MIMIR
Acceptable Use Policy
Last updated: 28 July 2026
This Acceptable Use Policy (the "AUP") forms part of, and is incorporated by reference into, the Terms of Service between you and SIA "MIMIR", Reg. No. 40203749446, Riga, Latvia ("we"). Terms used here have the meaning given in the Terms of Service. Breaching this AUP is a breach of those Terms, and we may suspend or terminate your workspace for it.
The one rule everything else follows from: you are the sender of record. MIMIR is orchestration software. When your workspace or its AI agents place a call, send an email, send a WhatsApp, Instagram, Messenger or Telegram message, research a business, publish a preview site, or answer a visitor through the chat widget, you are the sender, caller, publisher and initiator of that communication — not MIMIR. You direct it, you own the lists and the message content, and you connect the accounts that transmit it. You are the "sender" under CAN-SPAM and the "caller" under the TCPA and the FTC Telemarketing Sales Rule. We are your tool and your service provider, never the advertiser or the party on whose behalf a message is sent.
1. What this covers
Every channel the platform can drive: the outbound AI voice agent (calls placed through your own number and SIP trunk), AI email (outreach, follow-ups and drafted replies sent through your own sending domain), AI messaging (your clients' WhatsApp Business, Instagram and Facebook Messenger DMs and Telegram bots), the lead-research tools that collect public business information, the site Builder that generates and hosts preview sites, the embedded chat assistant, and the client-facing reports, proposals and invoices the platform drafts. You are responsible for everything done through your workspace, whether by you, your staff, or an AI agent acting on your configuration.
2. What you promise for every contact
You represent, on an ongoing basis and for each recipient, number, address and dataset you process:
- Lawful basis. You hold whatever legal basis, consent or established business relationship applicable law requires for that channel and that contact — including prior express consent (or prior express written consent where required) before any call or text to a wireless number.
- DNC and suppression scrubbing. You have scrubbed every calling list against the National Do Not Call Registry, any applicable state list, and your own internal do-not-call and opt-out records, current as of the time of contact.
- Authorization. You are entitled to contact that person or business on that channel and have not been asked to stop.
- Brand and IP clearance. You own or are licensed to use every name, trademark, logo, image, voice, likeness and piece of copy you upload, generate, publish or transmit — including anything the Builder publishes and anything a voice or chat agent presents as "you". You will not use MIMIR to impersonate a person, business or public body you are not authorized to represent.
- Truthful identification. Your outreach identifies you accurately — real "from" name, real header and return-path information, real caller ID — carries your postal address, and offers a working opt-out that you honor promptly.
- AI disclosure. Where the recipient's jurisdiction requires it, your calls, messages and chats disclose that the recipient is dealing with an automated agent, and you hold any consent required to deliver an artificial or prerecorded voice.
The platform ships controls that help with several of these — a CAN-SPAM footer carrying your postal address, automatic suppression of unsubscribes, do-not-call suppression, AI self-disclosure on calls, calling-hour limits and daily caps, and approval-gating before a send or a call. They are controls, not a compliance guarantee, and operating them lawfully is on you. Nothing in the product certifies that your use complies with any law.
3. What you must not do
3.1 Calls and texts
- Calling or texting anyone from whom you do not hold the consent or relationship the TCPA, the Telemarketing Sales Rule or applicable state law requires.
- Contacting numbers on the National DNC Registry, an applicable state list, or your own suppression list — or continuing to contact anyone who has opted out or asked you to stop.
- Delivering an artificial or prerecorded voice without the consent the law requires, or spoofing or falsifying caller ID.
- Calling outside permitted local calling hours, or exceeding lawful contact frequency for the recipient's jurisdiction.
3.2 Email
- Sending to harvested, purchased, rented or dictionary-generated addresses, or to any address you have no lawful basis to email.
- Sending commercial email with false or misleading headers, subject lines, "from" names or return paths, without a working opt-out, or without honoring opt-outs promptly (CAN-SPAM).
- Sending to anyone who has unsubscribed, or re-importing a list to get around a suppression.
- Disabling, faking or routing around the CAN-SPAM footer, the unsubscribe link or the suppression list the platform applies to your sends.
3.3 Research and scanning
- Researching, scanning or profiling the site or systems of anyone who is not a lawful subject of your legitimate outreach research.
- Collecting data in violation of a site's terms, its
robots.txt or any technical access control; circumventing paywalls, logins, rate limits or anti-bot measures.
- Collecting sensitive personal data, data about minors, or consumer (non-business) personal data through the research tools other than as lawfully permitted.
- Reselling or redistributing contact data collected through the platform as a standalone data product.
- Using the security scan against any site you neither own nor have written permission to test. The scan is non-intrusive by design; pointing it at a third party without authorization is your violation, not ours.
3.4 Content, sites and widgets
- Publishing or transmitting content that is unlawful, deceptive, defamatory, infringing, obscene or harassing, or that facilitates fraud, phishing or malware.
- Making regulated claims — financial, medical, legal or similar — that you are not licensed or authorized to make.
- Configuring a chat or voice agent to make false claims, to pass as human where disclosure is required, or to collect end-user data without a compliant notice on the site it runs on.
- Using generated output in a way that violates a third party's intellectual-property, publicity or privacy rights.
3.5 Platform and security
- Attempting to reach another tenant's workspace or break tenant isolation; probing, scanning or load-testing the platform; or reverse-engineering it except where law permits.
- Sharing your license key or PIN, or running more than one business or workspace on a single subscription without our agreement.
- Reselling or sublicensing the platform itself beyond the white-label use the Terms allow. Serving your own clients under your own brand is exactly what MIMIR is for; reselling workspaces to other agencies is not.
- Using the platform in breach of export controls or sanctions, or in breach of any connected provider's own acceptable-use terms — including Anthropic, your telephony provider, your email provider, and Meta/WhatsApp.
4. Your providers are still your providers
Email and calls run on accounts you connect — your sending domain, your number and SIP trunk — and those providers bill you directly. You must satisfy each provider's own sender and registration requirements, including carrier 10DLC or campaign registration, sender-domain authentication (SPF, DKIM, DMARC) and WhatsApp Business messaging policy. Orchestrating those accounts on your instruction does not make us the sender, caller or advertiser.
5. Enforcement
We do not pre-screen your outreach. We may investigate suspected violations, and we may throttle a channel, suspend your workspace, or terminate the Terms — with or without notice where law, a provider, or ongoing harm makes immediacy necessary — if we reasonably believe you have breached this AUP or created legal risk. We may preserve and disclose information where required by law or valid legal process, and may cooperate with a provider, carrier or regulator. Suspension for breach of this AUP is not a service failure and does not entitle you to a refund; see the Refund Policy.
6. Indemnity
You will defend, indemnify and hold harmless MIMIR and its officers, employees and agents against any claim, demand, investigation, fine, penalty, loss, liability, damage or cost (including reasonable legal fees) arising out of: (a) your outreach, calls, messages, research, published sites or widget activity; (b) your breach of Section 2 or Section 3; (c) your lack of consent, authorization, DNC scrubbing or brand clearance for any contact or content; or (d) any claim that you were the sender, caller or publisher of a communication that broke the law. This survives termination and is in addition to any indemnity in the Terms.
7. Changes and contact
We may update this AUP as channels, provider requirements or the law change; material changes are posted here with a new date, and continued use after that date is acceptance. This AUP is governed by the same law and dispute terms as the Terms of Service. Questions: hello@mimirdesk.com.