Acceptable Use Policy

Effective Date: 1 April 2026 Last Updated: 1 April 2026

1. Purpose

This Acceptable Use Policy ("AUP") sets out the rules and guidelines for using the Pebbles Ai platform and related services. It exists to protect our users, our platform, and the broader community by ensuring that the Service is used responsibly and lawfully.

This AUP forms part of your agreement with GTMSAI Ltd (trading as Pebbles Ai) and should be read alongside our Terms of Service and Privacy Policy.

2. Scope

This AUP applies to all users of the Pebbles Ai Service, including the web application at app.trypebbles.ai, any associated APIs, integrations, and related services (collectively, the "Service").

By accessing or using the Service, you agree to comply with this AUP. If you are using the Service on behalf of an organisation, you are responsible for ensuring that all users within your organisation comply with this policy.

3. Permitted Uses

The Service is designed for legitimate business-to-business (B2B) go-to-market activities. Permitted uses include:

Research and Intelligence — Using AI-powered research agents and copilot features to gather publicly available information about prospects, organisations, and market trends
Outreach and Campaigns — Creating and sending personalised outreach messages via email and LinkedIn using the Service's campaign tools
Contact Management — Importing, organising, and segmenting business contacts for the purpose of B2B engagement
Campaign Management — Planning, executing, and measuring multi-channel outreach campaigns
Content Generation — Using AI features to draft, refine, and evaluate outreach content
Email Management — Reading, composing, and sending emails through connected email integrations (e.g., Gmail via Smartbox)
Analytics and Reporting — Reviewing campaign performance, engagement metrics, and AI-generated insights

4. Prohibited Uses

You must not use the Service for any of the following purposes. This list is not exhaustive; GTMSAI Ltd reserves the right to determine, in its sole discretion, whether any use violates this AUP.

4.1 Spam and Unsolicited Bulk Messaging

You must not use the Service to send spam or unsolicited bulk messages. This includes sending emails or messages to recipients who have not consented to receive communications from you, or who have previously opted out of your communications.

4.2 Malicious Content

You must not use the Service to send, distribute, or facilitate the delivery of malware, phishing attempts, ransomware, viruses, or any other malicious content through email integrations or any other feature of the Service.

4.3 Unauthorised Data Scraping or Harvesting

You must not use the Service, its APIs, or any connected integrations to scrape, harvest, or collect data in an unauthorised manner, including extracting data beyond what is necessary for the permitted uses described in Section 3.

4.4 Unlawful Activity

You must not use the Service to violate any applicable law, regulation, or legal obligation, including but not limited to data protection laws (GDPR, CCPA), anti-spam legislation (CAN-SPAM, PECR), export control laws, and sanctions regulations.

4.5 Unauthorised Access

You must not attempt to gain unauthorised access to other users' accounts, data, or any part of the Service's infrastructure. This includes probing, scanning, or testing the vulnerability of the Service without prior written authorisation from GTMSAI Ltd.

4.6 Service Disruption

You must not interfere with, disrupt, or attempt to disrupt the Service, its servers, networks, or infrastructure. This includes denial-of-service attacks, resource exhaustion, and any activity that degrades the performance or availability of the Service for other users.

4.7 Rate Limit and API Abuse

You must not exceed the rate limits, API quotas, or usage limits associated with your account or subscription plan. Automated tools or scripts designed to circumvent these limits are prohibited.

4.8 Misuse of Google API Data

Data obtained through Google integrations (such as Gmail and Google Contacts) via the Service may only be used within the Pebbles Ai Service as described in the Privacy Policy. You must not export, copy, or use Google API data outside of the Service in ways not authorised by Google's API Services User Data Policy.

You must not share your account credentials (username, password, API keys, or authentication tokens) with any other person. Each user must access the Service through their own individual account.

4.10 Illegal, Harmful, or Infringing Content

You must not upload, store, or transmit through the Service any content that is:

Illegal or promotes illegal activity
Defamatory, libellous, or fraudulent
Obscene, threatening, or harassing
Infringing on the intellectual property rights of any third party
In violation of any person's right to privacy

5. Email Sending Guidelines

If you use the Service's email features (including Gmail compose and send integrations), you must comply with all applicable anti-spam and electronic communications laws, including:

5.1 CAN-SPAM Act (United States)

Do not use false or misleading header information
Do not use deceptive subject lines
Include a clear and conspicuous opt-out mechanism in every commercial email
Honour opt-out requests within 10 business days
Include your valid physical postal address in every commercial email

Obtain appropriate consent or establish a legitimate interest before sending marketing communications to individuals
Provide a clear and easy way to unsubscribe from marketing emails
Respect the right to object to direct marketing at any time
Comply with the Privacy and Electronic Communications Regulations (PECR) when sending electronic marketing to individuals in the UK

5.3 Canada (CASL)

If you send commercial electronic messages to recipients in Canada, you must comply with Canada's Anti-Spam Legislation (CASL), including:

Obtaining express or implied consent before sending commercial messages
Clearly identifying yourself and your organisation in the message
Providing a functioning unsubscribe mechanism
Honouring unsubscribe requests within 10 business days

5.4 General Email Best Practices

Maintain clean and up-to-date contact lists; remove bounced addresses and unsubscribes promptly
Do not send emails to purchased, rented, or harvested contact lists
Ensure your email content is accurate, professional, and clearly identifies you or your organisation as the sender
Respect frequency expectations and do not send excessive volumes of emails to any single recipient

6. Google API Data Restrictions

When you use the Service's Google integrations (Gmail, Google Contacts), the data obtained through Google APIs is subject to additional restrictions:

Google API data may only be used within the Pebbles Ai Service for the purposes described in our Privacy Policy, Section 8
You must not extract, export, or repurpose Google API data for use outside of the Service
You must not share Google API data with third parties except as necessary to use the Service's features
All use of Google API data is subject to the Google API Services User Data Policy, including the Limited Use requirements

7. Consequences of Violation

GTMSAI Ltd reserves the right to take any action it deems appropriate in response to violations of this AUP. Actions may be taken at our sole discretion and may include, but are not limited to:

Warning — A written notice identifying the violation and requiring immediate corrective action
Temporary Suspension — Suspension of your access to the Service while we investigate or while you remedy the violation
Account Termination — Permanent termination of your account and all associated data
Reporting to Authorities — Referral of the matter to the appropriate law enforcement or regulatory authorities where we believe a violation involves illegal activity
Legal Action — Pursuing civil remedies for damages caused by the violation

GTMSAI Ltd may take any of these actions without prior notice if, in our reasonable judgement, the violation poses an immediate risk to the Service, our users, or third parties.

GTMSAI Ltd will not be liable for any losses arising from enforcement actions taken in good faith under this policy. If you believe an enforcement action was taken in error, you may appeal by contacting security@trypebbles.ai.

8. Reporting Violations

If you believe that a user of the Service is violating this AUP, or if you become aware of any security vulnerability or concern related to the Service, please report it immediately to:

Email: security@trypebbles.ai

You may also report violations through our Vulnerability Disclosure Policy.

We will investigate all reports promptly and take appropriate action as described in Section 7.

9. Changes to This Policy

We may update this Acceptable Use Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last Updated" date. Where required by law or where changes materially affect your use of the Service, we will notify you by email.

We encourage you to review this policy periodically.

10. Contact

If you have any questions about this Acceptable Use Policy, please contact: