User & Telephony Policy

This Acceptable Use Policy (“AUP”) governs all workspaces, developers, administrators, and integrations utilizing Elamora APIs, PSTN telephony numbers, SIP trunks, SMS routes, and conversational AI agents.

Our platform is engineered exclusively for legitimate business engagement, consented customer consultation, support triage, and automated calendar scheduling. We maintain zero tolerance for spam, telecommunications abuse, deceptive impersonation, or unlawful calling practices.

You may not deploy Elamora AI agents or telephony infrastructure in environments where system failure, latency, or AI hallucination could lead to death, physical injury, severe property damage, or catastrophic financial harm:

• Emergency & Crisis Services: Emergency dispatch, 911 / 112 / 999 response simulation, crisis intervention, or suicide prevention lifelines.
• Clinical & Medical Triage: Delivering diagnostic medical advice, pharmaceutical prescription triage, or clinical life-support direction without certified medical personnel supervising in real time.
• Unlicensed Professional Counseling: Representing AI agents as licensed attorneys, certified public accountants, or licensed investment advisors.
• Weapons, Hate & Illicit Goods: Marketing or distributing firearms, explosives, regulated narcotics, non-consensual sexually explicit content, or hate speech targeting protected groups.

Under bot disclosure statutes (including California Business and Professions Code § 17940 and the European Union AI Act, Regulation (EU) 2024/1689 Article 50), consumers have the right to know when they are interacting with an automated system.

You agree that when required by applicable law, your AI voice and chat agents must disclose their automated nature clearly and conspicuously at the outset of the conversation (e.g., “Hello, I am an automated AI assistant calling from [Company Name]...”). You may not deceptively represent that an AI agent is a human being when explicitly asked by the caller.

If you activate call recording or transcription capabilities within Elamora, you must ensure that all call participants are provided with clear, audible notice that the call is being recorded prior to capturing conversation audio.

In jurisdictions with all-party consent requirements (such as California, Florida, Massachusetts, and Germany), recording without explicit consent constitutes a criminal offense and civil tort. Elamora disclaims all liability resulting from your failure to provide adequate recording disclosures.

You agree not to undermine the security, availability, or stability of the Elamora platform:

• Do not execute prompt injection, jailbreaking, or adversarial inputs designed to bypass system prompt boundaries or LLM safety filters.
• Do not probe, scan, or attempt to circumvent tenant data isolation, API rate limits, or authentication tokens.
• Do not launch denial-of-service (DoS/DDoS) attacks, SIP flood attacks, or excessive rapid-fire API requests intended to degrade platform latency for other workspaces.

Telecommunications carriers require rigorous compliance with cryptographic caller authentication protocols:

• STIR/SHAKEN Attestation: Calls must carry valid carrier attestation tokens. Numbers failing attestation may be blocked or tagged as “Spam Likely” by downstream terminating carriers.
• 10DLC & Toll-Free Verification: SMS messaging campaigns in North America must be registered under verified 10-digit long code (10DLC) brand profiles and campaign use cases.
• Traceback Cooperation: Elamora cooperates fully with the Industry Traceback Group (ITG) and federal regulatory bodies investigating illegal robocall origins.

Elamora continuously monitors automated telephony error rates, spam complaint metrics, and carrier disconnect codes. We reserve the absolute right to:

• Immediately suspend telephony trunks, disable AI agents, or revoke API tokens upon receiving carrier spam alerts or suspected fraudulent calling patterns.
• Demand verifiable records of prior express written consent for outbound calling campaigns.
• Permanently terminate accounts engaged in phishing, illegal telemarketing, or deceptive identity representation without refund or notice.