Acceptable Use Policy

Provider: N32 TECHNOLOGIES SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (N32 Technologies sp. z o.o.), ul. Młynarska 42/115, 01-171 Warszawa, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court for the Capital City of Warsaw in Warsaw (Sąd Rejonowy dla m.st. Warszawy w Warszawie), Commercial Division of the National Court Register, under number 0001182221, NIP 5273172168, REGON 542179999, EU VAT ID PL5273172168, share capital PLN 5,000
Contact: team@crang.ai (general and legal), support@crang.ai (support)

1About this policy

1.1. This Acceptable Use Policy ("AUP") sets out what the Customer and its Authorized Users may not do with Crang (the "Service"), provided by N32 Technologies sp. z o.o. ("N32"). It forms part of the Agreement described in the Terms of Service at crang.ai/terms. Capitalized terms not defined here have the meaning given in the Terms of Service.

1.2. The Customer is responsible for compliance with this AUP by its Authorized Users, its Agents and anyone using its Workspace. A breach by any of them is a breach by the Customer.

1.3. The examples below are not exhaustive. If a use is not listed but is unlawful, harmful or contrary to the purpose of this AUP, it is also prohibited.

2Unlawful and unconsented calling

The Customer must not use the Service to:

2.1. make any Call that breaches applicable law, including telemarketing, robocall, automated or artificial voice call, do-not-call, caller identification, call recording, data protection, consumer protection, unfair commercial practices, and sector rules;

2.2. call any person without a valid lawful basis and every consent required by law, including prior express (written) consent for automated, artificial or AI voice calls and telemarketing calls where required;

2.3. call numbers on applicable national or internal do-not-call registers or lists, or persons who have opted out or asked not to be called, or ignore opt-out requests made during a Call;

2.4. call outside the hours permitted by the law of the Contact's location, or more often than the law or good practice allows;

2.5. record, transcribe or analyze Calls without giving the information and obtaining the consents required by law;

2.6. call emergency lines, healthcare facility patient lines, or any number to which automated or AI calls are prohibited by law; or

2.7. call minors, persons who have excluded themselves from the Customer's services, or vulnerable persons where the law or the Customer's sector rules prohibit it.

3Spam and abusive traffic

The Customer must not use the Service to:

3.1. send unsolicited bulk calls, robocall spam or "one-ring" or callback scams;

3.2. call randomly or sequentially generated numbers, or lists bought, rented or scraped without a lawful basis and the consents required to call them;

3.3. generate Call volumes or patterns that cause carrier complaints, spam labeling, number blocking or harm to the reputation of N32's or the Customer's numbers; or

3.4. evade blocking, rate limits or calling windows, including by rotating numbers to avoid detection.

4Deception, impersonation and harassment

The Customer must not use the Service to:

4.1. impersonate any person, company, government body or organization, or falsely claim an affiliation with them;

4.2. hide or deny that the caller is an AI, remove or weaken the AI disclosure given by Agents, or present an Agent as a human;

4.3. use misleading, spoofed or unauthorized caller ID;

4.4. make false or misleading statements about products, services, prices, discounts, terms, the identity of the caller or the purpose of the Call;

4.5. pressure, threaten, intimidate, harass, abuse or discriminate against any person, or exploit the age, disability, financial situation or other vulnerability of any person;

4.6. use subliminal, manipulative or deceptive techniques that distort a person's behavior in a way that causes or is likely to cause significant harm, or any other practice prohibited by the EU Artificial Intelligence Act; or

4.7. clone, imitate or use a real person's voice without their documented consent, or use the custom voice feature of the Service to: (a) create a voice of a person under 18, a deceased person, a public figure, a political candidate or an elected or appointed official; (b) impersonate the speaker or any other real person towards third parties, for example to deal with their bank, employer, family or authorities; (c) play into the recorder the recording or voice of anyone other than the speaker who gives the consent, including recordings, broadcasts and the output of other voice systems; (d) design a voice to imitate a named real person; (e) mislead anyone about the fact that they are talking to an AI, including by removing or weakening the AI disclosure required by section 4.2; or (f) keep or use a voice after the speaker has withdrawn consent.

5Sensitive data

The Customer must not use the Service to:

5.1. upload or collect special categories of personal data (such as health, biometric, genetic, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation) or data about criminal convictions, unless strictly necessary and the Customer has a lawful basis and complies with all applicable conditions;

5.2. collect payment card numbers, security codes, bank login details, passwords, one-time codes or similar credentials during Calls; or

5.3. collect government identification numbers unless required by law for the Customer's service and lawfully permitted.

6Prohibited and restricted uses

6.1. The Service must not be used for: (a) emergency services or any situation where a failure or error of the Service could lead to death, personal injury or serious damage; (b) promotion or sale of illegal products or services, or activity in a jurisdiction where the Customer is not licensed for it; (c) fraud, phishing, scams, pyramid schemes or money laundering; (d) content that is unlawful, defamatory, obscene, hateful, violent, or infringes intellectual property or privacy rights; or (e) using one Workspace for more than one brand.

6.2. The following high-risk uses are prohibited unless N32 has agreed to them in writing in advance, and then only in full compliance with applicable law: (a) medical diagnosis, treatment, triage or other health advice; (b) debt collection, where the law requires a license, registration or specific conduct rules; (c) financial, investment, insurance, credit or legal advice, or sales of regulated financial products; (d) political campaigning, election or referendum calls, and fundraising; (e) decisions about employment, education, credit, insurance, housing or access to essential services; (f) calls on behalf of public authorities or law enforcement; and (g) any use classified as high-risk under the EU Artificial Intelligence Act.

7Security and integrity of the Service

The Customer must not, and must not attempt to:

7.1. reverse engineer, decompile or disassemble the Service, or extract N32's prompts, workflow designs, models, internal configurations or source code (exporting the Customer's own Customer Content with the export tools of the Service is allowed);

7.2. access another customer's Workspace or data, or any part of the Service it is not authorized to access;

7.3. probe, scan or test the vulnerability of the Service, or bypass authentication, rate limits, usage limits or other security or access controls, without N32's prior written consent;

7.4. overload, flood or disrupt the Service, or send traffic that degrades it for others;

7.5. upload malware or harmful code, or use the Service to attack any system;

7.6. use automated means to access the Service other than through the interfaces N32 provides; or

7.7. resell, sublicense or provide access to the Service to third parties without a written agreement with N32.

8Monitoring and enforcement

8.1. N32 may, but is not obliged to, monitor and review the use of the Service, including Workspace configuration, Call metadata, recordings and transcripts, to check compliance with this AUP, prevent abuse and protect the Service.

8.2. If N32 believes that this AUP has been breached, or receives a complaint, regulator request or carrier report, N32 may at its discretion and immediately, without prior notice: suspend Calls, campaigns, Agents, phone numbers, APIs or the whole Workspace; remove or disable content, including disabling or deleting a custom voice; require the Customer to provide evidence of consent and lawful basis; and terminate the Agreement under the Terms of Service. No refund is given.

8.3. N32 may report suspected unlawful activity to authorities, telephony providers and carriers, and cooperate with their investigations, including by providing relevant information.

8.4. The Customer must cooperate with N32's requests about compliance, including by providing within 5 business days records of consent, do-not-call checks and opt-outs for any Contact.

9Reporting abuse

To report abuse of the Service, including unwanted calls from an Agent, email team@crang.ai with the date and time of the call and the number that called you or that you called. Where the report concerns a call made by one of our customers, we will pass it to that customer, who is responsible for the call.