Acceptable Use Policy

This Acceptable Use Policy (“AUP”) is part of the Waveguide Terms of Service (Section 5). It exists because Waveguide operates an autonomous agent on your behalf — and delegated autonomy makes the rules matter more, not less. Actions the agent takes within your configuration are your actions.

Outreach and communications

You will not use the Service to:

• Send spam or unsolicited communications in violation of applicable law, including CAN-SPAM, TCPA, CASL, GDPR, and equivalent laws in the recipient’s jurisdiction.
• Circumvent, disable, or attempt to work around the Service’s consent gates, suppression lists, frequency caps, or AI-disclosure requirements — including on voice calls, where the agent’s self-identification as an AI must remain intact.
• Contact individuals who have opted out, or import contact lists you lack a lawful basis to contact.
• Harass, threaten, or deceive any person, or impersonate any person or organization.

Advertising and content

You will not use the Service to:

• Create or run deceptive, misleading, or fraudulent advertising.
• Target advertising unlawfully, including discriminatory targeting for housing, employment, or credit, or targeting of minors where prohibited.
• Publish content that infringes intellectual-property rights or violates the policies of the platforms the content is published to (Google, Meta, social platforms, and others).

Data

You will not use the Service to:

• Process personal data you lack the right to process, or in ways incompatible with your own privacy commitments.
• Collect or process special-category data (health, biometric, financial account credentials of third parties) through the agent without appropriate legal basis and safeguards.

Security and integrity

You will not:

• Probe, disrupt, or attempt to circumvent the Service’s security controls — the sandbox, the egress proxy, the approval system, risk-tier enforcement, or the credential vault.
• Use the agent, connected tools, or MCP servers to deliver malware, conduct phishing, or attack third parties.
• Connect MCP servers or tools designed to manipulate the agent (tool poisoning, prompt injection) or to exfiltrate data from the Service.
• Abuse credentials: connect accounts you do not control or lack authority to operate.

Enforcement

We may suspend or terminate accounts engaged in prohibited use, per the Terms of Service. Where practicable we’ll contact you first; for abuse in progress (spam runs, attacks), we may suspend immediately — including via the same kill-switch machinery you have access to.

Report abuse: hello@waveguide.adwave.com with the subject “Security disclosure” or “Abuse report”.