Acceptable Use Policy

This Acceptable Use Policy (“AUP”) is incorporated into the CoAgentor Terms of Service. Violation is a material breach and grounds for immediate account termination. These rules exist to protect meeting participants, third parties, and the integrity of the Service.

1. Meeting Participant Consent (Non-Negotiable)

You must obtain legally sufficient, informed consent from every human participant in every meeting where a CoAgentor Agent is active, before the Agent joins. Consent must cover:

• The presence of an AI participant that processes audio in real time
• That the Agent may speak using AI voice synthesis
• That the Agent may access external data sources during the meeting
• Whether and how meeting content may be transcribed or logged

All-party consent jurisdictions: In California, Illinois, Massachusetts, Pennsylvania, Washington, and other all-party consent states (and in most EU/UK jurisdictions), you must obtain affirmative consent from all participants before any audio processing. Verbal disclosure alone may not be sufficient in some jurisdictions. Written consent or meeting invitation disclosure is strongly recommended.

Deploying an Agent in a meeting without required consent may violate: the Wiretap Act (18 U.S.C. § 2511); state wiretapping laws (penalties up to $10,000 per violation in some states); GDPR (fines up to 4% of annual global turnover); and other applicable laws. We cooperate with law enforcement investigations involving Service misuse.

2. Absolute Prohibitions

The following are strictly prohibited under any circumstances:

• Covert surveillance: Deploying an Agent to monitor individuals without their knowledge, including employees, contractors, meeting participants, or competitors.
• Identity deception: Configuring an Agent to deny being an AI when directly and sincerely asked by a participant. Agents may have personas, but must disclose their AI nature upon direct inquiry.
• Voice cloning of real persons: Using ElevenLabs or any connected tool to clone the voice of a real individual without their explicit, written consent. This may constitute identity fraud, violate right-of-publicity laws, and violate ElevenLabs’ own terms.
• Deepfakes and impersonation: Configuring Agents to impersonate specific living individuals, including executives, colleagues, or public figures.
• Unauthorized data access: Connecting data sources you do not have authority to access. This includes accessing employer systems beyond your authorization, scraping third-party platforms against their terms, or exfiltrating bulk data from connected sources.
• Malicious use: Using Agents to spread disinformation, manipulate decision-making through false data, conduct social engineering attacks, or facilitate fraud.
• Child exploitation: Any use involving meetings with or content about minors that exploits, endangers, or violates their rights.
• Service abuse: Attempting to reverse engineer, scrape, or stress-test the Service; creating multiple accounts to circumvent usage limits; or using the Service to develop competing products.
• Sanctions violations: Use by persons or entities in OFAC-sanctioned jurisdictions or on restricted party lists.

3. Data Source Access Standards

• Connect only sources you are authorized to access under applicable employment agreements, data access policies, and platform terms of service.
• Apply the principle of least privilege — grant Agents the minimum permissions needed for their configured purpose.
• Do not use Agent integration access to exfiltrate bulk data, conduct competitive intelligence against the data source platform’s terms, or harvest personal data about third parties.
• Immediately revoke Agent access to a data source if your authorization to access that source changes.

4. Employment & Labor Law Compliance

If you use CoAgentor in the employment context (including deploying Agents in meetings with employees or using Agents to evaluate employee performance), you must comply with:

• The National Labor Relations Act (NLRA) — automated monitoring may chill protected concerted activity.
• State employee monitoring notification laws (e.g., Connecticut, Delaware, New York require disclosure of electronic monitoring).
• GDPR Article 88 and applicable Member State laws governing employee data.
• Your own employment agreements and HR policies.

We strongly recommend consulting employment counsel before deploying Agents in employee performance or HR contexts.

5. Voice, Persona & Identity Standards

• Agent names and personas should make reasonably clear that they are AI, not human. Do not create personas with full human names and backstories designed to deceive participants into believing they are speaking with a human.
• When an Agent introduces itself at the start of a meeting (recommended practice), it should identify itself as an AI assistant.
• ElevenLabs voice usage must comply with ElevenLabs’ Voice Usage Policy.

6. Bring-Your-Own-Agent (API Integration)

Company plan customers integrating custom agent logic via the CoAgentor API remain fully responsible for that logic’s compliance with this AUP and all applicable laws. You may not introduce agent logic that:

• Exfiltrates data outside the CoAgentor platform without user authorization
• Accesses CoAgentor infrastructure beyond the defined API scope
• Injects malicious code, prompts, or exploits into the CoAgentor environment
• Violates any provision of this AUP or the Terms of Service

7. Audit Rights

We reserve the right to audit usage logs for AUP compliance. If we detect patterns consistent with prohibited use, we may suspend your account pending investigation without prior notice. We will notify you of the basis for suspension unless prohibited by law or ongoing investigation.

8. Reporting Violations

If you become aware of AUP violations by another user, please report to [email protected] with “AUP Report” in the subject line. Reports are treated confidentially. We investigate all credible reports.

9. Consequences of Violation

Depending on severity, violations may result in: a written warning; feature suspension; account suspension; permanent account termination without refund; reporting to relevant law enforcement or regulatory authorities; and civil claims for damages where our indemnification rights apply.

10. Changes

We may update this AUP as the Service evolves. Material changes will be communicated by email with 14 days’ notice. Continued use constitutes acceptance.

11. Questions

Contact [email protected] — subject: “AUP Question” — before deploying in any use case you are uncertain about. We would rather answer a question than terminate an account.