Acceptable Use Policy (AUP) — EvoCODE IA®

Last updated: September 1, 2026 · Version 2.1

This Acceptable Use Policy ("AUP") sets out the rules of conduct for the use of the Kairo, TraceLog, and AgenteNOC platforms and of the other services of EvoCODE IA® Ltda ("EvoCODE", "we", "us"). It is an integral part of the Terms of Service, into which it is incorporated by reference, and applies to you — whether you are a Customer (tenant), an authorized User of a Customer, or a visitor/invitee interacting with our platforms (for example, when booking through a public Kairo page or chatting with an AgenteNOC agent).

Using the Services means agreeing to this AUP. In the event of a conflict, the following order of precedence applies: DPA > Terms of Service > AUP > documentation.

1. General principle

Use the Services only for lawful purposes, within the limits of your subscribed plan, and without harming EvoCODE, other customers, end users, or third parties. If in doubt as to whether a given use is permitted, ask first: contato@evocode.ia.br.

2. Prohibited conduct

It is prohibited, whether directly or through third parties, to:

2.1. Illegality and fraud

  • Use the Services for any illegal, fraudulent, defamatory, discriminatory activity or any activity that violates third-party rights (including privacy and intellectual property);
  • Register with false information or use third parties' personal data without authorization;
  • Manipulate billing mechanisms, circumvent plan limits, or evade licensing (including credential sharing and shared accounts — see Terms of Service, Section 4);
  • Engage in phishing, social engineering, or any form of impersonation or false identity through the platforms.

2.2. Security and integrity

  • Introduce, host, or distribute malware, viruses, ransomware, or any malicious code;
  • Perform penetration tests (pentests), vulnerability scans, or security assessments on the Services without EvoCODE's prior written authorization;
  • Attempt to access accounts, data, or areas of the Services that do not belong to you, or circumvent authentication and security controls;
  • Intentionally overload the platform (flooding, API abuse, denial-of-service attacks) or interfere with other customers' use;
  • On TraceLog and AgenteNOC: monitor, probe, or access third-party networks, assets, and devices without the authorization of the respective owner or responsible party.

2.3. Extraction and misuse of the platform

  • Perform scraping, automated collection, or bulk extraction of data from the Services without authorization;
  • Reverse engineer, decompile, or disassemble the software, except in the cases expressly permitted by Article 6 of Law No. 9,609/98 (Brazilian Software Law);
  • Resell, sublicense, or make the Services available to third parties without a formalized reseller/partnership agreement;
  • Use the Services to develop, train, or improve a competing product or service, or publish benchmarks without EvoCODE's prior written consent.

3. Messaging rules (WhatsApp, Telegram, Discord)

The messaging features of Kairo and AgenteNOC depend on third-party platforms and on strict compliance with their policies — in particular the Meta/WhatsApp policies (WhatsApp Business Terms, Commerce Policy, and Messaging Policy), which are incorporated by reference into the Terms of Service. When using these channels, you must:

  • Send messages only to those who have consented: every recipient must have given prior and verifiable opt-in; keep the consent records and produce them upon request;
  • Honor opt-outs: offer a functional unsubscribe mechanism and immediately stop sending messages to anyone who requests it;
  • Do not send spam: unsolicited bulk messages, purchased, rented, or scraped lists, and any contact acquisition of unverifiable origin are prohibited;
  • Do not use the channels for content prohibited by the platforms' policies (illegal products, scams, misleading content, harassment);
  • Keep AI identification enabled: automated agents identify themselves as virtual assistants and this identification may not be disabled or masked;
  • Respect groups: in WhatsApp/Telegram/Discord groups, use the agents only in groups that you administer or in which you have been authorized to operate them.

Violations of this section or of Meta's policies, or any risk to the integrity of the platforms, authorize the immediate suspension of sending, of the number, of the instance, or of the account, without prior notice and without compensation, pursuant to Section 6 of the Terms of Service. Losses caused by such violations (fines, WABA bans, channel restrictions) are the Customer's responsibility, and the Customer shall indemnify EvoCODE pursuant to Sections 6.5 and 15 of the Terms.

4. Responsible use of AI features

The AI agents of Kairo and AgenteNOC are intended for customer service, scheduling, monitoring, and diagnostics. When using these features, it is prohibited to:

  • Configure agents, prompts, or knowledge bases to produce unlawful, misleading, or discriminatory content, or content that misleads third parties;
  • Use the agents to impersonate a specific human being, real or fictitious, with the intent to deceive the interlocutor;
  • Attempt to extract, through the agents, internal instructions, other customers' data, or system information (prompt injection attacks);
  • Use AI outputs as if they were definitive professional advice (legal, medical, financial) without adequate human review, where the context so requires.

Remember: AI outputs are probabilistic and may contain errors (Terms of Service, Section 16). Critical actions — especially commands issued to network devices in AgenteNOC — must be validated by a human operator.

5. Customer responsibility for its users

If you are a Customer (tenant), you are responsible for ensuring that your Users and your end users comply with this AUP in their use of your account and of the flows you publish (booking pages, automated customer service, monitored groups). Violations committed by them within the scope of your account are treated as your violations. We recommend that you reflect these rules in your own terms with your end customers.

6. Reporting abuse

If you identify abuse, spam, unlawful content, or a violation of this AUP involving our platforms, report it:

Where possible, include evidence (messages, links, dates, identifiers). We will review reports with confidentiality and good faith, without retaliation against good-faith reporters. Matters involving personal data may be directed to our Data Protection Officer (DPO): dpo@evocode.ia.br.

7. Consequences of non-compliance

Depending on the severity, recurrence, and risk involved, we may, individually or cumulatively:

  1. Issue a warning and request correction of the conduct within a specified period;
  2. Restrict specific features (for example, limiting message sending or disabling an integration);
  3. Immediately suspend the access, number, instance, or account, without prior notice, where necessary to contain a risk to security, to third parties, or to partner platforms (including Meta);
  4. Terminate the agreement for cause, pursuant to Section 9 of the Terms of Service, in the event of an uncured or incurable material breach;
  5. Remove or block unlawful or infringing content;
  6. Notify the competent authorities and preserve records where there is evidence of a crime or under a legal obligation.

Suspension for violation of the AUP does not suspend the payment obligations for the subscribed period, nor does it give rise to any right to SLA credits or compensation.

8. Updates

We may update this AUP as the Services, the partner platforms' policies, and the law evolve. Material changes will be communicated pursuant to Section 17 of the Terms of Service. The current version, dated and versioned, is published in our legal hub.

EvoCODE IA® Ltda · CNPJ 63.623.332/0001-42 Praça Nossa Senhora do Rosário, 44, Sala 02 — Centro, Piracaia/SP — CEP 12970-000 — Brasil, Brazil Website: https://evocode.ia.br · Legal: contato@evocode.ia.br · Support / Customer service: sac@evocode.ia.br · WhatsApp: +55 51 2191-0021 (https://wa.me/555121910021) Data Protection Officer (DPO): Elizandro Pacheco de Almeida — dpo@evocode.ia.br

Acceptable Use Policy — Version 2.1 — Last updated: September 1, 2026.