Draft for attorney review. This Acceptable Use Policy is provided as a placeholder while we complete attorney review. It will be replaced with the final reviewed version before 1sixty8 Manifold is offered to paying customers. Do not rely on this text as a final legal commitment.

Acceptable Use Policy

Product: 1sixty8 Manifold Operator: 1sixty8 media, inc., a Pennsylvania S corporation Version: 1.0 Effective Date: [DATE OF ADOPTION] Last Updated: [DATE OF ADOPTION]


Status: DRAFT for attorney review. This document was drafted by the founder with AI assistance. It is not legal advice. Do not publish or rely on any portion of this text until it has been reviewed and approved by counsel admitted to practice in Pennsylvania and familiar with U.S. SaaS operational contracting.


1. Scope and Who Is Bound

This Acceptable Use Policy (the "AUP") describes how Customer and its Authorized Users must conduct themselves when using 1sixty8 Manifold (the "Service"). The AUP is incorporated into, and forms part of, the Terms of Service (the "Terms"). Capitalized terms used but not defined in this AUP have the meanings given in the Terms.

This AUP binds Customer and each Authorized User. Customer is responsible for ensuring its Authorized Users comply with this AUP.

A violation of this AUP is a material breach of the Terms.

2. Prohibited Conduct (General)

Customer and its Authorized Users may not:

3. Prohibited Content

Customer and its Authorized Users may not submit, upload, store, or transmit through the Service any content that:

4. Messaging — SMS

SMS messaging sent through the Service is subject to the Telephone Consumer Protection Act ("TCPA"), state-level analogs (sometimes called mini-TCPA statutes), the messaging provider's acceptable use policy (currently Telnyx), and carrier-level rules (including the 10DLC brand and campaign registration system). Because the penalties for violations are severe and the carrier relationships we depend on are fragile, the rules in this section are strict.

4.1 Consent requirement. Before sending any SMS or MMS message to a recipient through the Service, Customer must have obtained from the recipient the consent required by applicable law. Customer is responsible for classifying its messages into the appropriate category under applicable law and for obtaining the corresponding form of consent. The three categories generally recognized under U.S. law are:

4.2 Consent records. Customer must maintain accurate records of the consent it has obtained for each recipient, including the consent form used, the date and channel of consent, and the identity of the person consenting. Customer must be able to produce such records to us within a reasonable period on our written request. The Service provides tools to record opt-in method, opt-in timestamp, and opt-out events; Customer is responsible for using these tools.

4.3 Opt-out handling. Customer must honor all opt-out requests (STOP, UNSUBSCRIBE, and similar keywords) without delay. The Service processes standard opt-out keywords automatically; Customer may not attempt to circumvent or delay opt-out handling.

4.4 Prohibited SMS content. Customer may not use SMS or MMS features for content in any category prohibited by the messaging provider's acceptable use policy or by applicable law. Currently prohibited or restricted categories include:

This list may change as the messaging provider's policies and applicable law evolve.

4.5 Messaging provider policy. Customer's use of SMS features is subject in addition to the messaging provider's acceptable use policy then in effect. Customer is responsible for its own compliance with any required carrier-level registrations, including 10DLC brand and campaign registration where applicable.

5. Messaging — Email

Email sent through the Service is subject to the CAN-SPAM Act, applicable state email-marketing laws, and the email delivery provider's acceptable use policy (currently SendGrid).

6. Messaging — Facebook Messenger and Instagram

Customer's use of Facebook Messenger and Instagram direct messaging features through the Service is subject to Meta's Platform Terms, Commerce Policies, Community Standards, and messaging policies, including:

Customer's Facebook Page and Instagram business account remain Customer's responsibility. The Service provides tooling to send and receive messages through Meta's APIs; it does not operate Customer's Meta presence. Meta may revoke, rate-limit, or modify access at any time, and we are not responsible for any such action by Meta.

7. Security and Service Integrity

Customer and its Authorized Users may not:

8. Fair Use and Scope of Use

8.1 One physical operating location per subscription. Each subscription to the Service entitles Customer to operate one physical operating location on that tenant. Customer with multiple operating locations must maintain one subscription per location. Cross-location functionality (for example, inventory visibility across locations, cross-location team communication) is provided, when available, through the platform's federation features, not by sharing a single tenant across multiple locations.

8.2 Ambiguous cases. Customer is responsible for matching subscriptions to its operating locations. Where the application of Section 8.1 is unclear (for example, mobile operations tied to a physical shop, seasonal satellite locations, pop-up installations, test or training environments, and similar edge cases), we will evaluate the situation and determine whether separate subscriptions are required. Our determination in such cases is final.

8.3 Consultants and multi-tenant operators. A person or firm managing the operations of multiple unrelated shops is expected to maintain a separate subscription for each shop and to be granted access as an Authorized User of each tenant. A single subscription may not be used to manage the operations of multiple unrelated shops.

8.4 Authorized User uniqueness. Each Authorized User credential represents one specific individual and may not be shared. If Customer exceeds the Authorized User limit of its subscription plan, we may require Customer to upgrade the plan or remove users before full access is restored. Authorized Users who work across multiple tenants Customer operates count against each tenant's Authorized User limit separately.

8.5 Competitor access. Customer may not use access to the Service (directly, through its Authorized Users, or through any person or entity acting on Customer's behalf) to benchmark, reverse-engineer, or replicate the Service, or to build or support a product or service that competes with the Service. This mirrors Section 9.2 of the Terms in plain language.

8.6 Data export and hoarding. Customer is entitled to export Customer Data at any time using the tools the Service provides. Customer may not use automated or bulk methods to continuously extract Customer Data, or to extract data that does not belong to Customer.

9. AI Assistant

The in-app AI Assistant is provided as a productivity tool to answer questions about the Service and assist Customer with routine operations. The AI Assistant is subject to this AUP in the following ways:

We may suspend Customer's or any Authorized User's access to the AI Assistant independently of other features if we detect misuse.

10. Enforcement

10.1 Tiered response. We will enforce this AUP through a tiered response designed to resolve violations while preserving Customer's day-to-day operations where possible.

10.2 Cooperation. Customer will cooperate with any investigation of an alleged violation. Reasonable cooperation includes preserving relevant records, providing consent-collection evidence on request, and refraining from further similar conduct while an investigation is underway.

10.3 Cost recovery. If a violation of this AUP results in chargebacks, fines, carrier penalties, claims, or other costs to us or our Third-Party Service providers, Customer is responsible for those costs, in accordance with Section 16.2 of the Terms.

11. Reporting Violations

Reports of suspected AUP violations, including copyright complaints and formal abuse reports, should be sent to:

legal@1sixty8.com

Reports should describe the violation, identify the Customer or Authorized User involved (where possible), and include any supporting evidence. We investigate all reports we receive but do not confirm receipt or outcomes to reporters in most cases. Good-faith reports are welcome; bad-faith or harassing reports may themselves be treated as a violation of this AUP.

Informal concerns that do not allege a violation may be raised through the in-app support ticket system.

12. Changes to This Policy

We may update this AUP from time to time by posting an updated version at /legal/acceptable-use and revising the effective date.

A changelog is published at the end of this AUP.

13. Contact

Questions about this Acceptable Use Policy, or reports of suspected violations, may be sent to legal@1sixty8.com. Postal correspondence may be addressed to:

1sixty8 media, inc. Attn: Legal 273 Smith Road Kunkletown, PA 18058


Changelog

| Version | Date | Summary of Change | |---|---|---| | 1.0 | [DATE] | Initial AUP published as placeholder pending attorney review. |