Jewellink Acceptable Use Policy

Effective date: 5/01/2026

This Acceptable Use Policy applies to all use of the Jewellink Services.

1. General Rule

Retailer may use the Services only for lawful retail jewelry business purposes and in accordance with the Master Terms, Messaging Terms, AI Features Addendum, applicable laws, carrier rules, platform policies, and third-party terms.

2. Prohibited Conduct

Retailer must not, and must not allow any Authorized User or third party to:

• violate any law, regulation, court order, privacy right, publicity right, consumer protection law, intellectual property right, or contractual obligation;

• use the Services for fraud, scams, phishing, pharming, spoofing, impersonation, deceptive offers, fake urgency, bait-and-switch promotions, or misleading claims;

• send unlawful, unwanted, or non-consensual communications;

• ignore or evade opt-outs, do-not-contact requests, quiet hours, carrier restrictions, platform rules, or consent revocations;

• upload, sync, or process data without sufficient rights, notices, consents, or legal basis;

• access, test, scan, probe, scrape, crawl, overload, disrupt, reverse engineer, or attack the Services or any third-party system;

• introduce malware, malicious code, credential harvesters, spyware, or harmful files;

• bypass security controls, rate limits, authentication, authorization, usage limits, or billing controls;

• share credentials, API tokens, or connected account access in an insecure manner;

• use the Services to harass, intimidate, threaten, discriminate, defame, or exploit any person;

• submit or generate sexually explicit, violent, hateful, exploitative, or unlawful content;

• collect or process data about minors without all required rights and consents;

• submit, upload, import, sync, store, request, transmit, or otherwise process social security numbers, full payment card numbers, CVV codes, bank account or routing numbers, consumer credit reports, credit scores, financing applications, loan applications, income information, protected health information, medical information, government identification numbers, driver's license numbers, passport numbers, biometric identifiers or biometric templates, account passwords, authentication credentials, children's data, or other highly sensitive or specially regulated information unless expressly authorized by Jewellink in writing;

• use the Services to make regulated credit, employment, housing, insurance, legal, medical, or similar high-impact decisions;

• resell, sublicense, rent, timeshare, or provide service bureau access to the Services without written permission;

• use the Services to build a competing product or benchmark the Services for competitive purposes;

• remove, obscure, or alter legal notices or proprietary rights notices; or

• use the Services in a way that harms Jewellink, other customers, consumers, carriers, platforms, vendors, or the reputation of the Services.

3. Messaging Rules

Retailer must not send or facilitate messages that:

• lack required consent;

• misrepresent sender identity;

• fail to identify the retailer where legally or commercially required;

• promote illegal goods or services;

• contain phishing links or misleading URLs;

• contain SHAFT content or other carrier-prohibited content where prohibited by carriers or messaging providers;

• evade carrier filters, snowshoe, rotate numbers to avoid detection, or manipulate sender identity;

• continue after a STOP, unsubscribe, do-not-contact, or equivalent request;

• use purchased, scraped, rented, or shared lists without lawful consent; or

• violate Twilio, The Campaign Registry, CTIA, carrier, Meta, Google, Microsoft, or other platform requirements.

4. AI Rules

Retailer must not use AI Features to:

• deceive consumers into believing generated content was created by a human where disclosure is required or context makes nondisclosure misleading;

• clone, simulate, or use a person's voice, image, likeness, or identity without authorization;

• generate misleading jewelry, pricing, financing, appraisal, warranty, scarcity, investment, or authentication claims;

• provide legal, financial, medical, tax, appraisal, insurance, credit, or other regulated professional advice without qualified human review;

• make automated decisions with legal or similarly significant effects;

• generate phishing, social engineering, malware, spam, or manipulation; or

• avoid required human review of customer communications.

5. Security and Access

Retailer must maintain reasonable security practices for Retailer Systems and Authorized Users, including appropriate passwords, device security, access reviews, prompt offboarding, and protection of connected accounts.

Retailer must promptly notify Jewellink of suspected misuse, unauthorized access, compromised credentials, suspicious messaging, or security events involving the Services.

6. Enforcement

Jewellink may investigate suspected violations and may remove content, block messages, suspend integrations, throttle usage, disable accounts, terminate Services, report abuse to service providers or authorities, or take other actions Jewellink reasonably believes are necessary to protect Jewellink, the Services, consumers, vendors, carriers, platforms, or other customers.

Jewellink may act without prior notice where immediate action is needed to prevent harm, legal exposure, security risk, carrier enforcement, platform enforcement, or service disruption.