your recipients' locations. Our default disclosure is a tool, not a guarantee that your campaign satisfies every law that applies to you.

4. Truthfulness, Impersonation and Deception

4.1 No fabricated proof

You may not use the Service to create or publish fake or misleading testimonials, endorsements, reviews, ratings, case studies, awards, certifications, customer logos, or customer results, or to invent statistics, quotes, partnerships or outcomes. Any result, number or customer reference you state must be real, current, and something you can substantiate on request.

4.2 No impersonation

You may not impersonate any real person or organization, or suggest that a message, video or page comes from, or is endorsed by, someone it does not. That includes using another company's name, branding, domain, executives or employees, and presenting yourself as a different business. Sender identity in every message must be accurate and must identify your business.

4.3 No deceptive claims about the prospect or about what happened

You may not state or imply anything about a prospect that is untrue. Examples include saying a presenter or your team "watched" a video, visited a site, reviewed a profile, spoke with someone, or noticed something when that did not happen; claiming a prior relationship, meeting or inquiry that does not exist; or claiming the prospect asked to be contacted when they did not.

4.4 Truthful hooks and personalization

Every personalized opening, hook or reference to a prospect or their company must be accurate and must trace to a real signal or record, such as public company information, a documented trigger event, or data you hold lawfully. Do not edit generated scripts to add claims you cannot support. Do not use the Service to manufacture urgency, scarcity, or false relevance. If a hook cannot be traced to a real signal, do not use it. Where the Service falls back to a generic opener, you may not replace it with an invented personal detail.

4.5 Accuracy of your offer

You are responsible for the accuracy of what you promise and the price, terms and results you describe. You may not misrepresent who you are, what you sell, who is communicating, or whether a human or an AI is communicating, except as the default disclosures in Section 3 provide.

5. Likeness, Voice and Synthetic Personas

A "Synthetic Persona" means any avatar, digital twin, face, or cloned or synthesized voice. The following rules apply to every Synthetic Persona used through the Service.

5.1 Permitted sources

You may use only (a) a stock presenter and stock voice supplied by the platform, which is the only option on the Launch plan, or (b) on the Growth and Scale plans only, a face or voice that you own, or that belongs to an adult who has given you documented, informed, written consent to that specific use. Launch Tenants cannot upload a face or voice. Digital Twin capabilities may also be limited, delayed or unavailable for some regions, and we may decline or remove any Synthetic Persona at our discretion.

5.2 Consent requirements

• Consent must be written, specific to the purpose and to your use, signed by the individual personally (not by an employer or third party on their behalf), and kept by you for as long as the Synthetic Persona is in use and for the period the law requires afterward.
• Consent must be revocable. You must honor a revocation or an individual's departure from your business promptly: stop using the persona, tell us, and cooperate in disabling live links and deleting the associated footage, voice models and rendered content.
• Where biometric, voice-print, publicity or digital-replica laws require specific notices, written releases, retention policies or destruction schedules, you must provide them and comply. The Service's own consent capture, identity checks and retention practices described in the Agreement and Privacy Policy do not replace your obligations.
• You must provide proof of consent within three business days of our request.

5.3 Prohibited uses

• Any person under 18, or any person who is deceased.
• Any public figure, celebrity, athlete, politician, executive of another company, or other recognizable person, unless you hold documented rights that cover the use.
• Any use that implies an endorsement or statement by the person depicted that they did not give.
• Political campaigning, news-related content, or any use outside your own legitimate outbound sales and marketing.
• Any use that violates a person's right of publicity or privacy, or any biometric privacy, digital-replica or similar law, including the Illinois Biometric Information Privacy Act (740 ILCS 14).
• Uploading a face or voice you are not authorized to use, or one that merely resembles a real person you have no rights to.
• Any use prohibited by the licenses or terms that govern the underlying models and providers, as described in Section 11.

6. Email, Messaging and Contact Laws

6.1 General rule

You must use the Service only in compliance with all laws that apply to your communications and to each recipient, including the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA) and state telemarketing and text-messaging laws, state privacy and data-broker laws, and the laws of any other country where a recipient is located. No contact may be made in violation of law. Compliance is your responsibility; our tools support it but do not guarantee it.

6.2 Email

• Use accurate "From," "Reply-To" and routing information, and subject lines that honestly reflect the content. Do not disguise the source or use misleading headers.
• Identify the message as an advertisement where the law requires, and include your valid physical postal address.
• Include a clear, working opt-out in every message. It must remain functional for at least 30 days after sending, and you may not charge a fee or require more than an email reply or a visit to a single web page to use it.
• Honor every opt-out within the time the law requires and no later than ten business days. The Service processes opt-outs through the platform-wide suppression list in real time, and you may not re-add, re-import or otherwise contact a suppressed address from any account or system.
• Maintain your own suppression records for contacts who have opted out through any other channel, and upload them to the Service.
• Do not send from, or route through, domains or mailboxes you are not authorized to use, and do not use harvested, purchased-without-rights, or role-account lists in violation of law.

6.3 Text messages

If a text-message feature is available, you may text only a prospect who has engaged with your page and personally supplied their own mobile number with the consent the law requires, and only about that engagement (for example, a booking confirmation or reminder). Every message must honor STOP and similar replies immediately. You may not use the Service to send marketing texts to any number that was not supplied this way, and you must follow carrier registration and content rules.

6.4 No calls; prospect-initiated contact only

The Service does not place outbound telephone calls, voice broadcasts or voicemail drops, and you may not use it, or any output of it, to do so. Voice and live conversation exist only as an on-page experience that a prospect chooses to start. A telephone link on a page may be used by a prospect to call you; that is the only phone path the Service provides.

6.5 Recipients outside the United States

The Service is offered to recipients located in the United States only. You may not upload, target or contact recipients in the European Union, the European Economic Area, the United Kingdom or Switzerland. We geo-gate and may block those regions, and we offer no processing for them until we have adopted the data transfer mechanisms the law requires. For a recipient in Canada or any other place outside the United States, you are responsible for complying with the law of that place, including consent, notice and AI-marking rules (for example CASL), or you must not send to that recipient. We may restrict, block or geo-gate any region or country at any time.

6.6 Who is liable for what

As between you and us, you are responsible for the legality of every recipient list, every message, and every contact made through your account, including any penalty, claim or demand that follows. Nothing in this AUP removes duties that the law places directly on us.

6.7 Third-Party Email, Domain and Mailbox Providers. We use third-party email, domain and mailbox providers to send your messages. You must comply with all restrictions those providers impose, including their acceptable-use, sending and anti-spam policies, as we notify you, and with the law, including the CAN-SPAM Act. You are solely responsible for your lists, content, consent, opt-outs and sender identification. You authorize us to send on your behalf. We may rate-limit, pause or suspend sending, mailboxes or domains at any time, with or without notice, if a provider requires it or if in our reasonable judgment deliverability or reputation is at risk. We do not guarantee inbox placement. You may not send for restricted industries or offers that providers prohibit, use deceptive headers, use purchased or scraped lists without a lawful basis, or resell provider-sourced data. If you send for a third party, you need that party's written agreement and documented authorization first, as the sending provider's policy requires. You are liable to us for fees, penalties and costs a provider imposes because of your campaigns, as the Agreement provides.

7. On-Page AI Conversations and Recording Consent

What we do before every conversation. California's Invasion of Privacy Act (Cal. Penal Code § 631) and similar laws require consent of every party before a conversation is recorded or monitored. Before any on-page conversation begins, the Service shows a consent notice explaining that the conversation is with an AI, that it is transcribed, why, and how the transcript is stored and deleted. The prospect must affirmatively accept before it starts and can decline and still use the page by other means. At the start of every conversation the AI assistant states that it is an AI and names the business it speaks for. Spoken audio is transcribed and then discarded. We keep a record of each consent for at least five years.

What you may not do. You may not:

• Disable, hide, shorten or alter the consent notice or the AI self-identification, except through customization options we provide within those limits.
• Instruct the AI assistant to claim it is human, or to deny being an AI when asked.
• Record, capture or re-use a prospect's voice outside the Service, or use conversation content for any purpose other than following up on that prospect's own engagement with you.
• Use any output of the Service, including a Synthetic Persona or synthesized voice, to place telephone calls or voicemail drops through any other system.
• Record or monitor conversations in violation of the California Invasion of Privacy Act or equivalent state recording laws.

8. Prohibited Content, Industries and Regulated Claims

8.1 Prohibited content

You may not use the Service to create, transmit or store content that is illegal, fraudulent, defamatory, deceptive, or that infringes intellectual property or privacy rights. You may not use it to harass, threaten, stalk or abuse any person, to generate or spread hate speech targeting a protected characteristic, to promote violence or criminal activity, or to support terrorist organizations. You may not use it for phishing, malware distribution, identity theft, or any scheme to obtain money, credentials or personal data by deception. You may not use it for sexually explicit content, or for content that targets or exploits children.

8.2 Prohibited industries and offers

Unless we have approved your use in writing in advance, you may not use the Service to promote, sell or generate leads for:

• Adult entertainment or sexually oriented products and services.
• Gambling, betting, sweepstakes or lotteries.
• Illegal drugs, cannabis and hemp-derived intoxicants, tobacco, vaping and nicotine products.
• Firearms, weapons, ammunition and explosives.
• Payday and other high-cost short-term lending, debt settlement, debt collection and credit repair.
• Unregistered or unlicensed securities, investment, trading, cryptocurrency or "get-rich-quick" offerings.
• Multi-level marketing, pyramid or pay-to-recruit schemes, and business-opportunity or work-from-home income schemes.
• Unapproved drugs, counterfeit goods, unapproved medical devices, and supplements or treatments marketed with disease or cure claims.
• Political campaigning, fundraising or issue advocacy.
• Surveillance, stalkerware, or services designed to evade the law.
• Lists, leads or "email marketing" resold on behalf of unrelated third parties.

We may add to or narrow this list as law, risk or provider requirements change, and we may decline any business we consider high-risk.

8.3 Regulated and unsubstantiated claims

You may not use the Service to make claims that are unsubstantiated or that law regulates, including claims about earnings, income or investment returns; guaranteed outcomes, savings or profits; medical, health, wellness or safety effects; legal outcomes or legal advice; financial products, credit, insurance or tax outcomes; and comparative or "best in class" statements. Any claim of this kind must be accurate, supported by evidence you hold, and accompanied by the disclosures the law requires. If you are in a licensed profession or regulated industry, you are responsible for meeting its advertising, licensing and recordkeeping rules.

8.4 Sensitive data

You may not use the Service to collect, upload, process or generate outreach based on sensitive personal data about any prospect or third party, including health, biometric data beyond a consented likeness, financial account numbers, government identifiers, precise location, or data about children, as the Service is not designed or reviewed for that purpose.

9. Data Rules

• Right to use. You must have the legal right to upload, import and use every list, contact record and file you provide, and to contact each person on it through the channels the Service supports. You must provide any notice and obtain any consent that law requires before doing so.
• Lawful sourcing. You may not use scraped, purchased, rented or harvested data unless it was collected lawfully and you are permitted to use it for outbound marketing. You may not use the Service to scrape or collect data in breach of a website's or third party's terms, technical controls or the law.
• Third-party data restrictions. Data that the Service supplies from third-party sources, including contact and company data, is licensed for use inside your campaigns only. You may not bulk-export, resell, republish, redistribute or build a competing database from it, beyond what the Agreement allows.
• No scraping of the Service. You may not scrape, harvest or collect data from the Service, from other Tenants' accounts, or from our systems without authorization. This does not limit our own prospect research and enrichment functions, which operate under the Agreement and our Privacy Policy.
• Requests and deletion. You must pass on and act on opt-out, access and deletion requests you receive. On a verified request or complaint we may delete or purge a recipient's data, including rendered clips, cached copies and logs, and you may not restore or re-create it.
• Minimum necessary. Upload only the data you need for the campaign, and keep it accurate and current.

10. Security and Platform Integrity

You may not, and may not attempt to:

• Probe, scan or test the vulnerability of the Service, introduce malware, or conduct a denial-of-service attack, without our prior written authorization.
• Circumvent, disable or interfere with rate limits, sending limits, volume ramps, spend ceilings, usage quotas, credit allotments, consent gates, suppression lists, content classifiers, quality gates, kill switches or any other safety or billing control. That includes splitting activity across accounts, or creating new accounts, to avoid a limit, a suspension or a block.
• Manipulate our AI systems through prompt injection, "jailbreaking" or similar techniques to bypass safeguards or produce content this AUP prohibits.
• Reverse engineer, decompile or derive the source code, underlying models, prompts or algorithms of the Service, except where the law forbids this restriction.
• Resell, sublicense, rent, expose or make the Service, its APIs, or its outputs available to others outside the Agreement, or present platform technology as your own.
• Use the Service, its outputs, transcripts, scores or knowledge base to build, train, tune or improve a model, product or service that competes with the Service, or to evaluate the Service for that purpose.
• Share account credentials, or allow unauthorized users to access your account. You are responsible for all activity under your credentials.
• Help any third party do any of the above.

11. Third-Party Provider Terms

The Service is built on third-party providers, including infrastructure, AI model, voice, video, email-delivery and data providers. Their terms of use, acceptable use policies and model licenses place restrictions on how their technology may be used, and some of those restrictions must be passed on to you. To the extent we identify them to you, in this AUP, at www.b2bautoloop.com/legal/subprocessors, in the Service or by notice, those restrictions apply to you as if set out here. They include, without limitation, bans on deceptive or non-consensual synthetic media, on unlabeled machine-generated content, on uses that are unlawful or that harm others, and on resale or sublicensing of the providers' technology.

• You may not use the Service in a way that would cause us to breach a provider's terms or license.
• We may change providers, models or features at any time, and we may suspend or restrict a feature, or a use of it, if a provider requires it, changes its terms, or raises a concern.
• We refer to providers generically in public documents. Details of providers that handle personal data are available to Tenants through our confidential Data Processing Addendum. You may not state or imply that any named provider powers the Service or endorses your use.

12. No Circumventing Consent Laws

You may not use the Service to:

• Circumvent the consent requirements of the TCPA or state text-messaging laws, including by texting any number that was not personally supplied by the prospect with consent.
• Record or monitor conversations in violation of the California Invasion of Privacy Act or equivalent state laws.
• Collect, use or store biometric information, including voice clones or facial geometry, in violation of the Illinois Biometric Information Privacy Act (740 ILCS 14), the Texas and Washington biometric statutes, or equivalent laws.
• Send, or help anyone send, communications that the law prohibits without consent.

If we find that you are using the Service in violation of these laws, we may immediately suspend your access and may report the activity to the relevant authorities, as permitted by law.

13. Monitoring and Enforcement

13.1 Monitoring

We may monitor, test, sample and review use of the Service, including campaign content, scripts, rendered videos, landing pages, lists, sending patterns, complaint and bounce rates, and opt-out and consent records, using automated tools and human review. We may do this at any time to protect recipients, other Tenants, our providers and the Service, and to meet legal obligations. We are not required to monitor, and our decision not to review, or not to act on a violation, does not waive our right to do so later or make us responsible for your content.

13.2 What we may do

13.3 How we approach it

Where it is practical and safe to do so, we will tell you what we found and give you a reasonable chance to fix it. We may act first and explain afterward where there is a risk of harm, a legal demand, a provider requirement, or evidence of intentional or repeated misconduct. Repeat violations, or a single serious violation, may result in termination without a cure period. We may preserve evidence and keep records of violations.

13.4 Fees and refunds

Suspension, restriction or termination for a violation of this AUP does not entitle you to a refund or credit, including the first-month refund in Section 10.4.1 of the Agreement, and you remain responsible for fees owed. You are responsible for any costs we incur because of your violation to the extent the Agreement provides.

13.5 Review of our decisions

If you believe we acted in error, you may ask for a review within thirty (30) days of our notice by emailing compliance@b2bautoloop.com. Give your account name, the action you are asking us to review, and any evidence. We will consider the request in good faith. A review request does not pause an action unless we agree.

14. Responsibility, Indemnity and Related Documents

• Indemnity. Your obligations to defend, indemnify and hold harmless B2B Auto Loop from claims, fines, penalties and losses arising from your campaigns, content, lists, Synthetic Personas, Sub-Customers and breaches of this AUP are in the Master Subscription Agreement. A breach of this AUP is a breach of the Agreement, and the Agreement governs how liability is limited or excluded for it.
• Schedule A: Tenant Responsibilities. This schedule to the Agreement sets out, step by step, what you must do before launching and while running campaigns. It supplements this AUP and does not narrow it.
• Privacy Policy v06 and Data Processing Addendum v04. These explain how personal information is handled and which parties process it.
• No legal advice. This AUP is not legal advice to you. Obtain your own advice on the laws that apply to your business, industry and recipients.

15. Changes to This Policy

We may update this AUP when law, regulation, a provider's terms or a model license changes, when we add or change features, or when risk requires. We will give notice of material changes by email to your account contact or in the Service, and will generally allow thirty (30) days before they take effect. A change takes effect sooner, on notice, when it is needed to comply with law, to follow a provider's requirement, or to stop active harm. The posted version at b2bautoloop.com shows its date. If you keep using the Service after a change takes effect, you accept it. If you do not accept a change, you may stop using the Service and end your subscription as the Agreement provides.

16. Reporting Violations and Contact

To report abuse, a suspected violation, an AI-generated video you believe is mislabeled, a request to remove content, a synthetic presenter that shows or voices someone without permission, or a legal or regulatory inquiry, email compliance@b2bautoloop.com. We handle reports about synthetic likeness under Section 14.6 of the Agreement. Recipients can also use the opt-out or Stop page linked from the message or page they received. Privacy requests go to privacy@b2bautoloop.com. Legal notices go to legal@b2bautoloop.com.

Effective on launch. This policy is published at www.b2bautoloop.com/legal/aup; the Master Subscription Agreement v04 is at www.b2bautoloop.com/legal/terms, the Privacy Policy v06 at www.b2bautoloop.com/legal/privacy, Schedule A: Tenant Responsibilities v01 at www.b2bautoloop.com/legal/schedule-a, the Product Disclaimers v01 at www.b2bautoloop.com/legal/disclaimers and the Cookie Policy v01 at www.b2bautoloop.com/legal/cookies. Last updated: October 29, 2026.