Acceptable Use Policy

Effective date: 25 July 2026 Version: 1.1

This Acceptable Use Policy ("AUP") describes activities that are prohibited when using the Mango Receptionist service ("Service") operated by Mango Dog Pty Ltd (ACN 628 425 481). It is incorporated by reference into the Terms of Service.

If you become aware of a breach of this AUP, please report it to abuse@mangoreceptionist.com.

1. General prohibitions

You must not use the Service to:

• break any applicable law, including the Privacy Act 1988 (Cth), the Spam Act 2003 (Cth), the Australian Consumer Law, the Telecommunications Act 1997 (Cth), and, where applicable, the EU GDPR, UK GDPR, CAN-SPAM, TCPA, and equivalent laws elsewhere;
• harass, defame, threaten, stalk, or impersonate any person;
• infringe a third party's intellectual property, privacy, publicity, or other rights;
• send unsolicited bulk communications, phishing messages, scams, or any communication that misleads as to its origin or purpose;
• conduct unlawful gambling, multi-level marketing schemes, or other regulated activity without holding the required licence;
• collect, store, or transmit content that is unlawful, hateful, sexually exploitative of any person, or that depicts violence in a way that breaches the law.

2. Health, safety, and emergency

You must not use the Service:

• as a substitute for emergency services. The Service is not connected to triple zero (000) or any other emergency dispatch system.
• to provide medical, mental-health, legal, financial, or other regulated professional advice unless you hold the required licence and clearly distinguish AI-assisted from professional advice.
• to triage suicidal ideation, self-harm risk, family violence, or child protection matters. If your callers are likely to present such matters, contact us first — we will help you configure escalation rules that are safe and lawful.

You must configure Aimee so that callers in immediate danger are told to contact 000 (Australia) or the relevant local emergency number.

3. Telecommunications-specific rules

• Any Mango Receptionist demonstration line displayed for your market is only for evaluating Aimee. It is not your forwarding destination and must not be advertised, published, or given to your customers. On activation, where available, we assign your tenancy its own private forwarding number; forward calls only to the number and configuration we approve for your tenancy.
• You must not use the Service to send marketing SMS without obtaining the consent required by the Spam Act 2003 (Cth) or by equivalent laws applicable to your recipients.
• You must not use the Service to mass-dial, robocall, or otherwise abuse telecommunications networks.
• You must not configure the Service to disguise caller ID or commit fraud.
• You are responsible for the lawfulness of any forwarding configuration on your handset, including with respect to your carrier's terms of service.

4. AI-specific rules

• You must not configure Aimee to impersonate a specific human in a way that would deceive a caller — e.g. claiming to be a named person who is not actually responding.
• You must not configure Aimee to deny being AI when a caller directly asks.
• You must not use the Service to generate content that defames a person, encourages violence, or otherwise breaches the law.
• You are responsible for reviewing the script, instructions, and knowledge-base content that you provide and for keeping them accurate and lawful.
• You must not attempt to subvert the Service's safety or content controls.

5. Data and privacy

• You must comply with applicable data-protection law, including obtaining caller consent where required (for example, jurisdictions where one-party consent is not sufficient for a transcript to be lawful).
• You must give your callers the privacy disclosures required in your jurisdiction. Where Australian Privacy Principle 5 applies, you must take reasonable steps to notify callers of the matters in APP 5.2.
• You must not upload to the knowledge base, or otherwise process through the Service, the special category data referred to in Article 9 of the GDPR (health, biometric, racial, political, religious, sexual orientation, trade-union membership) without first contacting us in writing.
• You must not upload to the knowledge base any document that you are not authorised to share with us.
• You must not use the Service to make decisions about a person that produce legal or similarly significant effects on that person, unless you have configured a meaningful human review step.

6. Security

• You must not attempt to access another tenant's data.
• You must not probe, scan, or test the vulnerability of the Service except through our security disclosure program at security@mangoreceptionist.com.
• You must not interfere with the Service's operation, including by denial-of-service, by overloading the API, or by injecting malicious code.
• You must not reverse engineer, decompile, or disassemble any part of the Service except where this restriction is unenforceable as a matter of law.

7. Account integrity

• You must not share account credentials.
• You must not create multiple accounts to evade limits, suspensions, or commercial terms.
• You must not transfer your account to another person except by selling the underlying business and contacting us in advance.

8. Compliance with the Spam Act and equivalent rules

Outbound SMS messages sent through the Service must:

• be a "commercial electronic message" only if the recipient has consented (express or inferred, as defined by the Spam Act);
• contain accurate sender information identifying the Customer's business;
• include an unsubscribe mechanism where required;
• not be sent to numbers on the Do Not Call Register where the message is a marketing message.

You agree to indemnify Mango Dog for any penalty or claim arising from a breach of this clause.

9. Enforcement

We may, at our discretion:

• suspend the Service in part or in full;
• terminate your account;
• remove or block specific content, calls, SMS messages, or knowledge-base entries;
• report you to law enforcement or a regulator.

We may take any of these actions without notice where necessary to protect the Service, other Customers, or the public. In other cases we will give reasonable notice and an opportunity to remedy the issue, where it is reasonable to do so.

10. Reporting abuse

Email abuse@mangoreceptionist.com. Where possible include:

• the Customer's name and tenant id (if known);
• the date and approximate time of the conduct;
• the phone number, email, or URL involved;
• a description of the conduct.

We will respond within a reasonable period.