Acceptable Use Policy

Who this applies to

This AUP applies to every business ("client") that subscribes to Solys AI and to every user acting on a client's behalf. Clients are responsible for ensuring their staff and any integrations they build comply with this policy.

Lawful use only

You may use the Services only in compliance with applicable law, including Jamaica's Data Protection Act, 2020, telecommunications and anti-spam laws in every territory where you contact people, and the platform policies of connected channels (including the WhatsApp Business Messaging Policy and email anti-abuse standards).

Prohibited uses

You must not use the Services to:

• Send unsolicited marketing — Enrolling any person in a marketing or reactivation sequence without their explicit, recorded consent is prohibited. Solys enforces consent gates in software; attempting to circumvent them is a material breach.
• Ignore opt-outs — Continuing to contact a person after they say stop, withdraw consent, or object to direct marketing.
• Harass, threaten, or defraud — Including phishing, impersonating another business or person, or misrepresenting who is sending a message.
• Conceal AI identity where disclosure is required — Configuring your assistant to deny being an AI where the law requires disclosure.
• Process data you have no right to process — Uploading patient lists, contact databases, or health information you are not lawfully entitled to hold or share with a processor.
• Provide regulated advice — Using the assistant to deliver medical diagnoses, prescriptions, legal advice, or other advice reserved to licensed professionals. The assistant handles reception, scheduling, and general information only.
• Harm the platform — Probing, scanning, or testing the vulnerability of our systems without written authorisation; interfering with service to other clients; reselling access without agreement; scraping other clients' data.
• Unlawful, hateful, or exploitative content — Any use involving content that is illegal, promotes violence or hatred, or exploits or endangers minors.

Healthcare-specific responsibilities

If you are a healthcare or wellness provider, you remain the data controller for your patients' personal data. You must:

• Have a lawful basis (and, for sensitive data such as health information, written consent where required) before storing patient details in Solys
• Ensure your patient-facing privacy notice discloses your use of an AI receptionist and third-party processors
• Use marketing sequences only for patients who have given marketing consent — appointment reminders are transactional, marketing reactivation is not
• Honour patient requests for access, correction, or deletion, and notify us where our assistance is needed to fulfil them

Messaging channel rules

• WhatsApp — Business-initiated messages must comply with Meta's Business Messaging Policy, including approved templates outside the 24-hour customer service window and immediate honouring of opt-outs.
• Email — Marketing email must identify the sender and include a working way to opt out.
• Voice — Outbound calls must respect applicable calling-hours rules and any do-not-call requests.

Enforcement

We may investigate suspected violations and may suspend or terminate accounts that breach this AUP. Where the violation involves unlawful activity, risk to individuals, or abuse of a messaging channel, suspension may be immediate and without prior notice. Consent gates and opt-out handling are enforced in software and fail closed; they cannot be overridden on a customer's behalf.

Reporting violations

To report a violation of this policy, see our Report Abuse page or email abuse@solysai.com.