Acceptable Use Policy

Last updated: October 27, 2026

1. Who this applies to

To every tenant (customer) and their users who use the Tavyk Platform to contact people by call, SMS, WhatsApp, email, AI voice or any channel, upload data, or publish content/offers.

2. Principle

Tavyk is the tool; the tenant is responsible for its use. The tenant uses the Platform only for legitimate, consented and lawful communications in every country where it operates.

3. Tenant obligations (what you MUST do)

1. Valid consent before contacting, according to your jurisdiction: in the U.S., prior written consent for SMS/AI-voice marketing; in Mexico, respect for the REPEP; in Colombia, prior, express and informed authorization; in Spain, LSSI/GDPR consent and checking the Lista Robinson.
2. Keep proof of consent (text, date, source, channel) and provide it on request.
3. Process opt-outs immediately (STOP/UNSUBSCRIBE/etc.) and do not contact again.
4. Respect legal time windows and frequency limits for the recipient's country.
5. Maintain and screen against exclusion/DNC lists (national and internal).
6. Identify yourself clearly (who is calling/writing) in every communication.
7. Truthful and lawful content: supportable offers, no prohibited health claims, no unconfirmed financing figures, no impersonation.
8. Recording / AI-use disclosure where the law requires it (one- or two-party recording consent depending on state/country; disclose that it is an AI agent where required).
9. Consumer cancellation / withdrawal rights where applicable (U.S. cooling-off, EU/Spain right of withdrawal, Mexico LFPC).

4. Prohibited uses (what is NOT allowed)

• Contacting without valid consent or people on exclusion/DNC lists.
• Spam, unsolicited bulk sends, or opt-out evasion.
• Impersonation (identity/number spoofing), phishing, fraud or scams.
• Illegal, deceptive or harmful content: prohibited health/medical claims, false endorsement by authorities (e.g. the EPA), loans with made-up terms.
• Data you have no right to use (purchased lists without a legal basis, minors' data without authorization, sensitive data without reinforced consent).
• Uploading documents to the knowledge base/RAG that you have no right to use, or with third-party sensitive data without a legal basis.
• Using the Platform for harassment, unlawful discrimination, adult content aimed at minors, or any violation of applicable law.
• Attempting to bypass the Platform's compliance controls (time windows, opt-out, limits).

5. Controls Tavyk provides (and that the tenant must keep active)

Tavyk offers controls that are configurable by country/tenant to help with compliance; disabling or overriding them does not relieve the tenant:

• Consent log (consents) and automatic blocking on opt-out.
• Time windows and frequency limits by zone/country.
• Content guardrails for the AI agents (no health claims, no made-up APR, NSF/WQA only where applicable).
• Configurable recording/AI disclosure.

6. Enforcement and consequences

• Tavyk may audit, limit or suspend the service in the event of verifiable non-compliance or abuse, with or without notice depending on severity and risk to recipients/the network.
• The tenant indemnifies Tavyk for claims arising from its non-compliance.
• Repeat offenses or serious abuse → termination.

7. Reporting

Recipients or third parties can report abuse to [email protected]. Tavyk investigates and acts.