Legal

Acceptable Use Policy

Last updated: May 19, 2026

This Acceptable Use Policy ("AUP") describes the rules that apply to any party ("Customer", "Client", "User") that uses any product or service ("Services") provided by Grovity Services LLC ("Grovity"), and to any user of any software application or service made available by the Customer who interacts with the Services ("End User"). The examples described in this AUP are not exhaustive; they illustrate categories of prohibited use without limiting them. The Customer is responsible for compliance with this AUP by its End Users and Authorized Users.

If the Customer or any End User violates this AUP, Grovity may suspend or terminate the use of the Services in accordance with the Terms and Conditions. This AUP may be updated by Grovity from time to time with reasonable notice, which may be provided through the Customer's account, email, or by posting an updated version on https://www.grovity.ai.

The Customer agrees that its use of the Services and its End Users' interactions will comply with the policies of every third-party platform connected to the Services, including without limitation:

The Meta Business Platform Terms, the WhatsApp Business Solution Terms, the WhatsApp Business Messaging Policy, and any other policies issued by Meta Platforms, Inc.

The operating rules of Visa, Mastercard, American Express, and any other card scheme, payment network, or financial institution integrated with the Services.

The acceptable-use, anti-fraud, and consumer-protection policies of any bank, payment processor, or financial regulator applicable to the Customer's use.

The terms of voice, SMS, and telecommunications providers and the rules of carriers in each jurisdiction where the Customer operates.

The terms of CRMs, ERPs, and other enterprise applications integrated with the Services.

A violation of any of the foregoing third-party policies will be considered a violation of this AUP.

The Customer must not use the Services to transmit, store, generate, or facilitate any content or communication (commercial or otherwise) that is illegal, harmful, fraudulent, unwanted, abusive, deceptive, defamatory, obscene, or otherwise inappropriate. Prohibited content and conduct include, without limitation:

Content that exploits, abuses, or endangers minors, including child sexual abuse material (CSAM).

Hate speech, content that incites violence or discrimination, or material produced by or supporting hate groups.

Threats, harassment, stalking, defamation, doxxing, or invasions of privacy.

Sexually explicit content (except where expressly permitted by Grovity for adult-verified Customers in compliant jurisdictions).

Content that promotes self-harm, suicide, eating disorders, or other harmful behaviors.

Glorification or facilitation of terrorism, violent extremism, or other criminal organizations.

Synthetic media (deepfakes), voice clones, or other AI-generated content used to deceive, defraud, impersonate real people without consent, or interfere with elections or democratic processes.

Confirmed misinformation that poses a risk to public health, public safety, or the integrity of democratic processes.

The Customer must not use the Services to engage in, promote, or facilitate any activity that is illegal, misleading, harmful, infringes the rights of others, or is detrimental to Grovity's business operations or reputation, including:

Violation of applicable laws, regulations, or industry guidance ("Applicable Laws"), including laws requiring (a) consent before transmitting, recording, collecting, or monitoring data or communications, or (b) honoring opt-out requests.

Sending unsolicited commercial communications (spam), bulk messaging without prior consent, or any communication that violates anti-spam laws (such as the CAN-SPAM Act, CASL, or equivalent regulations).

Interfering with or negatively affecting any aspect of the Services or any third-party network or platform connected to the Services.

Creating a false identity or attempting to deceive others about the identity of the sender or the origin of any data or communication, including impersonation of Grovity, governmental authorities, financial institutions, or other organizations.

Phishing, smishing, vishing, business email compromise, or any social engineering activity intended to obtain credentials, payment information, or other sensitive data deceptively.

Money laundering, sanctions evasion, financing of terrorism, fraud (including chargeback fraud, friendly fraud, or refund abuse), or any activity prohibited by anti-financial-crime laws.

Unauthorized collection, processing, or sale of personal data, including scraping, harvesting, or any practice in violation of data protection laws.

Marketing or sale of products or services prohibited by Applicable Laws or by the policies of integrated platforms (such as Meta's prohibited goods and services list).

The Customer must not violate the integrity of the Services, including:

Bypassing, circumventing, exploiting, defeating, or deactivating any limitation or restriction imposed on the Services.

Probing, scanning, or testing the vulnerability of any Grovity system or network, except under a written security testing agreement.

Attempting to circumvent any security mechanism, access control, rate limit, or filtering capacity.

Any denial-of-service (DoS) or distributed denial-of-service (DDoS) attack, or any other conduct that attempts to interrupt, disable, overload, or impair the Services.

Transmitting code, files, scripts, agents, or programs intended to cause harm, including viruses, ransomware, spyware, worms, or other malicious software.

Using automated means (such as bots, scrapers, or harvesters) to access or use the Services in a manner that exceeds the limits established by the Customer's plan or by reasonable industry practices.

Reverse engineering, decompiling, disassembling, or attempting to derive the source code, models, prompts, training data, or proprietary architecture of the Services, except where legally permitted.

Attempting to gain unauthorized access to the Services, to other users' accounts, or to any non-public area of the Grovity infrastructure.

The Customer is responsible for the manner in which AI Employees and AI Agents created or operated through the Services interact with End Users and with the public. In addition to the prohibitions set forth above, the Customer agrees:

To configure AI Employees with clear guardrails so that they remain within the Customer's business scope and do not engage in deceptive, harmful, or illegal conduct.

To provide appropriate disclosures to End Users when interacting with AI-based agents, especially where required by law (including, where applicable, the California Bot Disclosure Law and similar regulations).

Not to use AI Employees to provide regulated professional advice (such as legal, medical, or financial advice) without the participation of a duly qualified human professional and appropriate disclaimers.

Not to use the Services to generate or distribute synthetic media that impersonates real individuals without their consent.

To validate AI-generated outputs before relying on them for critical decisions, in accordance with the Terms and Conditions.

When the Services are used in connection with payment processing, banking integrations, or financial workflows, the Customer agrees:

To comply with the applicable rules of the relevant card schemes (Visa, Mastercard, etc.), payment processors, and banking partners.

Not to use the Services in a way that would cause Grovity or the Customer to fall outside the scope of compliance provided by certified payment processors (Grovity does not store full payment card numbers).

To honor legitimate consumer protection rules, including timely refunds, dispute responses, and clear disclosures.

Not to use the Services for businesses prohibited by the card schemes' high-risk merchant lists (such as illegal goods, certain regulated industries without proper licensing, or content that violates scheme rules), unless expressly authorized by Grovity and the underlying providers.

The Customer is responsible for determining whether the Services offer adequate safeguards for the Customer's use, including any safeguards required by Applicable Laws, before transmitting or processing—or allowing End Users to transmit or process—any data or communication through the Services. The Customer is responsible for:

Obtaining all necessary consents and legal bases for processing personal data through the Services, in accordance with GDPR, CCPA, Colombian Law 1581/2012, the Brazilian LGPD, and other applicable laws.

Implementing the appropriate notices and disclosures to its End Users.

Honoring opt-out, deletion, access, and other data subject rights requests.

Not transmitting categories of data that the Customer is not legally authorized to process or that exceed the scope of the contracted Services.

Violations of this AUP, including any prohibited content, communication, or activity, can be reported to info@grovity.ai. The Customer agrees to immediately report to Grovity any violation of this AUP of which it becomes aware and to cooperate, as reasonably requested by Grovity, to investigate and remedy such violation as soon as possible.

Grovity may take any action it deems appropriate in response to a violation of this AUP, including without limitation: (i) issuing a warning; (ii) temporarily limiting or suspending the Services; (iii) terminating the Customer's account; (iv) removing or blocking specific content or messages; (v) cooperating with regulators, courts, or third-party platforms (including Meta and payment networks) in any investigation; and (vi) pursuing legal remedies. The remedies provided in this section are cumulative and do not limit any other rights of Grovity under the Terms and Conditions or applicable law.

Grovity Services LLC

[REGISTERED ADDRESS]

info@grovity.ai | https://www.grovity.ai