Acceptable Use Policy

CDAI Engine — Allocera Intelligence

This Acceptable Use Policy ("AUP") applies to all clients and users of the CDAI Engine ("CDAI"), operated by Allocera Intelligence. By connecting an account, using the API, or accessing your dashboard, you agree to comply with this policy. Violations may result in account suspension or termination.

1. Scope of Access

CDAI connects to your advertising platforms (Meta, Google Ads, LinkedIn, and others) and your CRM/revenue systems (HubSpot, Salesforce, Stripe, and others) via each platform's own OAuth authorization. You may only connect accounts you own or are authorized to manage on behalf of your organization.

2. Prohibited Activities

You may NOT:

Connect an advertising or CRM account you do not own or lack authorization to access.
Share, sell, or transfer your login credentials, API keys, or session tokens to any other person or entity.
Attempt to access, query, or infer data belonging to another organization's account — every org's data is isolated by design, and attempting to circumvent that isolation is a violation regardless of whether it succeeds.
Use automated scripts, bots, or excessive API calls to abuse the CSV upload endpoint, the lead webhook, or any other API surface beyond normal use.
Attempt to hack, reverse engineer, or extract the source code of the CDAI Engine.
Attempt to circumvent authentication, payment-status gating, or rate limits.
Scrape, copy, or resell directive output, audit reports, or dashboard data to a third party without Allocera Intelligence's written consent.
Use the CDAI Engine to store or process data for any illegal purpose, or in a way that violates applicable data protection or advertising regulations.
Impersonate Allocera Intelligence or CDAI in communications with your own customers or partners.

3. Data Handling

CDAI strips personally identifiable information (PII) from stored metadata by design. You remain responsible for ensuring your own use of connected platforms complies with applicable privacy law (e.g., TCPA, CCPA) for the leads and customers in your systems — CDAI's compliance-cost tracking does not substitute for your own legal compliance obligations.

4. Account Sharing

Each CDAI account is provisioned for one organization. API keys are scoped to a single org and must not be shared across organizations or used to access data outside your own account. If you need access for multiple team members, contact us to add additional users to your organization.

5. Enforcement

Violations of this policy may result in suspension or termination of your account. Depending on severity, this may occur without prior notice, particularly in cases involving unauthorized access to another organization's data.

We reserve the right to:

Monitor API and connection usage patterns for compliance with this policy.
Suspend or terminate accounts that violate this policy.
Modify this policy at any time, with notice to active clients.

6. Reporting Violations

If you become aware of a violation of this policy, please report it to: alloceraintelligence@gmail.com