Acceptable Use Policy

Effective date: October 1, 2026

1. Purpose and scope

This Acceptable Use Policy ("AUP") covers every service Simple Is Good Inc. ("Simple Is Good", "we", "us", "our") provides under the SimpleUP name: Jobs, Live AI Agents (voice and chat), texting and messaging, email, the Hub, integrations and data exports (together, the "Services").

This AUP is part of our Terms of Service and of any signed Agency Agreement. Words with capitals, such as Client, Job, Draft, Live AI Agent, Client Content and Third-Party Platforms, mean what the Terms say they mean.

This AUP binds the Client and everyone the Client lets use or configure the Services, including its employees, contractors, agents and affiliates. The Client is responsible for all activity on its account.

We may update this AUP. Significant changes take effect 30 days after we post them, unless a law, a regulator, a phone carrier or an AI provider requires a change sooner, in which case it takes effect when we give notice.

2. General rules

The Client must not use the Services, or let them be used, to:

• break any federal, provincial, state or local law, regulation, order or carrier rule;
• infringe a copyright, trademark, patent, trade secret or other right;
• defame, harass, threaten, stalk, intimidate or abuse anyone, or contact someone who has asked not to be contacted;
• send malware or any code meant to damage a system or get into it without permission;
• create, request, store or send sexual content involving minors. There is zero tolerance: we end the service at once, without notice, and report it to the police;
• promote violence, terrorism, self-harm, or hatred against a group on a protected ground;
• commit or help fraud, phishing, identity theft, pyramid or Ponzi schemes, or any deceptive financial practice;
• advertise or sell illegal goods or services, including unlicensed weapons, controlled substances and counterfeit products;
• get around security controls, probe for weaknesses, or access another client's data;
• reverse-engineer or scrape the Services, or use conversation data or AI output to train or benchmark a competing AI product;
• resell, sublicense or white-label the Services without our written permission.

3. AI rules

• No deceptive impersonation. Do not set up AI to pose as a specific real person, a government body, the police, a financial institution, or any organization the Client is not authorized to represent.
• No denying it is AI. A Live AI Agent must never deny being an AI system when asked directly, and must disclose it wherever the law requires.
• No unsupervised high-stakes decisions. The Services draft, schedule, qualify and inform. They must not be the sole basis of a medical, legal, financial, credit, employment, housing, insurance or immigration decision, and must not be presented as professional advice.
• Not an emergency service. The Services must never be presented or relied on as an emergency line, a 911 substitute, a crisis line or medical triage. The Client's emergency contact must reach a person directly, without going through AI.
• No safety-critical use. The Services must not control machinery, vehicles, medical devices, industrial systems or critical infrastructure.
• No guardrail tricks. Do not try, by prompt manipulation, injection or jailbreaking, to make the AI produce content this AUP or the AI provider prohibits.
• Review stays with the Client. AI output can be wrong. The Client must read Drafts before approving them and check appointments, commitments and details captured by AI.

4. Rules for particular Jobs

• Reviews. Ask every customer the same way. Do not screen out unhappy customers before they reach a review site, offer rewards for reviews, post reviews for your own business, or ask staff, friends or family to review you. Google and other review sites ban these practices.
• Job posts and screening. Job posts and applicant screening must follow employment and human rights law. Do not screen applicants on a protected ground, such as age, sex, race, religion, disability or family status.
• Ads and posts. Ads and posts must follow the rules of the platform they run on, and must not make misleading claims about prices, results or qualifications.
• Newsletters and follow-ups. Only send to people who have given the consent CASL requires, and include your business name, contact details and a working unsubscribe link in every message.

5. Restricted and prohibited industries

Restricted. The Client needs our written approval before using a Live AI Agent, or any Job that asks people for sensitive information, in these industries. Approval may come with conditions, such as extra disclaimers, a fixed script, a required hand-off to a person, a signed data-processing addendum or different pricing.

• Healthcare, medical, dental and mental-health practices that handle personal health information
• Legal services, debt collection, credit repair and bankruptcy services
• Financial services, lending, mortgage brokerage, insurance, investment advice and cryptocurrency
• Cannabis, alcohol, tobacco and vaping products
• Firearms, ammunition and regulated weapons
• Gambling, betting and gaming
• Multi-level marketing, and generating leads to sell to third parties
• Political campaigns, fundraising and polling

Draft-and-approve Jobs that do not ask for sensitive information, such as review requests, posts or newsletters, do not need this approval.

Prohibited. We will not approve:

• adult content and dating services;
• payday or predatory lending above the legal maximum rate;
• debt-relief or credit-repair services that charge fees before results;
• counterfeit goods, essay mills and fake review generation;
• deceptive robocalling, "one-ring" and wangiri fraud, and traffic pumping.

Using the Services in a restricted industry without our written approval is a material breach of the Client's agreement.

6. Texting, calling and messaging

This section applies to all texts, messages and outbound calls sent through the Services.

6.1 Consent and lists

The Client is the sender and caller of record. For every person contacted, the Client must have, and be able to prove, the consent required by Canada's Anti-Spam Legislation (CASL), the CRTC Unsolicited Telecommunications Rules, and for United States numbers the Telephone Consumer Protection Act (TCPA) and CTIA messaging guidelines. We do not supply, check, clean or guarantee contact lists. Bought, rented, scraped or harvested lists are prohibited.

6.2 Opting out

• Every messaging program must honour opt-outs.
• The first message of every campaign, and at least one message a month in any recurring program, must say "Reply STOP to opt out".
• STOP, END, QUIT, CANCEL and UNSUBSCRIBE must all work at once and automatically. An opt-out must never be overridden, and a person who opted out must not be re-subscribed without fresh express consent.
• Every outbound call must offer a way to be removed from the calling list, and removals must be honoured within the time the CRTC rules set. The Client must register with and check the National Do Not Call List where it applies.

6.3 Identification

Every call and message must name the Client and give a way to contact it. Spoofed, misleading or unregistered caller ID is prohibited, as is any attempt to get around caller ID verification (STIR/SHAKEN).

6.4 Hours

Calls and texts may only be sent at the hours allowed in the recipient's time zone. In Canada, that is 9:00 a.m. to 9:30 p.m. on weekdays and 10:00 a.m. to 6:00 p.m. on weekends. In the United States, it is 8:00 a.m. to 9:00 p.m. Where both apply, the stricter hours govern.

6.5 Carrier registration and content

Brand and campaign details registered with carriers (for example A2P 10DLC in the United States) must be accurate and current, and traffic must match the registered use. Content about sex, hate, alcohol, firearms, tobacco or cannabis is prohibited over registered business texting, even where it is legal. Public link shorteners are prohibited. Spreading traffic across numbers or campaigns to avoid carrier filters ("snowshoeing") is prohibited.

6.6 Number integrity

No traffic pumping or artificially inflated traffic, no use of numbers to avoid carrier billing, and no buying numbers through the Services to resell.

7. Data and privacy

The Client decides why Client Customer Data is collected and is responsible for the notice and consent that PIPEDA and provincial privacy laws require.

Without our written agreement and a signed data-processing addendum, the Client must not upload, or set up the Services to ask for or capture:

• personal health information;
• full payment card numbers, card security codes or banking logins;
• Social Insurance Numbers, Social Security Numbers or other government identity numbers;
• biometric information;
• information knowingly collected from children under 13;
• criminal record or court information.

If such information is captured by accident, the Client must tell us promptly, and we may delete the affected records. The Client must have a lawful basis for any third-party personal information it gives us, and must tell callers when calls are recorded or transcribed.

8. Fair use and platform integrity

• No load testing, penetration testing or vulnerability scanning without our written permission.
• No automated volume that slows the Services for others or goes beyond the Client's Limits.
• Logins must not be shared outside the Client's organization, and one Plan must not serve several unrelated businesses.
• Credits and prepaid balances are for the Client's own use, have no cash value and cannot be resold or transferred.
• Third-Party Platforms have their own terms, and the Client is responsible for following them.

9. Client responsibilities

• Review and approve Live AI Agent scripts and knowledge before launch, and keep them current.
• Keep a way for people to reach a person for anything the AI cannot or should not handle.
• Check transcripts and sent messages from time to time for misuse or mistakes.
• Tell us within 24 hours of any suspected breach, unauthorized access or misuse.
• Make sure everyone who uses the Services for the Client knows this AUP.

10. Enforcement

We may investigate suspected breaches of this AUP, and the Client must cooperate. Depending on how serious the breach is, we may, with or without notice:

• warn the Client and require a fix within a set time;
• limit or turn off specific features, numbers or campaigns;
• suspend all or part of the Services;
• end the Client's agreement for cause;
• remove or turn off the content or settings involved;
• report the matter to the police, the CRTC, the Office of the Privacy Commissioner of Canada, or an affected carrier or provider.

We suspend at once, without warning, for child sexual abuse material, credible threats of violence, active fraud, a security compromise, an instruction from a carrier or regulator, or anything that exposes us to regulatory action or loss of carrier or provider access.

Suspension or ending of the Services under this AUP does not entitle the Client to a refund, credit or payout of a balance, and does not cancel fees owing. The Client's indemnity in the Terms covers claims caused by its breach of this AUP.

11. Reporting misuse

To report misuse of the Services, including by someone else, contact Simple Is Good Inc., Oshawa, Ontario, Canada, at [email protected] or 1 888 670 6746.

12. Governing law

This AUP is governed by the laws of the Province of Ontario and the federal laws of Canada that apply there. The courts in Oshawa, Ontario, Canada have exclusive jurisdiction.