Acceptable Use Policy

Last updated: May 1, 2026

This Acceptable Use Policy ("AUP") governs your use of the K3X platform, website, APIs, and related services (collectively, the "Services") provided by K3X Inc. ("K3X", "we", "us"). It is incorporated by reference into our Terms & Conditions. Capitalized terms not defined here have the meanings given in the Terms.

This AUP applies to everyone who accesses the Services — Customers, their authorized users, and any recipient of communications sent through the Services.

We may update this AUP at any time. Material changes take effect when posted, unless a later effective date is specified.

1. General Rules

You agree to use the Services only for lawful purposes and only as expressly permitted by your subscription, the Terms, this AUP, and any applicable Documentation. You are responsible for everything done through your account, including by your authorized users and any AI agents you configure.

You must:

• Comply with all applicable laws, including communications, privacy, anti-spam, consumer-protection, export-control, and sanctions laws.

• Maintain the confidentiality of your account credentials.

• Promptly notify us of any unauthorized access or use of your account.

• Use commercially reasonable security practices on the systems and networks you connect to the Services.

2. Prohibited Content and Conduct

You may not use the Services to create, store, transmit, or facilitate any content or activity that:

Illegal or harmful activity

• Violates any law, regulation, court order, or third-party right.

• Promotes or facilitates fraud, money laundering, identity theft, human trafficking, terrorism, child sexual abuse material, or any criminal activity.

• Threatens, defames, harasses, stalks, or intimidates any person, or incites violence against any individual or group.

Deceptive or harmful commercial practices

• Misrepresents your identity, affiliation, or the source of any communication.

• Constitutes deceptive marketing, false advertising, pyramid schemes, multi-level marketing programs of the type generally prohibited by major communications providers, payday-lending offers prohibited by Twilio or SendGrid policy, debt-collection practices that violate the FDCPA, or unauthorized financial advice.

• Targets vulnerable populations with manipulative, predatory, or exploitative offers.

Intellectual property and confidentiality

• Infringes any patent, trademark, trade secret, copyright, right of publicity, or other proprietary right.

• Discloses confidential or non-public information of any person or organization without authorization.

Malware, security, and abuse

• Distributes malware, ransomware, viruses, or any other malicious code.

• Probes, scans, or tests the vulnerability of the Services or any system or network.

• Bypasses, attempts to bypass, or interferes with any security, authentication, rate-limiting, or access-control mechanism of the Services.

• Reverse-engineers, decompiles, or attempts to extract the source code of the Services, except to the extent expressly permitted by applicable law that cannot be waived by contract.

• Uses the Services to mine cryptocurrency, run unauthorized workloads, or generate excessive load not associated with your normal use of the platform.

High-risk uses

• Operates life-support systems, emergency services, autonomous vehicles, weapons systems, nuclear facilities, or other applications where failure of the Services could result in death, personal injury, or severe environmental damage.

3. Communications Compliance

K3X provides email, SMS, voice, and AI-driven outreach capabilities. You are solely responsible for the legality of the communications you send through the Services.

Consent

• You must obtain all consents required by applicable law before sending any communication. For SMS and automated calls in the United States, this generally means prior express written consent under the Telephone Consumer Protection Act ("TCPA") and corresponding state laws (including the Florida Telephone Solicitation Act and similar mini-TCPA statutes).

• For commercial email, you must comply with the CAN-SPAM Act, Canada's Anti-Spam Legislation ("CASL"), and any other applicable email laws in the jurisdictions of your recipients.

• For recipients located in jurisdictions with stricter rules (e.g., the EU, UK, or Quebec), you must obtain the higher level of consent required by those rules.

Required content

• All commercial messages must accurately identify the sender, include a working unsubscribe or opt-out mechanism, and honor opt-out requests promptly (within the timeframe required by law and, in any event, no later than 10 business days for email).

• SMS campaigns must include "Reply STOP to unsubscribe" or equivalent opt-out language as required by carrier rules and the CTIA Messaging Principles & Best Practices.

Carrier and registry compliance

• For US SMS, you must comply with A2P 10DLC registration requirements through Twilio. You may not send messages from unregistered campaigns or use techniques designed to evade carrier filtering, including "snowshoeing", URL cloaking, or rotating sender IDs to disguise volume.

• You may not send SHAFT content (Sex, Hate, Alcohol, Firearms, Tobacco) through any channel where it is restricted by carriers, regulators, or our upstream providers.

Call recording

• If you record calls through the Services, you are responsible for obtaining consent from all parties as required by applicable law. Many US states (including California, Florida, Pennsylvania, and Washington) require all-party consent. You agree to provide a clear and conspicuous notice or audible disclosure to call participants where required.

Suppression and bounces

• You must maintain and respect suppression lists. You may not re-engage recipients who have opted out, hard-bounced, or filed spam complaints.

4. AI and Automation Use

K3X includes AI agents that can act autonomously on your behalf — including drafting communications, qualifying leads, scheduling, and routing. Your use of these capabilities must comply with the rest of this AUP and the following additional rules:

• You may not use AI agents to send unsolicited communications, evade opt-outs, impersonate a real person without disclosure where disclosure is legally required, or generate content that violates Section 2 above.

• You must not use the Services to generate content that purports to come from a specific real individual in a way that is deceptive or that violates that individual's rights.

• You must comply with applicable AI-disclosure laws, including state laws requiring disclosure that a recipient is interacting with an automated system (e.g., California Bus. & Prof. Code §17941 / SB 1001 in commercial transactions).

• You may not use the Services or any AI output to make consequential decisions about consumers (including credit, insurance, employment, or housing decisions) in a manner that violates fair-lending, fair-housing, equal-credit, or anti-discrimination laws.

• You may not use the Services to train competing AI systems, build a competing product, or extract model weights or system prompts.

5. Data and Privacy

• You may only upload, import, or process personal information for which you have a lawful basis to do so and the right to share with K3X under our Terms and the Data Processing Addendum (where applicable).

• You may not upload special categories of data (as defined by GDPR) or "sensitive personal information" (as defined by the CCPA/CPRA) unless you have given us prior written notice and we have agreed in writing to receive that data.

• You may not upload protected health information ("PHI") subject to HIPAA. The Services are not a HIPAA-compliant platform and we will not enter into a Business Associate Agreement absent a specific written agreement.

• You must not collect or process information about individuals known by you to be under 16 years old.

• You must honor data-subject requests received from your end users, and you must promptly notify us of any request that requires our cooperation.

6. Account and Resource Use

• You may not share login credentials. Each named user must have their own seat.

• You may not use the Services to evade pricing, including by sharing a single seat among multiple humans, programmatically rotating accounts, or using multiple accounts to circumvent usage limits.

• You may not interfere with other customers' use of the Services, degrade Service performance, or consume resources in a manner inconsistent with normal interactive use.

• API calls and webhook traffic must respect documented rate limits. Sustained or burst traffic that exceeds documented limits may be throttled or blocked.

7. Reporting Violations

If you believe someone is using the Services in violation of this AUP, please report it to hey@k3x.ai with as much detail as possible (sender information, message content, timestamps, and any other relevant context). We investigate reports we receive but do not commit to a specific response time.

For DMCA notices, please follow the process described in our Terms and direct notices to hey@k3x.ai.

8. Enforcement

Violations of this AUP may result in any of the following, at our sole discretion and without prior notice where we determine immediate action is necessary:

• A warning or request to remediate.

• Suspension or removal of specific content, features, or integrations.

• Throttling, suspension, or termination of your account or specific users.

• Reporting to law enforcement, carriers, regulators, or affected third parties.

• Cooperation with legal process, subpoenas, and court orders.

We will generally try to give notice and an opportunity to cure for non-egregious violations, but we are not required to. We are not liable for any losses you incur as a result of suspension or termination for an AUP violation, and you remain responsible for fees accrued prior to suspension.

9. Changes to This Policy

We may update this AUP from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through the Services or by email to your account's billing contact.

10. Contact

Questions about this AUP can be sent to hey@k3x.ai.

K3X Inc. 1111B S Governors Ave., Dover, DE 19904, United States Phone: (844) 553-9462