Taskora Acceptable Use Policy

Last Updated: July 31, 2026

This AUP is part of, and incorporated by reference into, your Customer Agreement at gettaskora.com/terms/ca (Section 4) and is posted at gettaskora.com/terms/aup. If we make a material change, we'll post the update and note the date at the top; changes apply going forward.

This Acceptable Use Policy ("AUP") governs use of all Taskora Services by all Authorized Users. Capitalized terms have the meanings given in your Customer Agreement. Breaking these rules can lead to suspension or termination of the Services without refund (see Section 5), and can trigger the indemnity in your Customer Agreement (Section 17.2).

1. You are responsible for your use

You are responsible for how you use the Services. Everything you do with them — or direct them to do — must be lawful, and you must actually have permission to access or review every system you point the Services at, including any third-party platform or portal, under that system's own rules and terms.

2. Prohibited uses

You will not use the Services to:

(a) Break the law. Do anything unlawful, fraudulent, deceptive, or defamatory, or that infringes or violates anyone else's rights (including intellectual-property or privacy rights).

(b) Access or review systems you're not allowed to. Don't direct the Services to access or review any system you lack permission to use, and don't have them access, observe, or extract data from any system whose terms prohibit automated or agent-driven access, automated observation, or off-platform transmission of its data.

(c) Don't defeat security controls. Don't use the Services to get around CAPTCHAs, login/authentication protections, rate limits, or other security measures on any system you're not authorized to bypass.

(d) Don't attack or disrupt systems. Don't introduce malware or harmful code, break into or breach the security of any system, or interfere with or disrupt the Services or any system you connect or review.

(e) Don't abuse messaging. Don't use the Services to send spam or unsolicited messages (including emails, calls, or texts), or any communications that break anti-spam or other communications laws.

(f) Comply with sanctions. Don't use the Services if you or the party you're acting for are subject to U.S. sanctions.

(g) Keep a human in the loop for safety-critical work. Don't rely on the Services alone where a mistake could cause injury or serious physical, environmental, or property damage — a person must review those actions. For Agent Services, Playbook confirmation steps (Customer Agreement Section 5.5, configurable by an Agent Administrator) are one way to build in that review — but the review is your responsibility however you do it.

(h) Don't misuse or game the Services. Don't copy, scrape, reverse-engineer, resell, or reproduce the Services, Playbooks, or documentation beyond what your Customer Agreement allows, and don't use multiple accounts or other tricks to get around trial or usage limits.

(i) Don't process prohibited sensitive data. Don't direct or configure the Services to access, extract, transmit, or log Protected Health Information (PHI) regulated by HIPAA, or unencrypted payment cardholder data regulated by PCI-DSS, unless Taskora has specifically agreed to do so under a separate written addendum (such as a Business Associate Agreement).

(j) Don't deceptively impersonate people. Don't use the Services to deceptively impersonate a real person, to create or manipulate synthetic media (such as deepfakes) to deceive, or to hide that a message is automated where the law requires disclosure (see Customer Agreement Section 8).

3. Additional responsibilities — Agent Services

Because an agent acts inside your systems and third-party systems at your direction:

• You must own — or be allowed to grant Taskora access to — each account you connect, and you confirm this every time you connect one.
• You're responsible for making sure the agent's messages follow the law.
• Taskora does not check or monitor the systems you connect or their terms — that's on you.
• If a Playbook or Agent Action involves the Agent interacting with a person in real time (someone on the other end of a chat, call, or portal session), you're responsible for giving any notice and getting any consent the law requires before the agent proceeds — including for Taskora's recording of agent sessions for operation, security, and support.

The Agent Services are software that carries out the work you configure and direct — through the Playbooks you publish, the schedules you set, and the tasks you assign. You choose the workflows, the systems, and the targets; Taskora doesn't. You're responsible for the Agent Actions you direct.

These agent-specific responsibilities correspond to Sections 5.7 and 5.8 of your Customer Agreement.

4. Additional responsibilities — Compliance Assistant

Because the Compliance Assistant reviews records on platforms you choose:

• Only run it on records and platforms you're permitted to review under that platform's own terms; don't use it where those terms prohibit automated observation or off-platform transmission of the data (see Customer Agreement Sections 9.2 and 20.3).
• You own the accuracy of the compliance rules you configure.
• Its output is decision-support: it flags potential issues in records and processes for your review; it doesn't evaluate people, and it isn't a guarantee that anything is or isn't compliant. A person makes the call.
• You're responsible for any decision you make based on it — including any decision affecting a worker, subcontractor, or other individual — and for complying with applicable employment, labor, and anti-discrimination laws.

5. Enforcement

Our response to a suspected violation is scaled to the risk it presents.

(a) Investigation. We can investigate suspected violations, including by reviewing account activity, configuration (such as Playbooks or compliance rules), and session logs relevant to the suspected violation.

(b) Suspension and termination. Where practicable, we will provide notice and a reasonable opportunity to cure. We may suspend or terminate your access immediately and without notice or a cure period where: (i) there is a credible risk of harm to Taskora, a third party, or a system you've connected the Services to; (ii) a third-party system operator has objected to access or we no longer reasonably believe that access is authorized; (iii) the violation involves illegal conduct, a breach of Section 2(a)-(f), or circumvention of another party's security controls; or (iv) the violation is a repeat of conduct we've previously warned you about. We can also stop the Services from reaching any system (for example, stopping an agent from reaching a portal) if the operator objects or if we don't reasonably believe access is allowed.

(c) Fees. If we end your access for breaking these rules, prepaid fees aren't refunded and any outstanding fees remain due (Customer Agreement Sections 14.1 and 16-17).

(d) Cooperation and disclosure. We may preserve records relevant to a suspected violation and may disclose account and usage information about you to law enforcement, a payment processor, or the operator of a third-party system the Services accessed, where we reasonably believe doing so is necessary to investigate or respond to a suspected violation, comply with law, or respond to a complaint from that system's operator.

These rules are part of Section 4 of your Customer Agreement. This AUP doesn't restate your Customer Agreement's IP, warranty, liability, indemnification, or dispute terms — those live in the Customer Agreement, and if this AUP ever conflicts with it, the Customer Agreement controls.

Contact: legal@gettaskora.com