Acceptable Use Policy
Effective Date: October 10, 2026
1. Purpose and Scope
This Acceptable Use Policy (“AUP”) describes what Customers and Users may not do when using Calladhere, which is operated by RingFuze Technologies LLC (“RingFuze,” “Calladhere,” “we,” or “us”). It applies to our web application, website, Chrome extension, API, MCP server, and all related services (the “Service”), and is part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.
Calladhere exists to help insurance agencies run lawful, ethical, compliant sales operations. Because the Service processes call recordings and protected health information about Medicare and ACA consumers, we hold Customers to a high standard. Customers are responsible for ensuring that their Users, contractors, and any person or system acting under their account follow this AUP.
The examples below are not exhaustive. If you are unsure whether a use is permitted, contact support@calladhere.com before proceeding.
2. Lawful Collection and Use of Data
You may not use the Service to:
Process unlawful recordings. Upload, sync, or analyze any call recording that was made without the notice and consent required by applicable law, including federal and state wiretapping and eavesdropping laws in all-party-consent states such as California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania, and Washington. See our Call Recording & Consent Notice.
Upload data without a legal basis. Submit personal information or protected health information that you do not have the right to collect, retain, or share with us, or that you obtained in violation of a carrier contract, privacy notice, or law.
Upload PHI without a BAA. Upload or sync protected health information before executing a Business Associate Agreement with us if you are a covered entity or business associate that requires one. See our HIPAA & Business Associate Agreement page.
Violate insurance marketing rules. Use the Service to support or conceal activity that violates the CMS Medicare Communications and Marketing Guidelines, third-party marketing organization (TPMO) requirements, ACA marketplace and agent rules, state insurance regulations, the Telephone Consumer Protection Act, or carrier requirements, including using scripts, forms, or disclosures in the Service to mislead consumers.
Break the law. Engage in or facilitate fraud, identity theft, unauthorized enrollments or plan changes, or any other illegal activity.
3. Fair Treatment of People
You may not use the Service to:
Harass or harm. Harass, threaten, intimidate, stalk, defame, or abuse any consumer, agent, or other person, or upload content that is obscene or promotes violence.
Discriminate. Make or support decisions about consumers, agents, or job applicants that unlawfully discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, health status, or any other protected characteristic.
Act on AI outputs without human review. Use AI-generated transcripts, audit results, scores, or violation flags as the sole basis for terminating, disciplining, withholding commissions from, or taking any other adverse employment or contracting action against an agent without meaningful review by a qualified person. AI outputs can be wrong; see our AI Transparency Statement.
Monitor people unlawfully. Use the Service to monitor individuals in ways that violate employment, labor, or privacy laws, or beyond what your notices and policies to agents allow.
4. Security and Technical Restrictions
You may not:
Reverse engineer. Decompile, disassemble, reverse engineer, or attempt to derive the source code, models, prompts, or underlying methods of the Service, except to the extent applicable law expressly permits despite this restriction.
Scrape or extract. Use bots, crawlers, scrapers, or other automated means to access or extract data from the Service other than through the documented API, or copy our default question sets, rules packs, templates, or Documentation to build a competing product.
Circumvent controls. Bypass or attempt to bypass authentication, access controls, tenant isolation, permission settings, usage limits, rate limits, billing controls, or any other security or technical measure, or access data belonging to another organization.
Introduce malicious code. Upload or transmit viruses, malware, ransomware, or other harmful code, or files designed to exploit vulnerabilities in the Service or in our providers’ systems.
Overload the Service. Conduct load testing, stress testing, or denial-of-service activity, or send traffic in volumes intended to degrade performance, without our prior written permission.
Interfere with others. Disrupt or interfere with the integrity or performance of the Service or other customers’ use of it.
5. Accounts, Credentials, and API Keys
You may not:
Share credentials. Share login credentials, allow multiple people to use a single User account, or let anyone access the Service using another person’s account. Every person who uses the Service must have their own User account with an appropriate role.
Share or expose API keys. Share API keys outside your organization, embed them in client-side code, public repositories, or shared documents, or use a key beyond the scopes and purposes for which it was issued. If a key may have been exposed, rotate or revoke it immediately and notify security@calladhere.com.
Misrepresent identity. Provide false account information, impersonate another person or organization, or create accounts to evade a suspension or usage limit.
6. AI Tools, MCP, and Third-Party Data Flows
The Calladhere API and MCP server let you connect Calladhere data to your own systems and to third-party AI assistants and applications. When you do, you control where that data goes. You may not:
Send PHI to unauthorized tools. Send transcripts, consumer records, or other protected health information from the Service, through the API, MCP server, exports, or copy and paste, to any third-party AI tool, chatbot, model provider, or application unless you have the appropriate agreements in place with that provider, including a Business Associate Agreement where HIPAA requires one, and your use is permitted by your own policies and carrier contracts.
Access PHI scopes improperly. Request or use API scopes that return PHI without signed API Terms and a countersigned Business Associate Agreement, or use the API to access more data than the minimum necessary for your purpose.
Misuse outputs. Use outputs of the Service to develop or train a competing compliance or call-auditing product.
7. Commercial Restrictions
You may not resell, sublicense, rent, lease, white-label, or provide the Service to third parties as a service bureau or managed offering, or bill other agencies for access to the Service, unless you have a signed partner or reseller agreement with us. Agencies and partners interested in reselling Calladhere may contact sales@calladhere.com.
8. Security Testing and Responsible Disclosure
We welcome reports from security researchers and customers who discover vulnerabilities in the Service. If you believe you have found a security issue, please email security@calladhere.com with a description of the issue, the steps to reproduce it, and any supporting information.
When researching vulnerabilities, please act in good faith: only test against accounts and data that you own or are authorized to use; do not access, modify, download, or retain other customers’ data or protected health information; stop testing and report immediately if you encounter such data; avoid degrading the Service (no denial-of-service, load testing, spam, or social engineering of our staff or customers); and give us a reasonable time to fix the issue before disclosing it publicly.
We will not pursue legal action against researchers who follow these guidelines in good faith. Penetration testing or automated scanning of the Service beyond this scope requires our prior written permission.
9. Enforcement
We may investigate any suspected violation of this AUP. If we determine, in our reasonable judgment, that a violation has occurred or that activity threatens the security, integrity, or legality of the Service, we may take actions that include warning the Customer, removing or disabling content, revoking API keys, suspending or terminating User access, suspending or terminating the Customer’s account, and reporting activity to law enforcement or appropriate authorities.
Where practicable and lawful, we will notify the Customer and give it an opportunity to cure before suspension, but we may act immediately when necessary to prevent harm, protect consumers’ information, or comply with law. Customers remain responsible for fees incurred before any suspension or termination, as described in the Terms of Service and Billing, Credits & Refund Policy.
10. Reporting Violations
If you become aware of a violation of this AUP, including misuse of the Service by another User or organization, please report it to legal@calladhere.com or support@calladhere.com. Report security vulnerabilities or suspected unauthorized access to security@calladhere.com.
Consumers with concerns about how an insurance agency recorded or used a call should contact that agency directly. You may also contact us, and we will refer the matter to the agency where we can identify it.
11. Changes to This Policy
We may update this AUP from time to time to address new features, risks, or legal requirements. We will post the updated version on this page and revise the effective date. Material changes will be communicated as described in our Terms of Service.
12. Contact Us
Questions about this Acceptable Use Policy may be sent to:
Legal and policy questions: legal@calladhere.com
Security reports: security@calladhere.com
General support: support@calladhere.com
RingFuze Technologies LLC (doing business as Calladhere)
3770 Shaw Ave, Suite 102-226
Clovis, CA 93619
United States