Acceptable Use Policy

1. Purpose

This Acceptable Use Policy ("AUP") sets out the rules that all users of the AUTONOMi platform must follow. It applies to dealer accounts, end users acting on behalf of dealer accounts, API consumers, and visitors to our public surfaces. This AUP supplements the Terms and Conditions — in the event of conflict, the Terms and Conditions control.

Violation of this AUP may result in suspension or termination of access, removal of offending content, notification of relevant authorities, and civil or criminal action where appropriate. See Section 7 for our enforcement process.

2. Prohibited Conduct — Platform Misuse

You may not, and may not permit others to:

• Reverse-engineer, decompile, or otherwise attempt to derive the source code, model weights, prompts, or proprietary heuristics underlying the AUTONOMi platform — including the AEGIS agent system and the AXIOM constitution layer.
• Use the platform, the AEGIS API, or any AUTONOMi output to train, fine-tune, or evaluate competing AI models or advertising automation systems.
• Access or use the platform via any means other than the documented interfaces (web app, public API, official SDKs). Headless scraping, undocumented endpoint discovery, or payload mutation outside published schemas is prohibited.
• Bypass, disable, or interfere with security, rate-limiting, authentication, or compliance gates — including the AXIOM governance layer, the DealerDecisionAudit hash chain, or any module-gating logic.
• Submit false or misleading data into the platform — including but not limited to inventory feeds, dealer credentials, campaign budgets, or compliance attestations — with intent to manipulate downstream outcomes.
• Use the platform in any manner that could disable, overburden, damage, or impair the service, or interfere with other users' ability to use it.

3. Prohibited Conduct — Advertising & Compliance

AUTONOMi runs ads on third-party platforms on your behalf and carries compliance obligations to those platforms, to regulators, and to consumers. You may not use the platform to:

• Run advertising that violates federal advertising law (including FTC Act §5, Magnuson-Moss, Reg Z, Reg M, CAN-SPAM) or applicable state advertising regulations.
• Run advertising that violates the published policies of the integrated ad platforms (Google Ads, Microsoft, Meta, TikTok, YouTube), including their automotive vertical policies.
• Run advertising for vehicles or services you are not authorized to sell or promote.
• Override compliance verdicts produced by the AXIOM Strategist + Composer + Verifier triad through manual database mutation, request forgery, or other bypass methods.
• Misrepresent prices, payments, financing terms, OEM incentives, vehicle availability, or warranty terms.
• Use OEM brand assets, logos, or trademarked materials beyond the licenses granted by the manufacturer.
• Target advertising in ways that violate fair-housing, fair-lending, or anti-discrimination law (including CREDIT-special-ad-category requirements on Meta and equivalent policies on other platforms).

4. Prohibited Conduct — Data & Privacy

• Upload, ingest, or otherwise introduce personal data into AUTONOMi without a lawful basis under applicable privacy law.
• Use AUTONOMi to target, profile, or build inferences about individuals based on protected categories (race, religion, sexual orientation, health condition, etc.) where prohibited by law or platform policy.
• Attempt to access, modify, or exfiltrate data belonging to other AUTONOMi customers. Multi-tenant boundaries are enforced; any attempt to bypass them is a security vulnerability subject to our Responsible Disclosure Policy — coordinate, do not exploit.
• Collect personal data from AUTONOMi users (including employees, contractors, or other dealer customers) outside the documented APIs.

5. Prohibited Conduct — Network & Resource Abuse

• Send unsolicited communications, spam, or phishing through AUTONOMi-controlled domains or email infrastructure.
• Use AUTONOMi infrastructure as a conduit for distributing malware, ransomware, or any code intended to harm third-party systems.
• Engage in volumetric, denial-of-service, or distributed denial-of-service attacks against AUTONOMi or any third party using AUTONOMi infrastructure.
• Exceed published API rate limits without prior written authorization. Repeated rate-limit violations may trigger automatic account throttling.
• Mine cryptocurrency or perform any other compute-intensive workload on AUTONOMi infrastructure outside of normal advertising-platform operations.

6. User Responsibilities

You agree to:

• Maintain the security of your account credentials. Notify us promptly at security@autonomitech.com of any suspected compromise.
• Respect the OAuth scopes granted to AUTONOMi by your connected ad-platform accounts. Do not attempt to escalate scopes outside the documented onboarding flow.
• Provide accurate dealer registration, billing, and contact information; keep this information current.
• Comply with all applicable laws and regulations in your jurisdiction and the jurisdictions where your campaigns serve.
• Honor any compliance hold, dealer-acknowledgement gate, or review queue surfaced by the platform — these exist for your legal protection as much as ours.

7. Enforcement

When we believe an AUP violation has occurred, we will, at our discretion, take one or more of the following actions:

• Notice. First-time, low-severity violations typically result in a written notice and an opportunity to cure.
• Suspension. Repeated, ongoing, or higher-severity violations may result in temporary suspension of platform access pending resolution.
• Removal. Offending campaigns, content, or data may be removed from the platform without prior notice where required by law or platform policy.
• Termination. Severe, repeated, or willful violations — particularly those exposing AUTONOMi or other users to legal risk — may result in immediate termination without refund.
• Reporting. Where we are required by law or where the violation involves criminal conduct, we will cooperate with law enforcement.

We will use reasonable efforts to give you notice and a chance to address violations before terminating your account, except in cases where the violation poses immediate risk to AUTONOMi, our other users, or third parties.

8. Reporting Abuse

To report abuse of the platform — by another AUTONOMi user, or by a third party using AUTONOMi infrastructure — email abuse@autonomitech.com. Include as much detail as possible: the offending account or campaign IDs, evidence of the violation, and your contact information for follow-up.

9. Changes to this AUP

AUTONOMi may update this AUP from time to time as the platform evolves and as legal or regulatory requirements change. Material changes take effect 30 days after they are published on this page. Continued use of the platform after the effective date constitutes acceptance of the updated AUP.