Acceptable Use Policy

This Acceptable Use Policy ("AUP") applies to all use of Joby's website, CRM platform, mobile apps, APIs, telephony, messaging, payments, AI, time tracking, and related services. Capitalized terms not defined here have the meanings in the Terms of Service. Violations may result in content removal, rate limiting, suspension, termination, reporting to providers or authorities, or other action allowed by the Terms.

You may not use the Service to: - Violate any law, regulation, court order, industry rule, or third-party right - Harass, threaten, abuse, stalk, exploit, or intimidate anyone - Send or facilitate deceptive, fraudulent, misleading, or unlawful communications - Impersonate another person or business without authorization - Collect, process, or disclose data without required rights, notices, or consents - Upload or distribute malware, spyware, malicious code, or harmful files - Support human trafficking, exploitation, hate, violence, or other unlawful conduct

You may not use calling, SMS, email, AI voice, or messaging features for: - Spam, unsolicited marketing, or unlawful telemarketing - Calls or texts without required consent - Ignoring STOP, unsubscribe, do-not-call, or revocation requests - Spoofing, misleading sender identity, or deceptive subject lines - Debt collection, regulated financial, political, healthcare, emergency, or other high-risk campaigns without confirming all legal and provider requirements - Content that carriers, telecom providers, email providers, or payment providers prohibit

You may not: - Probe, scan, penetration test, or vulnerability test the Service without prior written permission - Attempt to bypass authentication, authorization, tenant isolation, rate limits, billing controls, or security controls - Access another customer's account, data, recordings, messages, files, or systems without authorization - Interfere with the Service or connected networks - Use bots, scrapers, or automated traffic that harms reliability or violates our instructions - Reverse engineer, decompile, or attempt to derive source code except where law prohibits this restriction

Unless Joby has expressly agreed in writing, you may not use the Service to collect or store: - Protected health information subject to HIPAA - Full payment card numbers or CVV codes - Government identification numbers beyond what is strictly necessary for lawful business use - Children's personal information where parental consent or child-specific compliance is required - Biometric identifiers used to identify a person - Highly sensitive data unrelated to your legitimate business use of the Service

You may not use AI features to: - Deceive people into thinking AI-generated content is human where disclosure is required - Create, send, or facilitate fraud, scams, phishing, social engineering, or impersonation - Make final legal, medical, financial, employment, housing, credit, insurance, or similarly significant decisions without qualified human review - Generate or send unlawful discriminatory, harassing, defamatory, or infringing content - Clone or imitate a person's voice or identity without all required rights and consents

You may not use Joby Pay, Stripe-connected features, invoices, estimates, payment links, or service plans to: - Sell illegal goods or services - Misrepresent prices, taxes, fees, refund rights, subscription terms, or cancellation terms - Launder money, evade sanctions, or facilitate fraud - Process payments for another business without authorization - Use payment flows in violation of Stripe rules, card network rules, or applicable law

You may not use GPS proof, time tracking, live location, device data, or reports to monitor people without a legitimate business purpose and required notices or consents. You may not use Joby to track workers off duty, track people who are not authorized users, retaliate unlawfully, discriminate, or violate employment, labor, privacy, union, wage/hour, or contractor-classification laws.

Joby may investigate suspected violations and may remove content, disable features, limit usage, suspend accounts, terminate accounts, preserve evidence, or notify providers or authorities where appropriate. We may also require remediation steps such as consent record review, messaging campaign correction, user access review, or written compliance confirmation before restoring access.