Acceptable Use Policy

1. Scope

This Acceptable Use Policy ("Policy") is part of the Lakewave Terms of Service and applies to everyone who uses the Lakewave website, application, APIs, and related services (the "Service"), operated by Lynbrook Solutions LLC, doing business as Lakewave.ai ("Lakewave," "we," "us"). Capitalized terms not defined here have the meanings given in the Terms of Service. If you use the Service on behalf of an organization, you are responsible for making sure everyone in your organization who uses it follows this Policy.

2. Permitted use

The Service exists for one purpose: helping businesses find and contact other businesses about products and services relevant to those businesses. Acceptable use means:

• contacting people in their professional capacity, at their work email address, about matters relevant to their role or organization;
• sending personalized, one-to-one style outreach and reasonable follow-ups from a real person's account;
• using contact and company data to plan, target, and track your own sales and marketing;
• using public-sector procurement signals to identify and pursue bids you are eligible for, in compliance with the issuing agency's rules, including any restriction on contacting agency staff while a solicitation is open.

Everything in this Policy should be read against that purpose. If a use would surprise a reasonable recipient or a reasonable email provider, assume it is not permitted.

3. Email sending rules

You are the sender of every message sent through the Service. You must comply with every law that applies to you and to your recipients, including the U.S. CAN-SPAM Act, the EU and UK GDPR and ePrivacy rules, Canada's Anti-Spam Legislation (CASL), Australia's Spam Act, and equivalent laws elsewhere. Where these laws differ, follow the strictest one that applies to a given recipient. The rules in Sections 4 through 7 are minimums that apply regardless of where your recipients are.

4. Lists and consent

You may only contact people you have a lawful basis to contact. In practice:

• Contacts found through the Service may be used for relevant B2B outreach, subject to this Policy and to the laws that apply to the recipient's location.
• Lists you upload must be lists you built through your own legitimate business relationships or obtained with documented rights to use them for outreach. Uploading purchased, rented, scraped, or shared lists, or lists of consumers, is not permitted.
• You may not upload or contact addresses harvested from websites, directories, social networks, or event attendee lists in bulk, or generated by guessing.
• You may not contact role addresses such as info@, sales@, support@, or abuse@ with outreach campaigns.
• For recipients in jurisdictions that require consent for B2B email (parts of the EU, for example), you are responsible for having that consent or another valid legal basis before sending.

5. Message content and identity

Every commercial message you send must:

• identify you and your organization accurately, and come from an account you control;
• use a subject line that reflects the content of the message;
• include a valid physical postal address for your organization;
• include a clear way to opt out, and honor it as described in Section 6;
• not pretend to be a reply, a forwarded message, a personal note from a colleague, an invoice, or a notification, and not use fake "Re:" or "Fwd:" prefixes;
• not misrepresent a prior relationship, a referral, or a mutual connection that does not exist;
• not include tracking or content designed to evade spam filters, and not use link shorteners or redirects to disguise destinations.

6. Opt-outs and do-not-contact

• When anyone asks not to be contacted, by any means, stop contacting them and everyone at that address. Do this within ten business days and preferably immediately.
• Maintain a do-not-contact list in the Service and keep it current, including opt-outs you receive outside the Service.
• Do not contact anyone on your do-not-contact list from any account, campaign, or sequence, and do not re-import them from another list.
• Do not require a recipient to log in, pay, or provide more than an email address to opt out.
• If a recipient replies with a complaint or asks how you obtained their information, answer honestly and treat it as an opt-out unless they say otherwise.

7. Sending limits and deliverability

Deliverability is shared. One customer's abuse can get a sending domain, a relay, or a provider integration blocked for everyone. The Service therefore enforces daily caps, warm-up schedules, spacing between sends, and other controls, and you agree not to:

• evade or circumvent sending caps, warm-up periods, or scheduling controls, including by connecting extra accounts for the purpose of multiplying volume beyond what your plan allows;
• send from accounts, domains, or identities that are not yours or that you are not authorized to use;
• send to invalid, unverified, or unknown-status addresses in bulk, or use the Service to "clean" lists by sending to them;
• generate spam complaints, bounces, or blocklistings at rates we consider harmful. As a guide, complaint rates above 0.1% or bounce rates above 3% on any campaign will trigger review and may result in sending being paused.

We may pause sending on any account at any time to protect deliverability, and may require changes to lists, content, or cadence before sending resumes.

8. Connected accounts and reply routing

• Connect only email accounts you own or are authorized by your organization to use. Do not connect an account belonging to someone else without their knowledge.
• Use connected accounts in line with your email provider's terms. Google Workspace and Microsoft 365 both prohibit sending unsolicited bulk email from their services, and their limits apply in addition to ours.
• Where the Service routes replies through Lakewave-operated addresses or domains, do not use those addresses for anything other than receiving replies to messages sent through the Service, and do not represent them as your own permanent address.
• Do not use reply detection to collect or process data about recipients beyond managing your own outreach.

9. Use of Platform Data

Contact, company, verification, and procurement data provided by the Service ("Platform Data") is licensed to you for your own internal sales and marketing while you are a customer. You may not:

• export Platform Data in bulk, or export it for any purpose other than use in your own CRM or sales tools;
• sell, rent, share, publish, or otherwise redistribute Platform Data, or make it available to any third party except a service provider acting on your behalf under similar restrictions;
• use Platform Data to build, train, or improve any database, model, or product that competes with the Service;
• use Platform Data for background checks, credit decisions, employment decisions, insurance, housing, or any purpose regulated by the Fair Credit Reporting Act or similar laws;
• use Platform Data to contact individuals for personal, political, religious, or non-business purposes, or to identify, locate, or profile individuals outside a business context;
• combine Platform Data with other sources to create profiles of individuals beyond what is needed for B2B outreach.

10. Prohibited content and conduct

You may not use the Service to send, store, or promote:

• anything illegal, fraudulent, or deceptive, including phishing, advance-fee schemes, or investment or cryptocurrency promotions that violate securities laws;
• malware, credential-harvesting links, or content designed to compromise recipients' systems;
• content that is defamatory, harassing, threatening, obscene, or that promotes violence or discrimination against any person or group;
• content that infringes copyrights, trademarks, or other rights, or that misuses another company's name or brand to imply endorsement;
• adult content, gambling, controlled substances, weapons, counterfeit goods, or other categories that email providers restrict;
• political campaign, charitable solicitation, or religious outreach, which are outside the B2B purpose of the Service;
• content targeting individuals under 18.

11. Platform and security

You may not:

• probe, scan, or test the vulnerability of the Service or any related system, or breach or circumvent any security or authentication measure;
• access the Service by any means other than the interfaces we provide, including scrapers, bots, or headless browsers, except where we offer an API for that purpose;
• create multiple trial accounts, use disposable email addresses, or otherwise evade trial, credit, seat, or usage limits;
• share one seat among multiple people, or provide access to anyone outside your organization;
• reverse engineer, decompile, or attempt to extract the source code, prompts, models, or data structures of the Service;
• interfere with the Service or any other customer's use of it, or place a load on our infrastructure that is unreasonable for your plan;
• use the Service to develop a competing product or to benchmark it for publication without our written consent.

If you find a security vulnerability, report it to [email protected] and do not exploit it, access other customers' data, or disclose it publicly before we have had a reasonable chance to fix it. We will not pursue good-faith security research conducted under these conditions.

12. AI features

• Review AI-generated drafts before they are sent, or accept full responsibility for them if you use a workflow that sends with limited review.
• Do not use AI features to generate content that violates Sections 5 or 10, or to impersonate a real person.
• Do not enter into prompts, profiles, or notes any information you are not permitted to share with a third-party AI provider, such as another company's confidential information or sensitive personal data.
• Do not attempt to manipulate AI features to reveal system instructions, other customers' data, or to behave outside their intended purpose.

13. Enforcement

We may investigate any suspected violation of this Policy, which may include reviewing campaigns, message content, lists, and sending patterns. Depending on the severity, we may warn you, require changes, pause sending, remove content, limit features, suspend your account, or terminate it. We will usually give notice and a chance to correct the problem, but we may act immediately and without notice where a violation is serious, is causing harm, or threatens deliverability, security, or our relationships with providers. We may also report unlawful activity to authorities and cooperate with investigations. We are not obligated to monitor use of the Service, and taking action in one case does not waive our right to act in others.

14. Reporting abuse

If you received an unwanted message that appears to have been sent through Lakewave, or believe a Lakewave customer is violating this Policy, email [email protected] with the message headers or a forward of the message. We investigate every report. To be removed from contact data held by Lakewave, email [email protected], or see the Privacy Policy for other options.

15. Changes

We may update this Policy as laws, provider requirements, and our services change. The current version is always at lakewave.ai/acceptable-use. Material changes will be announced as described in the Terms of Service. Continued use of the Service after a change takes effect means you accept it.