Acceptable Use Policy

The Services may not be used for unlawful, fraudulent, abusive, deceptive, discriminatory, harassing or otherwise harmful activity — including any use that would be unlawful in the client’s jurisdiction or in the recipient’s.

• No spam, bulk unsolicited messaging, or contacting people without a legally valid permission or basis.
• No violation of WhatsApp, Meta, SMS, carrier, email, telephone, CRM, advertising or hosting provider policies.
• No sending messages that conceal or misrepresent the sender’s identity.
• No ignoring, delaying or circumventing an opt-out, unsubscribe or Do Not Call request.
• No purchasing, scraping or importing contact lists the client has no lawful basis to contact.

• No processing of personal data the client has no authority or lawful basis to provide.
• No processing of children’s data unless the requirements of applicable law are met, and it has been agreed in advance.
• No high-risk or special category personal data — health, biometric, precise financial account credentials, government identifiers and similar — unless explicitly agreed in writing and supported both legally and technically.
• No use of a workflow to enrich, resell or redistribute personal data beyond the agreed service.

• No use of the Services in a way that unlawfully discriminates in housing, lending, employment, insurance, credit, or any other protected context — including through qualification questions, routing rules or follow-up logic that produce a discriminatory outcome.
• TalkToLeads does not make automated credit, lending, housing, insurance or eligibility decisions, and its workflows must not be configured to do so.
• Qualification and routing are administrative sorting steps to get an enquiry to the right person. They are not eligibility assessments, and must not be presented to a lead as one.

• No content that is false, misleading, or makes claims the client cannot substantiate.
• No content that infringes copyright, trade marks or other rights.
• No malicious content, malware, or links to harmful destinations.
• No impersonation of a person, business or public body, and no implying an affiliation that does not exist.
• No representing an automated first response as a named human being.

• No security testing, penetration testing or vulnerability scanning of TalkToLeads systems without prior written permission.
• No reverse engineering, decompiling, or attempting to derive source code or internal tooling.
• No bypassing or attempting to bypass access controls, rate limits or tenant isolation.
• No sharing of credentials, or allowing access by anyone not authorised.
• No scraping, crawling or bulk extraction beyond the agreed service.
• No attempt to access another client’s data or environment.

If you believe you have found a security vulnerability, report it rather than exploring it — see section 8.

Where we identify a violation, our response is proportionate to the seriousness and the risk involved. Depending on the circumstances we may:

1. 1.Contact the client and ask for the issue to be corrected.
2. 2.Issue a formal warning.
3. 3.Pause or suspend the affected workflow, immediately where there is material legal or security risk.
4. 4.Terminate the Services in accordance with the Terms of Service.
5. 5.Delete affected data where appropriate and lawful to do so.
6. 6.Cooperate with lawful requests from authorities and platform providers.

Where it is safe, lawful and practical, we will give notice before suspending a workflow. Where a violation creates immediate legal exposure or security risk, we may act first and notify immediately afterwards.

If you have received a message you believe was sent without your permission, or you have identified misuse or a security issue, please tell us.

You can also use the privacy and requests page and choose “Report misuse or abuse”. Please include the message you received, the sender, and the date, so we can trace it.