Acceptable Use Policy

Last updated: 17 August 2026

PRE-LAUNCH — NOT YET REVIEWED BY COUNSEL

Peraly is preparing for early access. This policy describes the product as it is built today and the standards we hold customers to; it has not yet been reviewed by counsel, and a small number of items — a notice period, a postal address — are settled once the operating entity is incorporated.

Scope

This policy applies to everyone who uses Peraly — account holders, workspace members, people invited into a workspace, and anyone acting on their behalf. It applies to content you publish through Peraly, messages you send with it, contacts you store in it, automations you build in it, and the social accounts you connect to it.

It sits alongside the Terms of Service and the Privacy Policy. Where a connected platform’s own rules are stricter than this policy, the platform’s rules apply as well — connecting an account does not exempt you from the terms you agreed with that platform.

The Short Version

Use Peraly to talk to people who want to hear from you, on accounts you are entitled to operate, in ways the platforms allow. Everything below is that sentence with the edge cases spelled out.

Spam and Unsolicited Bulk Communication

You may not use Peraly to send unsolicited bulk messages of any kind — by email, by direct message, by comment, or through an automation that fans one trigger out to many recipients.

Do not message people who have not asked to hear from you. On Instagram this is not merely discouraged: Peraly enforces the 24-hour window in which a direct message is permitted after someone contacts you, and refuses the send outside it rather than letting the platform rate-limit your account.
Do not use comment or keyword automations to reach people who did not engage with you first.
Do not send the same message repeatedly to the same person, or split one campaign across several accounts to stay under a limit.
Do not send anything that would meet the definition of spam in the recipient’s jurisdiction — including CAN-SPAM, CASL, PECR and the GDPR’s rules on direct marketing.

Purchased, Rented and Scraped Lists

Every address and contact in your workspace must have reached you legitimately: given to you directly, or created by Peraly because that person contacted your connected account.

Do not upload, import or message a purchased or rented list.
Do not upload, import or message a list scraped, harvested or otherwise collected without the person’s knowledge.
Do not append addresses to contacts from a third-party data broker.
Do not treat a contact created by one interaction as consent for an unrelated campaign.

Peraly Is Not a Sending Service

Peraly sends email about your account and your workspace. It is not, and may not be used as, a general-purpose relay or bulk-email service.

This is a property of how the product is built rather than a rule we ask you to remember: there is no endpoint anywhere in Peraly that accepts an arbitrary subject and body. Every message is a fixed server-side template with a typed context, and its recipients are read from your own account and workspace records.

Do not attempt to inject additional recipients into a message — addresses containing commas, newlines or angle brackets are refused outright.
Do not use Peraly’s notification, invitation or alerting features to deliver content to people who are not part of your workspace.
Do not automate account creation, invitations or password resets in order to cause Peraly to send mail on your behalf.

Credentials, Accounts and Unauthorized Access

You are responsible for the accounts you connect and the people you let into your workspace.

Connect only social accounts you own or are authorized to operate, through the platform’s own authorization flow. Do not supply someone else’s credentials to Peraly, and do not ask anyone to supply theirs.
Do not share account passwords. Workspace roles exist so that a colleague, a client or a contractor can be given exactly the access they need without one.
Do not attempt to access another workspace, another customer’s data, or any part of Peraly you have not been granted access to.
Do not probe, scan or test the security of Peraly or its infrastructure without written permission, and do not attempt to bypass authentication, rate limits, quotas or plan entitlements.
Do not reverse-engineer, resell or sublicense access to Peraly, or use one account to provide the service to parties who should hold their own.

Impersonation, Fraud and Deception

People are entitled to know who they are talking to.

Do not impersonate another person, brand, business or public body, and do not operate an account that implies an affiliation or endorsement you do not have.
Do not falsify sender identity, reply-to addresses, headers, display names or message routing.
Do not use Peraly for phishing, credential harvesting, payment fraud, fake giveaways, counterfeit goods, pyramid or matrix schemes, or any other attempt to obtain money or information by deception.
Do not present AI-generated content as something a specific real person said or did.
Do not use misleading subject lines, previews or opening messages to get a message opened.

Automation and Malicious Use

Automation is most of what Peraly is for. These are the uses of it that are not acceptable.

Do not build automations designed to evade a platform’s rate limits, spam detection, or review — including staggering, rotating accounts, or spinning message text to defeat duplicate detection.
Do not use Peraly to distribute malware, spyware, ransomware, or links to any of them.
Do not use it to generate artificial engagement: follow-for-follow rings, comment farms, vote manipulation, or inflated metrics.
Do not use it to harass, brigade, dogpile or mass-report a person or an organisation.
Do not place a load on Peraly or on a connected platform that is disproportionate to normal use, whether deliberately or through a misconfigured loop.

Illegal, Harmful and Deceptive Content

You may not use Peraly to create, store, publish or send content that is unlawful, or that causes the kinds of harm below. This applies to content you publish to a connected channel, content you send to a contact, and content you store in Peraly, including in a knowledge base used by AI features.

Content that is illegal where you are or where the recipient is, or that facilitates illegal activity.
Child sexual abuse material, or any sexual content involving minors. This is reported to the authorities, not merely removed.
Content that threatens, incites or glorifies violence, or that promotes terrorism or violent extremism.
Harassment, targeted abuse, doxxing, or hate directed at people on the basis of a protected characteristic.
Content that infringes copyright, trademark or another person’s intellectual property, or that discloses someone else’s confidential or personal information without a basis to.
Deliberate disinformation about elections, public health or emergencies.
Deceptive commercial content — false claims about a product, undisclosed paid promotion, or fabricated reviews and testimonials.
Material a connected platform prohibits, whether or not it is unlawful.

Connected Platform Policies

Peraly reaches Instagram, Facebook, YouTube, TikTok and LinkedIn through their official APIs, under developer terms that bind us and, through us, you. Breaking a platform’s rules puts every Peraly customer’s access to that platform at risk, not only yours.

Meta’s Platform Terms and Instagram Community Guidelines.
The YouTube Terms of Service and the YouTube API Services Terms of Service.
TikTok’s Terms of Service and Community Guidelines.
LinkedIn’s User Agreement and Professional Community Policies.

AI Features

Peraly’s AI features draft captions, replies, summaries, translations and thumbnails for you to review. They suggest; they do not publish or send on their own.

You remain responsible for anything you publish or send, whether or not a model wrote the first version of it. Review AI output before it goes out, do not use these features to generate content prohibited by this policy, and do not submit other people’s personal data to them without a lawful basis for doing so.

Your Responsibilities to Your Contacts

When you store and message contacts through Peraly, you decide why and how — which makes you the controller of that data and Peraly your processor.

You are responsible for having a lawful basis to hold and contact those people, for telling them who you are, and for honouring their requests. Deleting a contact in Peraly removes it from our systems; nothing else in the product does that for you automatically.

Enforcement

Some of this policy enforces itself. The messaging window, the suppression list, the refusal of multi-recipient addresses and the absence of any arbitrary send path are properties of the software: an attempt to cross those lines fails rather than being noticed later.

The rest we enforce by hand, in proportion to what happened. Depending on severity we may contact you, limit or pause a feature, suspend sending for a workspace, suspend or terminate an account, or preserve and disclose records where the law requires it. A first-time misconfiguration and a deliberate campaign are not the same thing and are not treated the same way.

We may act without prior notice where a delay would cause harm to a recipient, to a connected platform, or to the deliverability of every other customer’s account-critical mail. Where we do, we will tell you what happened and why as soon as we reasonably can.

Reporting Abuse

If you have received something from a Peraly account that breaks this policy, or you believe an account is being used to break it, email [email protected]. Include the message or a screenshot with its headers if you have them, the account or channel involved, and roughly when it happened — that is usually enough for us to identify the workspace responsible.

Suspected security vulnerabilities go to the same address. Please describe what you did, what happened and what you expected; a reproduction is worth more than a scanner’s output. Do not test against other people’s workspaces or data.

Changes to This Policy

We will update this policy as the product grows and as the platforms we connect to change their own rules. The date at the top shows when it last changed, and we will give notice in the product before a material change takes effect.

Contact

Questions about this policy, or about whether something you want to do is allowed, can go to [email protected]. Asking first is always cheaper than being suspended afterwards, and we would rather answer the question.