Use the system for its agreed purpose. Keep access, data and automated actions within their boundaries.
This policy sets out the permitted uses and restrictions for our website and the systems we build or operate. It also explains your responsibilities when you give other people access.
Read the full clauses for the conditions that apply to your engagement.
Make genuine enquiries, operate the agreed systems and give your authorised personnel access. Once ownership passes under the Terms, you can read, modify, extend or transfer the code written for you.
Open-source code follows the licence supplied with its repository; this policy does not replace those licence rights.
Permitted use · section 3 ↓Tell us before scoping a system that will handle sensitive data. Do not introduce it into a system that was not designed to receive it.
Security scans, penetration tests and load tests against our infrastructure require prior written consent. Testing a system you own is addressed separately in clause 4.4.
Testing and other restrictions · section 4 ↓Unauthorised access, shared personal credentials, malware, bypassed security controls, impersonation and deceptive communications are prohibited.
Section 4 also covers unlawful activity, infringement, harassment, unsolicited communications and unauthorised data extraction.
Read all prohibitions · section 4 ↓An agent’s ability to make a call or take an action does not establish permission to do it. Section 6 covers identity disclosure, calling and recording requirements, regulated advice and escalation.
Read the complete agent restrictions ↓“I’m an AI assistant for the business. How can I help?”
“I think I’ve been charged twice. Can you refund me?”
Escalate the complaint to a person. Do not bypass an approval required by the Proposal.
If you discover suspected compromise, unauthorised access or a vulnerability, contact legal@anteomnio.com. Sections 7 and 8 explain notification and disclosure responsibilities.
The vulnerability-reporting undertaking in clause 8.2 has specific conditions. It does not bind third parties or replace the prior written consent required for testing our infrastructure.
Read the disclosure conditions ↓Anteomnio Marketing (OPC) Private Limited
1.1 This policy is incorporated into our Terms and Conditions by clause 2.3 of those Terms. A breach of this policy is a breach of those Terms and may be a material breach for the purposes of clause 19.4 of them.
1.2 Capitalised terms used in this policy have the meanings given in clause 3 of the Terms.
1.3 Clause 18.4 of the Terms obliges you to indemnify us against claims arising from a breach of this policy by you or by any person to whom you grant access, and that indemnity is not subject to the limit in clause 17.6 of the Terms.
2.1 This policy binds:
2.2 Once a system has been delivered up and is operated under your control, you are responsible for the manner in which it is used by every person to whom you grant access, and you will procure their compliance with this policy.
2.3 You will ensure that the terms on which you make a system available to your own users impose obligations no less protective than those in this policy, and that they are sufficient to permit you to comply with clause 2.2.
3.1 Any lawful use for business purposes is permitted, including the submission of a genuine enquiry, use of the portal, operation of the automations and agents built for you, and the granting of access to your own personnel within the scope recorded in the Proposal.
3.2 Because title to the Deliverables passes to you under clause 12.2 of the Terms, you are free to read, modify, extend and transfer the code we write for you, or to place it in the hands of another developer. Nothing in this policy restricts that right.
3.3 Our open source projects may be used, studied, modified and redistributed in accordance with the licence supplied with each project's repository. Nothing in this policy purports to restrict any right granted to you by that licence, and to the extent of any conflict that licence prevails in respect of the licensed code.
4.1 You must not, and must not permit any person to, engage in the conduct set out in clauses 4.2 to 4.5.
5.1 Where a system is to process health, financial, biometric, genetic or other sensitive personal data, you must notify us before the Engagement is scoped so that the system can be designed with appropriate safeguards and so that the necessary agreements can be put in place. For health data within the scope of HIPAA we execute business associate agreements and build on HIPAA eligible providers.
5.2 You must not introduce sensitive data into a system that was not scoped to receive it. Doing so is a breach of this policy, may place you in breach of your own statutory obligations, and falls within clause 17.8 of the Terms, so that we have no liability for any consequence of it.
6.1 An agent built under an Engagement communicates with the public in your name. The following are accordingly prohibited.
6.2 You determine what your agent says and does and you retain sole responsibility for the decisions your business takes by means of it, under clause 13.1 of the Terms. Call recordings and transcripts are created and stored within your own systems and under your sole control, under clause 13.4 of the Terms.
6.3 Clause 13.6 of the Terms places responsibility for regulatory compliance in respect of agents on you, and a breach of this clause 6 engages the indemnity in clause 18.4 of the Terms.
7.1 You must:
7.2 You must notify us without delay on becoming aware of any security incident, suspected compromise or unauthorised access affecting a system we built or operate. A failure to notify promptly falls within clause 17.8 of the Terms.
8.1 If you identify a security vulnerability in a system we operate, report it to legal@anteomnio.com before disclosing it to any other person. We acknowledge every report within one working day.
8.2 We will not commence or support legal proceedings against any person who reports a vulnerability in good faith, provided that the person remains within systems we ourselves operate, accesses only the minimum necessary to demonstrate the vulnerability, does not access, alter, copy, exfiltrate or retain the data of any other person, does not degrade or interrupt the service for others, does not demand payment as a condition of disclosure, and allows us a reasonable period to remediate before any public disclosure. This undertaking is given by us alone and cannot and does not bind any third party whose systems or networks a tester reaches in the course of testing.
9.1 We monitor access and error logs on infrastructure we manage for the purposes of security, abuse prevention, performance and fault diagnosis, in accordance with clause 4.2 of our Privacy Policy.
9.2 We do not use those logs to profile any individual, and we do not inspect the content of your data, files or messages except to the extent necessary to respond to a support request made by you, to investigate a suspected breach of this policy, or where required by law.
9.3 We are under no obligation to monitor for breaches of this policy, and no failure to detect or act on a breach constitutes a waiver of our rights under clause 10.
10.1 Where this policy is breached we may, at our discretion and in proportion to the gravity of the breach, issue a written warning, require specified remedial action within a stated period, suspend or restrict access to systems we manage, remove or disable offending content, terminate the Engagement under clause 19.4 of the Terms, or report the matter to the competent authority where the law requires or permits it.
10.2 We will notify you before exercising a right under clause 10.1 unless the risk to any person, to our systems or to a third party is such that immediate action is necessary, or the law prevents us from doing so.
10.3 The rights in clause 10.1 are in addition to, and not in substitution for, any other right or remedy available to us, including the indemnity in clause 18.4 of the Terms.
10.4 A suspected breach of this policy, and any enquiry about it, should be reported to legal@anteomnio.com or submitted through our contact form. We reply to every message within one working day.
Include the relevant engagement and the use you are considering so we can check it against the agreed scope.
For incidents and suspected breaches, see section 7 and section 10.
Back to the start ↑