Acceptable Use Policy
Current as of June 30, 2026 · v1.0 — June 2026
This Acceptable Use Policy (AUP) governs how you may use CORE infrastructure, hosting, email services, domains, applications, and platform features. Violations may result in immediate suspension or termination without refund.
Overview
This AUP applies to all services provided by CoreTV LLC (CORE) including managed hosting, compute infrastructure, database services, email services, domain management, the client portal, and any application deployed on CORE infrastructure. By using any CORE service, you agree to comply with this AUP.
CORE reserves the right to amend this AUP at any time with notice. Serious violations may result in immediate service suspension without notice.
Prohibited Content
You may not use CORE services to host, store, transmit, or distribute any content that: (a) is unlawful under applicable federal, state, or local law; (b) infringes any third-party intellectual property rights; (c) constitutes child sexual abuse material (CSAM) or any content that exploits or harms minors; (d) constitutes defamation, fraud, or deceptive trade practices; (e) promotes or facilitates illegal drug sales, weapons trafficking, or human trafficking; (f) violates export control laws or economic sanctions.
CORE operates a zero-tolerance policy toward content that exploits or endangers children. Any such content discovered will be immediately removed, the account permanently terminated, and the matter reported to the National Center for Missing and Exploited Children (NCMEC) and appropriate law enforcement.
Prohibited Activities
You may not use CORE services to: run or facilitate denial-of-service (DoS/DDoS) attacks against any network or system; attempt unauthorized access to any computer system, network, or data; distribute malware, ransomware, spyware, adware, or other malicious code; conduct phishing, social engineering, or credential-harvesting operations; mine cryptocurrency without CORE's explicit written authorization; operate a proxy, VPN, or relay service for the purpose of obscuring abusive activity; scrape content from third-party websites without authorization; or engage in any activity that violates applicable computer fraud and abuse laws.
You may not use CORE domain registration, transfer, DNS, or broker services for cybersquatting, typosquatting, trademark infringement, impersonation, phishing, malware distribution, unlawful resale schemes, bad-faith acquisition attempts, harassment of domain owners, or any activity prohibited by OpenProvider, ICANN, registry, registrar, escrow, or marketplace policies.
Infrastructure & Network Abuse
You may not use CORE-hosted resources in ways that abuse or degrade shared infrastructure. Prohibited network behaviors include: generating excessive traffic that consumes disproportionate bandwidth or compute resources; port scanning or network reconnaissance not authorized by the network owner; IP spoofing; intentionally causing packet floods; or any activity that disrupts CORE services for other customers.
CORE reserves the right to rate-limit, throttle, or suspend services if usage patterns indicate abuse or resource exhaustion. Resource overuse that impacts other customers may result in charges for excess usage or mandatory upgrade to a higher capacity plan.
Email & Messaging Restrictions
Email services provided by CORE (hosted mailboxes, transactional email, domain-based routing) must not be used to send unsolicited bulk email (spam) as defined by the CAN-SPAM Act or applicable law. All commercial email must include an unsubscribe mechanism, a physical mailing address, and accurate sender identification.
You may not use CORE email infrastructure to send email to harvested or purchased address lists, to conduct phishing campaigns, to impersonate other individuals or businesses, or to send messages that violate any recipient's opt-out request. Excessive bounce rates, spam complaints, or blacklistings caused by your email activity may result in immediate email service suspension.
Security Requirements
You are responsible for maintaining the security of all applications deployed on CORE infrastructure. This includes keeping software dependencies updated, using strong credentials, enabling two-factor authentication where available, and following secure development practices.
If you discover a security vulnerability in CORE systems or infrastructure, you must disclose it responsibly to legal@coretv.agency before public disclosure. CORE will acknowledge receipt within 48 hours and work toward a resolution. Responsible disclosure will not be treated as a violation of this AUP.
GitHub Usage & Source Control Policy
CORE uses GitHub (github.com), owned by GitHub, Inc. (a Microsoft subsidiary), as the primary platform for source code version control, CI/CD automation, issue tracking, and project collaboration. All CORE-built project repositories are hosted in private GitHub repositories under CORE's organization account, subject to GitHub's Terms of Service (github.com/site/terms) and GitHub's Acceptable Use Policies (docs.github.com/en/site-policy/acceptable-use-policies).
You agree that any project code, repositories, issues, pull requests, or other content associated with your CORE project and hosted on GitHub must comply with GitHub's Acceptable Use Policies, including but not limited to GitHub's restrictions on: illegal and unauthorized access; spam and inauthentic activity; information hazards; hate speech and discrimination; sexual obscene content; doxxing; harassment; and export controls.
CORE may invite Clients or their designated technical contacts to collaborate in GitHub repositories for the purpose of reviewing code, submitting content, or participating in project management. Client collaborators must have or create a free GitHub account (subject to GitHub's own Terms of Service and Privacy Statement) and must comply with both GitHub's policies and this AUP while accessing any CORE-managed repository.
Prohibited repository activities: You may not use CORE-managed or Client-accessible GitHub repositories to: store, commit, or distribute malware, exploits, or harmful code; circumvent license restrictions on any included third-party dependency; introduce deliberate security vulnerabilities; commit credentials, secrets, or API keys that could expose CORE or third-party infrastructure; or distribute copyrighted content without authorization. Violations may result in immediate repository access revocation and account termination.
CI/CD automation: CORE's development workflows may use GitHub Actions for automated testing, building, and deployment. GitHub Actions usage is subject to GitHub's billing terms and usage limits. Excessive or abusive automation that violates GitHub's usage policies is prohibited and may disrupt project delivery.
Handoff and repository transfer: Upon project completion and full payment, Clients may request transfer of their project repository to their own GitHub organization. CORE will initiate the transfer within ten (10) business days of a written transfer request and full payment confirmation. Repository transfer is subject to GitHub's account and organization transfer policies. After transfer, the Client is solely responsible for repository management and GitHub compliance.
AI Manipulation, Prompt Injection & Jailbreaking
CORE deploys artificial intelligence systems including AI agents, chatbots, voice agents, and other automated assistants as part of its services. You may not attempt to jailbreak, prompt-inject, or otherwise manipulate any CORE AI system in order to bypass, disable, or circumvent its safety filters, content moderation, usage restrictions, or guardrails, or to cause it to behave in a manner inconsistent with its intended purpose.
You may not attempt to access, reveal, reproduce, or reverse-engineer the underlying system prompts, instructions, configuration, or proprietary logic governing any CORE AI system, nor may you attempt to extract proprietary instructions, training data, model weights, or other confidential materials. Any technique designed to coerce an AI system into disclosing such materials, including adversarial inputs, role-play exploits, encoding tricks, or indirect injection through uploaded content, is prohibited.
You may not use any CORE AI system in an attempt to expose, exfiltrate, or harvest API keys, secrets, tokens, credentials, internal endpoints, customer data, or any other sensitive information belonging to CORE, its clients, or third parties. Probing an AI system for security weaknesses outside of CORE's responsible disclosure process described in this AUP is prohibited.
CORE may log, monitor, rate-limit, suspend, or permanently terminate access for any party that engages in AI manipulation or abuse. Such activity may also constitute a violation of applicable computer fraud, trade secret, or anti-circumvention laws, and CORE reserves the right to pursue all available legal remedies.
Regulated & Professional Advice
You may not use CORE systems, infrastructure, or AI services to provide, generate, or distribute regulated professional advice — including medical, legal, financial, investment, tax, accounting, insurance, or similar regulated guidance — unless you hold all licenses, registrations, and credentials required under applicable federal, state, and local law to provide such advice in each jurisdiction in which it is offered.
Where you are permitted to offer regulated advice, you must provide all legally required disclaimers, disclosures, consents, and notices, and must clearly identify the limitations of any automated or AI-generated output. CORE AI systems and infrastructure are tools and do not constitute a licensed professional; output must not be presented to end users as a substitute for advice from a qualified, licensed professional.
You are solely responsible for any regulated, professional, or licensed use of CORE systems and for ensuring such use complies with all applicable laws, regulations, and professional standards. CoreTV LLC (CORE) makes no representation that its services are suitable for any regulated use and disclaims all liability arising from your provision of regulated advice. Questions regarding compliant use may be directed to legal@coretv.agency.
Consequences of Violation
Minor violations (first-time, low-impact): written warning with a remedy period. Moderate violations: service suspension pending investigation and remediation. Serious violations (illegal content, network abuse, malware): immediate permanent termination without refund. Criminal violations: CORE will cooperate with law enforcement investigations.
CORE reserves the right to determine the severity of a violation in its sole discretion. Terminated accounts are not eligible for refunds for any prepaid unused service period. CORE may also seek damages for costs incurred as a result of AUP violations (e.g., IP reputation restoration, infrastructure remediation).
Reporting Violations
If you become aware of a violation of this AUP on CORE infrastructure — including illegal content, abuse, or network attacks originating from CORE-hosted systems — report it immediately to legal@coretv.agency with as much detail as possible including timestamps, IP addresses, and evidence. Reports are reviewed within one (1) business day.
Updates to This Policy
This AUP may be updated as CORE's services evolve or in response to emerging threats and legal requirements. Material updates will be communicated via email with at least fifteen (15) days' notice for non-urgent changes. Urgent security-related changes may take effect immediately.
Telephony, Voice & SMS — Acceptable Use
You may not use CORE telephony, voice, AI-voice, or messaging features to make or send any unlawful, deceptive, harassing, or non-consented call, text, or voice communication. You must comply with the Telephone Consumer Protection Act (TCPA), the Telemarketing Sales Rule, the FCC and FTC rules thereunder, and all applicable state telemarketing, automated-calling, recording, and messaging laws. You must: obtain and retain the legally required consent before contacting any person; scrub against and honor the National Do-Not-Call Registry, applicable state do-not-call lists, and your own internal do-not-call and opt-out lists; honor STOP and other opt-out requests immediately and support HELP; respect calling-time / quiet-hour restrictions (generally no earlier than 8:00 a.m. and no later than 9:00 p.m. in the recipient's local time, and stricter where state law requires); and present accurate caller-identification information (no spoofing or misleading caller ID in violation of the Truth in Caller ID Act).
For application-to-person (A2P) messaging you must register your brand and campaign (including 10DLC where applicable), use messaging only for the registered and approved use case, and comply with the CTIA Messaging Principles and Best Practices, each carrier's code of conduct, and the Twilio Acceptable Use Policy and Messaging Policy, which are incorporated by reference. You may not send SHAFT (sex, hate, alcohol, firearms, tobacco) or other carrier-prohibited content except as expressly permitted by all applicable rules and law; you may not engage in snowshoeing, number cycling, URL cloaking, grey-route, or other filtering-evasion techniques; and you must disclose the sender, program, and message frequency and include “Message and data rates may apply” where required. Where you deploy an AI or automated voice or chat agent, you must provide any legally required disclosure that the recipient is interacting with an automated system. CORE may rate-limit, suspend, de-register, or terminate telephony or messaging access for any violation, and may report unlawful activity to carriers, providers, and authorities.
Email Sending — Acceptable Use & Anti-Spam
You may not use CORE email features (including features powered by Twilio SendGrid and Amazon SES) to send unsolicited bulk email (spam), phishing, malware, or deceptive messages. You must comply with the CAN-SPAM Act, Canada's Anti-Spam Legislation (CASL), and other applicable email and privacy laws, and with the Twilio SendGrid and Amazon Web Services acceptable-use and anti-spam policies, which are incorporated by reference. You must: send only to recipients from whom you have the required permission or a lawful basis; never use purchased, rented, scraped, or harvested address lists; use accurate header, “from,” and subject information; include a valid physical postal address and a clear, working unsubscribe link; and promptly honor all unsubscribe and suppression requests.
You are responsible for maintaining healthy sending practices, including keeping spam-complaint and bounce rates below the thresholds set by CORE and its providers, authenticating your sending domains, and protecting the reputation of any shared or dedicated sending IPs and domains. CORE may throttle, suspend, or terminate your email sending, remove you from shared infrastructure, or take other protective action if your sending generates excessive complaints or bounces, triggers blocklisting, or violates this AUP or a provider policy. CORE does not guarantee delivery, inbox placement, or non-classification as spam.
Download this document
Save a PDF copy for your records.
Questions about this document? Email legal@core.example — a human reads it.