Acceptable Use Policy

Victoria AI: All Products and Services

Last updated: September 30, 2026

This Acceptable Use Policy ("AUP") applies to all use of Victoria AI's products and services, including Victoria, Pulse, and managed services under a Proof First Services Agreement (together, the "Services"). It is incorporated into the Online Terms of Service and each Services Agreement. Capitalized terms not defined here have the meanings in those agreements. Violation of this AUP is a material breach.

We may update this AUP on notice as described in your agreement. The current version always governs.

1. Prohibited Content

You may not use the Services to create, send, or promote content that:

  • is deceptive, fraudulent, or misleading, including false claims about identity, affiliation, pricing, or product capabilities, or impersonation of any person or organization;
  • is defamatory, harassing, threatening, or abusive;
  • targets, profiles, or discriminates against individuals on the basis of protected characteristics;
  • infringes intellectual property or violates rights of publicity or privacy;
  • contains malware, phishing, or attempts to harvest credentials; or
  • is unlawful in the sender's or recipient's jurisdiction.

2. Prohibited Sending Conduct

You may not:

  • send messages to purchased consumer lists, scraped personal data, or recipients outside a legitimate business-to-business context;
  • misrepresent the sender's identity, use deceptive subject lines or headers, or disguise the origin of a message;
  • fail to honor an opt-out, unsubscribe, or do-not-contact request promptly, or message a suppressed contact;
  • circumvent, or attempt to circumvent, sending limits, safety controls, deliverability protections, or suppression mechanisms of the Services;
  • use the Services in a manner that endangers shared sending infrastructure, domain reputation, or other customers' deliverability, including abnormal volume, spam-trap patterns, or repeated high-complaint sending;
  • connect accounts you do not own or lack authorization to operate; or
  • automate activity on a third-party platform beyond what the Services are designed to perform.

3. Prohibited Industries and Use Cases

The Services may not be used for or on behalf of:

  • illegal products or services, or products restricted for minors marketed without regard to age;
  • deceptive financial schemes, including pyramid or multi-level recruitment offers, "guaranteed return" investment promotions, or debt-relief and credit-repair scams;
  • adult content or services;
  • weapons, controlled substances (including where federally illegal), or counterfeit goods;
  • political campaign messaging or voter targeting;
  • surveillance, stalking, locating, or profiling of individuals outside a legitimate B2B context, including use of enriched contact data to investigate private individuals; or
  • any use case involving data about minors.

We may decline or discontinue service to any customer or campaign that, in our reasonable judgment, presents legal, reputational, or infrastructure risk, with notice and a refund of prepaid unused fees where the concern is not a violation of this AUP.

4. Legal Compliance

You are responsible for compliance with all laws applicable to your use of the Services and your outreach, including:

  • the CAN-SPAM Act, the GDPR and the ePrivacy Directive (and PECR in the UK), CASL in Canada, and equivalent laws in recipients' jurisdictions;
  • privacy and data protection laws applicable to your collection and use of prospect data, including notice, opt-out, and deletion obligations;
  • the terms of service of platforms you connect or message through, including email providers and LinkedIn's terms; and
  • telemarketing and text-messaging laws where applicable.

You must include lawful identification and a functioning opt-out mechanism in commercial email where required by law, and honor opt-outs across all channels. Where the GDPR applies, you must tell each contact where their data came from within a month of obtaining it or at your first message to them, whichever is earlier.

5. Third-Party Data Obligations

Contact data obtained through the Services, whether from the provider we engage on our own account (the Lead database in Victoria) or from a provider whose account you connect (contact resolution at export in Pulse), is subject to the restrictions in your agreement and, for a connected provider, to your own agreement with that provider. The terms under which our provider licenses its data to us flow down to you. In plain words:

  • comply with privacy and data protection laws: have a lawful basis, tell people where their data came from, and handle their requests;
  • use the data only for your own internal business-to-business prospecting or recruitment;
  • never sell, share, license, sublicense, distribute, market, or commercialize it, or make it available to anyone outside your organization;
  • you are bound by the same conditions our provider places on us, as set out in your agreement, the DPA, and this AUP; and
  • never copy, reproduce, or use FullEnrich's name, logo, or trademarks in any manner.

Also prohibited: bulk export of contact data for resale; scraping or systematic extraction of the Lead database; sharing logins so that others can pull contact data; and any affiliate, partner, or contractor pulling contact data on your behalf outside the product. Attempting to systematically extract, warehouse, or resell enriched contact data, including by running searches or enrichments in order to build a list or dataset for delivery to a third party, is a violation of this AUP.

6. Platform Integrity

You may not:

  • probe, scan, or test the vulnerability of the Services without written authorization;
  • interfere with the Services or other customers' use;
  • use the Services to develop a competing product;
  • access the Services by automated means except through the documented API, the MCP server, and assistants you have authorized;
  • use an assistant, the API, or the MCP server to bypass approvals, preflight checks, rate limits, or usage limits, or to take an action the Services would otherwise require you to confirm;
  • resell, redistribute, or publish contact data sourced through the Services, or contribute it to a third-party dataset (Section 5);
  • share account credentials, API keys, or OAuth grants outside your organization, or leave an assistant or integration with access you no longer authorize; or
  • exceed authorized usage in a manner intended to circumvent plan limits or metering.

7. Suppression and Opt-Outs

We maintain suppression mechanisms across the Services. You must not attempt to message, re-import, or re-enrich contacts who have opted out. We may retain minimal hashed identifiers as necessary to enforce suppression, as described in the DPA.

8. Restricted Jurisdictions

You may not access the Services from, or transfer contact data to, China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, or Venezuela, or to any "covered person" under the U.S. Department of Justice rule at 28 C.F.R. Part 202.

9. Reporting and Enforcement

Report suspected violations or abuse to security@versionseven.ai.

Depending on severity, we may respond to violations by: warning and requiring remediation; pausing specific campaigns or disconnecting specific accounts; suspending the Services; or terminating your agreement. For flagrant or repeated violations, or violations that threaten recipients, platforms, or shared infrastructure, we may suspend or terminate immediately without a cure period. No refund is owed for termination due to an AUP violation. We may notify platforms, providers, or authorities where we believe in good faith that the law requires or permits it.

We are not obligated to monitor customer content or campaigns, and enforcement or non-enforcement in one case does not waive our rights in another.