Acceptable Use Policy

Prohibited Activities

Do not use Kyvora to engage in or encourage any activity that is illegal, deceptive, harmful, a violation of others' rights, or harmful to Kyvora's business operations or reputation, including:

Violations of Law or Industry Standards

Violating laws, regulations, governmental orders, industry standards, or telecommunications providers' requirements in any applicable jurisdiction, including:

• The Telephone Consumer Protection Act (TCPA) and FCC regulations
• CAN-SPAM Act and applicable email regulations
• California Consumer Privacy Act (CCPA) and applicable state privacy laws
• Employment, anti-discrimination, and labor laws (EEOC, ADA, ADEA, Title VII, etc.)
• Export controls and sanctions regulations
• Any law requiring consent before transmitting, recording, collecting, or monitoring data or communications

Harmful or Deceptive Conduct

• Creating a false identity or misrepresenting the sender or origin of any communication
• Sending unsolicited bulk messages (spam) or messages to individuals who have not provided consent
• Using purchased, rented, scraped, or non-consensually obtained contact lists
• Harassing, threatening, or intimidating any person through use of the platform
• Impersonating any person, organization, or entity

Unauthorized or Discriminatory Use

• Using Kyvora to make fully automated employment or eligibility decisions without human review
• Using AI-generated candidate scores or summaries as the sole basis for hiring, placement, or rejection decisions
• Designing screening questions or workflows that discriminate on the basis of race, color, religion, sex, national origin, age, disability, or any other protected characteristic
• Using the platform to facilitate unlawful employment practices

No Service Integrity Violations

Do not violate the integrity of the Kyvora platform, including:

• Bypassing controls. Attempting to bypass, exploit, defeat, or disable limitations or restrictions placed on the platform, including opt-out suppression, quiet-hour enforcement, rate limits, or credit controls.
• Security vulnerabilities. Finding or attempting to exploit security vulnerabilities in the platform. Security concerns should be reported to security@kyvoratech.com.
• Denial of service. Any action that attempts to disrupt, disable, or overload the platform or its underlying infrastructure.
• Harmful code. Transmitting code, files, scripts, or programs intended to do harm, including viruses, malware, or ransomware.
• Unauthorized access. Attempting to access accounts, data, or systems you are not authorized to access.
• Reverse engineering. Reverse engineering, disassembling, or decompiling the platform or attempting to extract source code, system prompts, AI models, or non-public platform functionality.
• Automated access. Using bots, scrapers, or automated means to access the platform in ways not expressly permitted by Kyvora.

Data Responsibilities

Customers are responsible for determining whether the platform offers appropriate safeguards for their use case before transmitting or processing any candidate data. Specifically, Customers must:

• Only upload candidate data for which they have a legitimate legal basis for processing
• Not upload sensitive personal data (health information, financial account numbers, government IDs, biometric data) unless required for the specific recruiting workflow and permitted by applicable law
• Promptly notify Kyvora of any suspected unauthorized access to or misuse of candidate data
• Promptly remove access for former employees or users who are no longer authorized
• Maintain strong account credentials and not share login credentials across users

Messaging-Specific Requirements

Use of Kyvora's SMS and email messaging functionality is subject to additional requirements set forth in the Messaging Policy and Customer SMS Compliance Guide. These policies govern consent, opt-out handling, prohibited content, sender identification, and enforcement for all outbound communications.

Enforcement

Violations of this AUP may result in suspension or termination of platform access. Kyvora reserves the right to:

• Investigate suspected violations
• Suspend messaging access or full platform access during an investigation
• Permanently terminate accounts for egregious, repeated, or intentional violations
• Cooperate with law enforcement or regulatory authorities where required
• Seek damages for violations that harm Kyvora or third parties

Customers agree to immediately report any known violation of this AUP to Kyvora at compliance@kyvoratech.com and to cooperate with any resulting investigation.

Updates

Kyvora may update this AUP from time to time upon reasonable notice, which may be provided via the platform, email, or by posting an updated version at this URL. Continued use of the platform after the effective date of an update constitutes acceptance of the revised AUP.

Related Policies

• Terms of Service
• Messaging Policy
• Customer SMS Compliance Guide
• Privacy Policy