The core rule

You may use ActionDock only for lawful, transparent, proportionate, and professionally supervised work. You must assess the risk of each workflow, limit the Agent’s tools and spending, review outputs, monitor execution, and maintain a reliable stop mechanism.

Do not assume that access to a tool, a generated output, an approval screen, or a provider’s acceptance means that an Action is lawful or appropriate. You remain responsible for that determination.

Email, calls, voice, and outreach

You may not use the Service to:

• send spam, unsolicited bulk messages, unlawful commercial email, or messages to purchased, scraped, guessed, or unlawfully obtained lists;
• operate telemarketing, robocalling, autodialling, lead-generation, debt-collection, or call-centre activity without all registrations, consents, disclosures, list scrubs, and written approval that law and providers require;
• resell telecommunications, cellular, voice, messaging, or email transport;
• call or message a person who has opted out, is on an applicable do-not-call or suppression list, or has asked you to stop;
• hide or falsify sender identity, caller ID, routing, purpose, affiliation, location, or the automated or AI-assisted nature of a communication;
• impersonate a person or organisation, use a cloned voice without documented permission, or mislead a recipient into believing a human is speaking where disclosure is required or reasonably expected;
• record, transcribe, analyse, or monitor a call without every party’s notice and consent where required;
• harass, threaten, shame, pressure, stalk, or repeatedly contact a recipient; or
• contact emergency numbers, public-safety answering points, hospitals for emergency care, or other safety-critical services.

Permitted communications must identify the responsible sender, provide a working method to opt out where appropriate, respect local time and frequency limits, and be supported by auditable consent or another lawful basis. Transactional or customer-requested calls are not exempt from applicable identification, recording, privacy, and provider rules.

Illegal, deceptive, or harmful activity

You may not use the Service to create, facilitate, optimise, conceal, or execute:

• fraud, scams, phishing, credential theft, extortion, blackmail, money laundering, sanctions evasion, deceptive fundraising, fake reviews, market manipulation, or impersonation;
• malware, ransomware, destructive code, unauthorised access, denial of service, exploitation, credential stuffing, surveillance, spyware, or evasion of security controls;
• violence, terrorism, weapons procurement, illegal drugs, human exploitation, sexual abuse, non-consensual intimate content, or any sexual content involving minors;
• copyright, trademark, privacy, publicity, database, trade-secret, or other rights violations;
• discrimination, intimidation, harassment, doxxing, targeted abuse, or inference of highly sensitive traits without a lawful and necessary basis;
• fabricated evidence, forged documents, deceptive synthetic media, or content intended to mislead a court, regulator, voter, investor, customer, or the public; or
• any product, service, transaction, or activity that is illegal, prohibited by a connected provider, or designed to evade enforcement.

High-impact and regulated uses

You may not use ActionDock to make or implement a decision that determines a person’s eligibility, access, selection, terms, or treatment in employment, housing, education, insurance, credit, lending, legal services, essential utilities, healthcare, immigration, benefits, or criminal justice.

You may not use the Service as a substitute for licensed medical, legal, financial, tax, investment, mental-health, or emergency advice, or to provide such regulated services without every required licence, professional review, disclosure, and our prior written approval.

You may not use biometric identification, emotion recognition, social scoring, predictive policing, or sensitive-trait profiling through the Service. You may not target children or people known to be in a vulnerable condition, and you may not conduct political persuasion or voter targeting through automated communications.

Data and confidential information

Do not submit data you do not have the right to process. Do not expose passwords, private keys, authentication tokens, payment-card data, financial-account credentials, health records, precise location, biometric templates, government identifiers, or other highly sensitive data unless the workflow is expressly supported, strictly necessary, lawful, and protected by written terms appropriate to the risk.

You must minimise recipient data, apply appropriate retention, respond to rights requests, protect credentials, and promptly report suspected compromise. You may not combine data to re-identify a person or defeat privacy protections.

Platform integrity and fair use

You may not probe, scan, overload, disrupt, or bypass the Service; evade rate, budget, approval, geographic, recipient, billing, or safety limits; share or rotate accounts to avoid enforcement; access another workspace; interfere with logs; submit false provider events; or use the Service to attack a third party.

You must use idempotency controls where offered, avoid duplicate side effects, set realistic concurrency and spending limits, and keep enough balance for requested Actions. Coordinated or excessive traffic that threatens the Service or a provider is prohibited even if each individual request appears valid.

Monitoring and enforcement

We may use automated and manual controls to detect risk, investigate reports, rate-limit traffic, require additional verification or proof of consent, block a recipient or destination, disable an Action, preserve evidence, suspend an Agent or workspace, notify a provider, or terminate access. We are not required to pre-screen every Action and our failure to block an Action does not approve it.

Serious or repeated violations may be reported to affected providers or competent authorities where permitted or required. We may recover investigation, provider, remediation, and dispute costs from a business Customer whose violation caused them.

Report suspected abuse with relevant message headers, caller information, timestamps, and evidence to support@actiondock.app. Do not send passwords or unnecessary sensitive data.

Changes and questions

We may update this Policy to address new Actions, provider requirements, threats, or law. The current version is posted here. If you are unsure whether a workflow is allowed, obtain qualified legal advice and contact us before running it.