Acceptable Use Policy

1. Scope and responsibility

This Acceptable Use Policy applies to every Customer, authorized user, site, integration, input, Output, and end-user interaction involving HostDesk. Customer is responsible for preventing and correcting violations by anyone using its account. Capitalized terms have the meanings in the Customer Terms of Service.

2. Illegal, deceptive, and harmful use

• Do not use the Service to violate law, rights, court orders, sanctions, or contractual duties, or to facilitate fraud, scams, phishing, impersonation, evasion, money laundering, trafficking, exploitation, or illegal goods or services.
• Do not generate or distribute materially false, deceptive, defamatory, threatening, harassing, hateful, sexually exploitative, or privacy-invasive content.
• Do not present the assistant as a human, hide required AI disclosures, fabricate testimonials or evidence, create fake urgency, or make unsupported performance, revenue, safety, health, legal, financial, environmental, or compliance claims.
• Do not use the Service to manipulate a vulnerable person, exploit an emergency, or intentionally cause physical, financial, reputational, or psychological harm.

3. Prohibited high-risk decisions and advice

• Do not use Output as professional medical, mental-health, legal, tax, investment, credit, insurance, immigration, or safety advice.
• Do not use the Service to make or materially determine employment, housing, education, lending, insurance, healthcare, legal, public-benefit, essential-service, or other high-impact eligibility decisions.
• Do not use the Service for emergency response, crisis intervention, weapons, critical infrastructure, life-support, or another use where an error could reasonably cause death, injury, loss of liberty, or substantial property damage.
• Do not circumvent a high-risk refusal or relabel a prohibited use to obtain an answer. Route those matters to a qualified person.

4. Commercial representations

• Do not instruct HostDesk to invent, infer, or guarantee a price, discount, refund, warranty, delivery date, stock level, compatibility result, eligibility outcome, appointment, booking, or policy exception.
• Do not use stale, conflicting, scraped without authority, or knowingly inaccurate sources. Time-sensitive facts must come from a current authoritative source or structured live integration.
• Do not deploy an answer that Customer knows or reasonably should know is false, misleading, incomplete in a material respect, or contrary to Customer's binding terms or legal duties.
• Do not use HostDesk to send unsolicited or unlawful commercial messages. Customer must comply with consent, identification, unsubscribe, suppression, and do-not-contact requirements.

5. Data and privacy restrictions

• Do not collect or submit passwords, authentication secrets, full payment-card data, government identifiers, protected health information, biometrics, precise location, children's data, or similarly sensitive data unless HostDesk has expressly approved the use in writing and required safeguards are in place.
• Do not access, scan, scrape, upload, monitor, or disclose information without the rights, notices, consents, and lawful basis required to do so.
• Do not use Output to identify a person, infer highly sensitive traits, conduct surveillance, build unlawful profiles, or re-identify de-identified information.
• Do not expose one Customer's, visitor's, or order's information to another. Identity verification must precede any account- or order-specific disclosure.

6. Security and platform integrity

• Do not probe, scan, attack, overload, disrupt, or bypass the Service, authentication, tenancy, rate limits, cost controls, source controls, output filters, robots directives, or provider safeguards.
• Do not introduce malware, destructive code, credential theft, prompt injection intended to override system controls, or content designed to exfiltrate confidential information.
• Do not reverse engineer, benchmark for a competing product, harvest data at scale, automate account creation, share public credentials, or use the Service outside documented interfaces, except where law expressly prevents restriction.
• Do not use third-party accounts, content, identities, trademarks, or systems without authorization.

7. Enforcement and reporting

HostDesk may investigate suspected violations and may refuse Output, disable a feature, quarantine content, restrict an integration, suspend an account, preserve evidence, or report conduct where reasonably necessary. HostDesk will consider context, severity, recurrence, and available remediation. Suspected abuse or security issues should be reported to solutions@hostdesk.ai.

This policy may be updated to address new risks, laws, provider rules, and product capabilities. Material changes will be handled under the Customer Terms of Service.