Skip to main content
Last Updated: January 2026 This Acceptable Use Policy (“AUP”) governs your use of the HoopAI platform, including all products, services, APIs, and related technologies provided by HoopAI, Inc. (“HoopAI,” “we,” “us,” or “our”). By accessing or using the HoopAI platform, you agree to comply with this AUP. Violations may result in enforcement actions up to and including account termination. This AUP supplements the HoopAI Terms of Service and Privacy Policy. Capitalized terms not defined here have the meanings assigned in those agreements.

Policy overview

You must use the HoopAI platform in compliance with all applicable laws, regulations, and industry standards. By using our services, you agree to:
  • Use the platform only for lawful business purposes
  • Maintain accurate and current account information
  • Keep your login credentials secure and confidential
  • Maintain all necessary business licenses, permits, and insurance required for your operations
  • Obtain all required permissions, consents, and authorizations before collecting, processing, or storing personal data through the platform
  • Comply with all applicable accessibility laws and standards
Best practice: Conduct periodic reviews of your account activity, user permissions, and data processing practices to ensure ongoing compliance with this AUP and applicable regulations.
The following activities are strictly prohibited on the HoopAI platform:
Violation of any of the following prohibitions may result in immediate suspension or termination of your account without prior notice.

2.1 Platform integrity

  • Reverse engineering — Decompiling, disassembling, reverse engineering, or otherwise attempting to extract the source code, underlying algorithms, or data models of the platform
  • Derivative works — Creating derivative works based on the platform or any of its components
  • Proprietary notices — Removing, altering, or obscuring any proprietary notices, labels, trademarks, or branding on the platform
  • Unauthorized access — Accessing or attempting to access accounts, systems, or data without proper authorization
  • Non-standard interfaces — Accessing the platform through any non-standard or unauthorized interface, tool, or automated means not provided or approved by HoopAI
  • Security circumvention — Bypassing, disabling, or interfering with any security features, access controls, or content-filtering mechanisms
  • Platform interference — Engaging in any activity that disrupts, degrades, or interferes with the normal operation of the platform, including denial-of-service attacks
  • Robots.txt violations — Bypassing or ignoring robots.txt directives or other access-restriction mechanisms
  • Scraping — Automated scraping, crawling, or harvesting of platform content or data without express written authorization

2.2 Competitive misuse

  • Competitor access — Using the platform by or on behalf of a competitor for the purpose of gaining competitive intelligence, benchmarking, or replicating platform features
  • Misrepresentation — Misrepresenting your identity, affiliation, or the purpose of your use of the platform

2.3 User conduct

  • Harassment — Engaging in harassing, threatening, intimidating, predatory, or stalking conduct toward any individual
  • Impersonation — Impersonating HoopAI employees, officials, or representatives, or any other person or entity
  • Content tampering — Deleting, revising, or modifying content created by other users without authorization
  • Attribution modification — Modifying, removing, or falsifying author attributions on content
  • Unauthorized registration — Creating accounts or subscriptions without proper authorization or through fraudulent means

2.4 Data export restrictions

  • Do not export or transmit data in violation of applicable export control laws, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR)
  • Do not provide platform access to individuals or entities in restricted jurisdictions or on sanctioned-party lists
All content created, uploaded, stored, or distributed through the HoopAI platform must comply with the following standards:
Prohibited content includes but is not limited to:
  • Illegal content — Any content that violates applicable local, state, national, or international laws
  • Hate speech — Content that promotes hatred, discrimination, or violence against individuals or groups based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics
  • Malware — Viruses, trojans, worms, ransomware, spyware, or any other malicious software or code
  • Fraudulent content — Content designed to deceive, defraud, or mislead users, including phishing schemes
  • Intellectual property violations — Content that infringes on copyrights, trademarks, patents, trade secrets, or other intellectual property rights of third parties
  • Explicit or exploitative material — Obscene, pornographic, or sexually exploitative content, particularly any content involving minors
  • Defamatory content — Content that is knowingly false and damages the reputation of individuals or organizations
Best practice: Implement internal content review processes before publishing or distributing content through the platform. Designate a team member responsible for content compliance.
You are responsible for ensuring that your use of the HoopAI platform complies with all applicable data protection and privacy laws. This includes but is not limited to:

4.1 Applicable regulations

RegulationScopeKey requirements
GDPREU/EEA residentsLawful basis for processing, data subject rights, DPA required
CCPA / CPRACalifornia residentsConsumer rights disclosure, opt-out mechanisms, data inventory
HIPAAProtected health information (US)BAA required, encryption, access controls, audit trails
PCI DSSPayment card dataSecure handling, no storage of CVV, compliance validation
PIPEDACanadian residentsConsent-based processing, data breach notification

4.2 Your obligations

  • Lawful basis — Maintain a lawful basis for all data processing activities conducted through the platform
  • Notice and consent — Provide clear and conspicuous privacy notices and obtain all required consents before collecting or processing personal data
  • Consent records — Maintain accurate and auditable records of all consents obtained from data subjects
  • Jurisdiction compliance — Comply with notice and consent obligations specific to each jurisdiction in which you operate or where your contacts reside
  • Data minimization — Collect and process only the personal data that is necessary for your stated purposes
  • Contact data — Ensure you have all necessary permissions and consents for any Contact Data processed through the platform
Best practice: Maintain a data processing register that documents the categories of data processed, legal bases, retention periods, and any third-party sharing. Review and update this register quarterly.
All electronic communications sent through the HoopAI platform must comply with applicable laws and industry standards.

5.1 Messaging compliance requirements

RequirementEmail (CAN-SPAM)SMS/MMS (TCPA)A2P 10DLC
Prior consentImplied or expressExpress written consent requiredCampaign registration required
Sender identificationAccurate From header and physical addressRegistered business identityBrand and campaign verified
Opt-out mechanismUnsubscribe link in every messageSTOP keyword supportSTOP keyword support
Opt-out processingWithin 10 business daysImmediateImmediate
Content restrictionsNo deceptive subject linesNo prohibited content categoriesContent must match registered use case
Record keepingMaintain consent and opt-out recordsWritten consent recordsRegistration documentation

5.2 Prohibited messaging practices

The following messaging practices are strictly prohibited:
  • Spam — Sending unsolicited bulk messages or communications to individuals who have not opted in
  • Purchased lists — Using purchased, rented, or third-party contact lists where recipients have not provided direct consent to receive communications from you
  • Scraped contacts — Sending messages to contacts obtained through scraping, harvesting, or other unauthorized collection methods
  • Opt-out violations — Failing to honor opt-out requests or continuing to send messages after a recipient has unsubscribed
  • Missing unsubscribe — Sending marketing communications without a clear and functioning unsubscribe or opt-out mechanism
  • Deceptive messaging — Using misleading sender information, subject lines, or message content
Best practice: Implement double opt-in for all marketing lists, regularly clean your contact lists to remove inactive or bounced addresses, and maintain suppression lists across all communication channels.
The HoopAI platform provides AI-powered agents, chatbots, and automation tools. The following rules govern their use:

6.1 Transparency and disclosure

  • AI disclosure — You must clearly disclose to end users when they are interacting with an AI agent, chatbot, or automated system rather than a human
  • No deceptive bots — AI agents must not be designed or configured to deceive users into believing they are communicating with a human
  • Accurate responses — You are responsible for ensuring that AI-generated content and responses are accurate and not misleading

6.2 AI usage restrictions

  • Do not use AI agents to generate or distribute spam, phishing content, or malicious communications
  • Do not use AI agents to harass, threaten, or intimidate individuals
  • Do not use AI agents to impersonate real individuals without their explicit consent
  • Do not train or configure AI agents to produce content that violates the Content Standards (Section 3) of this AUP
  • Do not use AI automation to circumvent rate limits, security controls, or other platform restrictions
You are responsible for all actions taken by AI agents and automations configured under your account, including any communications they send and data they process.
Best practice: Regularly review AI agent conversations and outputs. Establish human oversight processes for sensitive use cases such as healthcare, financial advice, or legal guidance.
Access to the HoopAI API is subject to the following usage policies:

7.1 Rate limits and quotas

  • Respect all published API rate limits and usage quotas
  • Do not attempt to circumvent rate limiting through multiple accounts, IP rotation, or other evasion techniques
  • Implement proper error handling and exponential backoff for rate-limited requests

7.2 API usage restrictions

  • API access is for building integrations that complement your use of the HoopAI platform
  • Do not use the API to build competing products or services
  • Do not redistribute API access or resell API data to unauthorized third parties
  • Do not use the API to perform bulk data extraction or scraping beyond your authorized use case
  • Include proper attribution when required by the API terms

7.3 Authentication and security

  • Keep API keys, tokens, and credentials secure and confidential
  • Rotate API credentials regularly and immediately revoke compromised credentials
  • Do not share API credentials across organizations or embed them in client-side code
  • Use HTTPS for all API communications
Best practice: Use environment variables or a secrets manager for API credentials. Monitor your API usage dashboards regularly to detect anomalies or unauthorized access.
HoopAI reserves the right to take enforcement action against any account that violates this AUP. Enforcement actions are applied progressively based on the severity and frequency of violations.

8.1 Enforcement progression

LevelActionTrigger
Level 1 — WarningWritten notice of violation with remediation guidanceFirst minor violation or unintentional policy breach
Level 2 — RestrictionTemporary limitation of specific features or servicesRepeated minor violations or failure to remediate after warning
Level 3 — SuspensionTemporary suspension of account accessSerious violation, repeated policy breaches, or threat to platform integrity
Level 4 — TerminationPermanent termination of account and all associated servicesSevere or willful violations, illegal activity, or repeated suspensions

8.2 Immediate action

HoopAI may bypass the progressive enforcement process and take immediate action (including suspension or termination) in cases involving:
  • Illegal activity or violations of criminal law
  • Threats to the security or integrity of the platform
  • Activity that poses risk of harm to other users or third parties
  • Activity that exposes HoopAI to legal liability

8.3 Appeals

If you believe an enforcement action was taken in error, you may submit an appeal to legal@hoopai.com within 30 days of the action. Appeals will be reviewed and a response provided within 10 business days.
If you become aware of any activity that violates this Acceptable Use Policy, we encourage you to report it promptly.

How to report

What to include

  • Your name and contact information
  • Description of the violation
  • Relevant account names, URLs, or identifiers
  • Screenshots or other supporting evidence (if available)
  • Date and time of the observed violation
All reports are reviewed by our compliance team. We will take appropriate action in accordance with the enforcement procedures described in Section 8. Reporter identities are kept confidential to the extent permitted by law.
Good faith reporting: HoopAI will not take adverse action against users who report violations in good faith, even if the investigation determines no violation occurred.

Questions

If you have questions about this Acceptable Use Policy or need clarification on whether a specific use case is permitted, contact us at legal@hoopai.com.
Last modified on March 6, 2026