Acceptable use

Everyone who uses aqvitus.com or the Aqvitus service: the business that holds the account, everyone it invites into a workspace, and anyone acting through its API. It forms part of the Terms of service.

Do not use Aqvitus to send unsolicited messages, on any channel. In particular:

• Get consent before you text or call, where the law requires it. In the United States that means the Telephone Consumer Protection Act and the rules under it, which govern automated and marketing calls and texts; elsewhere, whatever applies where the recipient is. Aqvitus records consent against a contact and channel adapters check it before an outbound message, but whether the consent you recorded is valid is your judgement and your responsibility.
• Honour an opt-out immediately. When someone asks to stop hearing from you, stop — across every channel they asked about.
• No purchased, scraped or harvested lists, and no messaging a number or address you cannot show a lawful basis for.
• No bulk unsolicited email, no forged headers or sender addresses, and nothing that would put a shared sending domain at risk.

When Aqvitus answers or joins a call, it asks before it records and does not record when the answer is no. That is the product doing its part.

Recording law is yours to get right. Some places require every party’s consent, some require one, and some add notice and retention rules on top. You are responsible for knowing which applies to the calls you make and receive, for configuring Aqvitus to match, and for not turning the prompt off where the law asks for it. Do not use recordings for a purpose the people on the call were not told about.

• Do not impersonate another business, person or public body, and do not configure the AI to claim to be one.
• Do not use Aqvitus for phishing, credential harvesting, fake invoices, or any attempt to deceive someone into a payment or a disclosure.
• Do not use the Aqvitus or EvolvLabs name or logo in a way that implies we endorse you, without our written permission.
• Configuring the AI to deny that it is an AI when a person sincerely asks is not acceptable use, and it is unlawful in some places.

Do not use Aqvitus to send, store or generate:

• anything unlawful, fraudulent or deliberately deceptive;
• harassment, threats, or content that targets a person or a group for abuse — including through the replies you configure the AI to send;
• material that sexually exploits or endangers a child, or any other content whose possession or distribution is a crime;
• malware, or links to it;
• content that infringes someone else’s intellectual property or privacy rights.

Do not put special-category data — health, biometrics, government identifiers, payment card numbers — into a workspace without the legal basis to hold it and a look at whether Aqvitus is the right place for it. Ask us first if you are not sure.

Do not:

• attempt to get the AI to take an action your rules do not allow — through crafted customer messages, poisoned knowledge sources, or any other prompt-injection route — or help anyone else do it;
• attempt to reach another workspace’s data, to bypass sign-in, roles, approvals, a second factor, the egress allowlist or a rate limit;
• alter or attempt to alter the audit ledger, or a record of an approval;
• share or resell credentials, or leave the accounts of people who have left your business active;
• probe, scan or stress the service outside our security disclosure policy.

Testing your own rules is encouraged — that is what the simulation harness and the playground are for, and finding that a rule is too loose before a customer does is the point of them.

Do not scrape the website, submit false trial signups, resell access to the Service, or place load on it beyond ordinary use of your plan — including through the API. If you need volume beyond your plan, ask us; we would rather size it with you than throttle you.

We may remove content, disable a channel, suspend a workspace or end an account. Where the risk allows it we tell the account owner first and work with them to fix it. Where it does not — ongoing harm to people outside your business, a live security risk, a legal obligation — we act immediately and tell you afterwards. Serious unlawful activity may be reported to the authorities.

Misuse of Aqvitus, including a message you received from a business using it: support@aqvitus.com. Security vulnerabilities go to the same address, under the security disclosure policy, which is where you will also find the ground rules and the safe harbour.

We may update this policy; the date at the top is the version in force. Continuing to use Aqvitus after a change means you accept it.