Sociali — Acceptable Use Policy

This Acceptable Use Policy (“AUP“) governs use of the Sociali platform and is incorporated into the Terms of Service. Capitalised terms have the meaning given there.

This AUP exists so that we can act quickly against abuse without renegotiating your contract. We keep it deliberately short and enforceable.

1. Who this applies to

You, your Authorised Users, and anyone you permit to access the Service — including clients whose Brands you manage as an agency. You are responsible for their compliance.

2. You must comply with Third-Party Platform rules

The Service publishes to platforms we do not control. You must comply with the terms, developer policies, community standards and advertising policies of every Channel you connect, including Meta (Facebook, Instagram, Threads), LinkedIn, TikTok, and Google Business Profile.

In particular, you must not use the Service to:

• operate accounts that impersonate a person or organisation without authorisation;

• engage in inauthentic behaviour — coordinated posting from fake accounts, engagement farming, artificial amplification, or vote/follower manipulation;

• evade a platform’s rate limits, content moderation, account suspension, or ban;

• publish to Channels you are not authorised to manage;

• scrape or bulk-collect platform data other than through the platform’s sanctioned APIs as the Service uses them.

A Third-Party Platform’s enforcement against your Channel is not a failure of the Service, and we may be required to suspend your access to protect our platform integrations.

3. Prohibited content

Do not upload, generate, schedule or publish content that:

Illegal and harmful

• is illegal in any jurisdiction where it will be published;

• sexually exploits or endangers children, or contains CSAM (we report this to authorities and terminate immediately, without notice);

• depicts or promotes non-consensual sexual content, or sexual content involving real people generated without consent;

• promotes, facilitates or provides instructions for terrorism, violent extremism, human trafficking, or serious violence;

• promotes self-harm, suicide, or eating disorders;

• harasses, threatens, bullies, doxes, or incites violence against a person or group;

• promotes hatred or discrimination based on race, ethnicity, national origin, religion, disability, sex, gender identity, sexual orientation, age, or veteran status.

Deceptive

• is fraudulent, deceptive, or a scam, including phishing, financial fraud, pyramid or MLM recruitment schemes, and fake reviews or testimonials;

• makes health, medical, financial or earnings claims that are false, unsubstantiated, or that require a disclosure you have not made;

• misrepresents synthetic or AI-generated media of a real person or event as authentic, or omits an AI disclosure where one is legally or contractually required.

Rights-infringing

• infringes intellectual property, publicity or privacy rights — including third-party images, music, video, fonts, trademarks, and user-generated content re-shared without permission.

Malicious

• contains malware, or links to sites distributing malware or conducting phishing.

4. Prohibited data

Do not submit to the Service:

• protected health information (PHI) subject to HIPAA — including patient names, records, images, or identifiable case details in posts, briefs, comments or AI prompts;

• cardholder data (full PAN, CVV, magnetic stripe data);

• government identifiers (Social Security, passport, driver’s licence, national ID numbers);

• biometric identifiers or precise geolocation of individuals;

• special category personal data under GDPR Article 9 (racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, sex life or sexual orientation), except where it is content the data subject has manifestly made public and you have a lawful basis to publish it;

• personal data of children under 13 (or under 16 where local law requires), or data collected in violation of COPPA.

If you operate in healthcare, senior living or wellness, use the Service for public-facing marketing content only. See §4.6 of the Terms.

If you need to process any of the above, contact legal@sociali.ai before doing so. Unilateral upload is a material breach.

5. Prohibited technical conduct

Do not:

• probe, scan, or test the vulnerability of the Service, or breach or circumvent authentication or access controls — except under our Vulnerability Disclosure Policy on the Security page, which we encourage you to use;

• access data, accounts, or Brands that are not yours;

• interfere with or disrupt the Service, including denial-of-service, flooding, or deliberately generating disproportionate load;

• exceed documented API rate limits, or use automated means to extract data outside our documented APIs;

• reverse engineer, decompile, or attempt to derive the source code, models, or prompts of the Service;

• resell, sublicense, or provide the Service as a service bureau, other than legitimate agency management of client Brands;

• use the Service to develop a competing product, or to benchmark it for publication without our written consent;

• share individual user credentials, or circumvent seat, Brand, Channel, storage, or AI credit limits;

• send unsolicited bulk messages, spam, or bulk unsolicited connection requests through connected Channels.

6. AI Features — additional rules

Do not use AI Features to:

• generate content prohibited by §3;

• generate synthetic audio, images or video of a real, identifiable person without that person’s documented consent;

• attempt to extract, reproduce, or reverse engineer the underlying models, system prompts, or another customer’s data;

• produce content that a model provider’s own usage policy prohibits (these flow down to you through our agreements with the providers listed in the Sub-processors list);

• automate the generation and publication of content at a volume or in a manner designed to manipulate a platform’s ranking or recommendation systems.

You must review AI Output before publication. You are the publisher of everything sent to your Channels.

7. Reporting abuse

Report suspected violations to abuse@sociali.ai. Report security vulnerabilities to security@sociali.ai under the Vulnerability Disclosure Policy on the Security page.

8. Enforcement

Where we reasonably determine this AUP has been violated, we may — proportionately to the severity — do any of the following:

1. notify you and request remediation;

2. remove or disable specific content, a Channel, a Brand, or an Authorised User;

3. suspend the account under §7 of the Terms;

4. terminate for material breach under §14.2 of the Terms;

5. report to law enforcement or an affected Third-Party Platform where legally required or where there is a risk of serious harm.

We will give notice and an opportunity to remediate before suspension or termination, except where the violation involves CSAM, an active security threat, a legal obligation to act immediately, or a demand from a Third-Party Platform.

Enforcement decisions may be appealed to legal@sociali.ai; we aim to respond within [5] business days.

9. Changes

We may update this AUP. Material changes take effect [30] days after we notify account administrators, except where a change is required immediately by law or a Third-Party Platform.

Contact: legal@sociali.ai