Acceptable Use Policy
What you can and cannot do on popkorn
Last updated: 16 May 2026
Last Updated: 16 May 2026
This Acceptable Use Policy ("AUP") sets out what you and the people you authorise may not do with popkorn, the conversational AI platform operated by YV Labs LLP ("popkorn," "we," "us"). The rules below exist for one reason: popkorn is a powerful communications platform that reaches real people on real phones, inboxes, and chat apps. When it is misused, real people get hurt — and the platform, our other customers, and our regulatory standing get hurt along with them. We do not consent to that. Accounts that violate this policy will be suspended or terminated, with no refund.
This policy is part of, and incorporated by reference into, the Terms of Service. Defined terms used here have the meaning given in the Terms. If you encounter abuse of popkorn — by us, by another customer, or by anyone else — please report it to abuse@popkorn.tech.
1. Who this policy applies to
This AUP applies to every customer of popkorn ("Client") and to every individual the Client authorises to access the platform — employees, contractors, agency partners, integration developers, and anyone using the platform on the Client's behalf. The Client is responsible for ensuring everyone in their organisation reads, understands, and follows this AUP. A violation by anyone using the Client's account is a violation by the Client.
2. No contact with persons under 18
You must not use popkorn to call, message, email, or otherwise communicate with any person you know or reasonably ought to know is under the age of 18. This is a hard rule, not a guideline. India's Digital Personal Data Protection Act 2023 imposes specific obligations around processing the personal data of minors that popkorn is not equipped to satisfy at the level of an automated agent. If your business model includes communicating with minors — for example, education, kids' content, paediatric healthcare — you may not use popkorn for that purpose, even with parental consent.
You must implement an age gate at the point you collect contact details from end customers, and you must exclude under-18 contacts from any list, campaign, or workflow that you upload to popkorn. If we have reasonable grounds to believe you are contacting minors through popkorn, we will suspend your account immediately and without notice.
3. Call recording — disclosure is on you
popkorn records calls by default so that you can review, audit, train against, and dispute conversations your AI agent had with end customers. The legal duty to disclose that recording, in a manner that satisfies the law of the jurisdiction the end customer is in, rests entirely with you.
You must ensure that your AI agent announces — at the start of every recorded call, in language the end customer can reasonably be expected to understand — that the call is being recorded. The platform provides default disclosure prompts; if you customise or remove them, you accept full responsibility for the resulting legal exposure. Where the law of a jurisdiction you call into requires explicit consent (rather than disclosure alone), you must obtain that consent, retain proof of it, and provide it to us within forty-eight hours on written request.
4. No spam, no unsolicited commercial communication
You may only use popkorn to communicate with end customers who have given you a clear, freely-given, specific, informed consent to be contacted — for the purpose, the channel, and the frequency you propose to use. You may not use popkorn to send unsolicited commercial communication of any kind.
Specifically, you must not:
- upload purchased, scraped, or rented contact lists;
- contact end customers who have opted out, withdrawn consent, or registered on a national do-not-call / do-not-disturb register applicable to their number;
- continue contacting an end customer after they have asked you, your agent, or popkorn to stop;
- fail to honour an opt-out request within twenty-four hours of receipt;
- circumvent end-customer block lists by rotating numbers, sender IDs, or domains.
Clients must maintain and honour opt-out lists for each channel they use. popkorn provides per-organization opt-out tooling and may suspend Clients who fail to respect end-customer opt-out requests.
5. No fraud, scams, phishing, or impersonation
You must not use popkorn to defraud, deceive, or impersonate any person or organisation. This includes, without limitation: phishing for credentials, payment details, OTPs or one-time passwords; pretending to be a bank, regulator, government agency, courier company, or other Client; running advance-fee schemes, lottery scams, fake job offers, or investment scams; misrepresenting the identity, affiliation, or authority of the Client or its agents; or producing or distributing content that you know or ought to know is false in a way that will cause financial or reputational harm to the recipient.
Cooperation with bank-, payment-, or telecom-led fraud investigations is part of using popkorn — we will preserve and disclose conversation logs and account metadata in response to lawful requests from those investigations.
6. No harassment, threats, or harmful content
You must not use popkorn to send, generate, or solicit content that:
- threatens, intimidates, stalks, or harasses any person;
- promotes or incites hatred or violence against any group on the basis of religion, caste, gender, sexual orientation, race, ethnicity, nationality, disability, or any other protected characteristic;
- sexualises any person without their consent, or sexualises any minor under any circumstances;
- glorifies self-harm or suicide;
- constitutes obscenity within the meaning of applicable Indian law.
7. No regulated advice from a non-licensed agent
If your AI agent gives advice that, by law, can only be given by a licensed professional, the licensed professional must be the one giving it. You must not configure your agent to provide medical diagnoses or prescriptions, legal advice on a specific matter, advice on the buying or selling of regulated securities, or any other advice that requires a licence under Indian law, unless a duly licensed professional is reviewing and authorising what the agent says.
Where your agent operates in a regulated domain, you must clearly disclose to the end customer that they are speaking to an AI assistant and that it is not a substitute for professional advice.
8. No election or political weaponisation
You may not use popkorn to make outbound calls or send messages relating to elections, political campaigns, political parties, or referenda without a clear, specific, lawful basis under the law of the jurisdiction in which the election is being held, and without registering with the relevant election commission where such registration is required. You may not use popkorn to spread disinformation about candidates, parties, polling, or electoral processes. We may, at our discretion, restrict or suspend election-related use cases entirely during sensitive periods.
9. AI transparency — don't pretend to be human
If an end customer sincerely asks your agent "am I speaking to a human?" — or asks any clearly equivalent question — your agent must answer truthfully. You may give your agent a name, a personality, and a warm conversational tone; you may not configure it to deny being an AI when sincerely asked. Misrepresenting the nature of the speaker breaks the trust the entire industry depends on, and depending on the jurisdiction may also be unlawful.
10. Respect IP, defamation law, and content rules
You must not use popkorn to infringe the intellectual property rights of any third party — including by uploading copyrighted material into a knowledge base without authorisation, by training the agent to reproduce another company's content verbatim, or by using protected marks in a way that suggests false affiliation. You must not use popkorn to publish defamatory content, to violate any person's right of publicity, or to produce or distribute content that is illegal under the law of India or the jurisdiction in which it will be received.
11. Platform integrity
You must not:
- probe, scan, or test the vulnerability of the platform or any system or network connected to it, except under a written security testing agreement with us (write to security@popkorn.tech to request one);
- attempt to defeat, bypass, or circumvent any rate limit, billing meter, plan limit, feature gate, or access control;
- scrape the platform's user interface, APIs, or documentation outside of the documented APIs you have been granted access to;
- access or attempt to access any data, account, or organisation other than your own;
- share access credentials between people or with third parties, except via the platform's documented invitation and role mechanisms;
- introduce malicious code, virus, worm, ransomware, or any payload designed to disrupt, damage, or gain unauthorised access to a system;
- use the platform to mine, generate, or distribute cryptocurrency, run distributed-denial-of-service attacks, or perform any other activity that places disproportionate load on shared infrastructure.
12. No reselling, no white-labelling without a partner agreement
The popkorn platform is licensed to you, not to anyone you decide to onboard. You may not resell access to popkorn, embed popkorn in a product you sell to your own customers, or white-label the platform under your own brand, unless you have entered into a written partner or reseller agreement with us. If you want to build on popkorn for your customers, write to hello@popkorn.tech and we will tell you whether the use case fits our partner programme.
13. No competing-model training on popkorn outputs
You may not use any conversation, transcript, audio, prompt, response, embedding, or other artefact generated by or through popkorn for the purpose of training, fine-tuning, evaluating, or benchmarking a competing artificial-intelligence model or service. You may use those artefacts freely for your own internal operations — quality assurance, customer service training, dispute resolution, analytics, and reporting.
14. Reporting abuse
If you believe someone is using popkorn in a way that violates this AUP, please write to abuse@popkorn.tech. Include, where you can:
- the date and time of the contact, in IST or with the relevant timezone noted;
- the phone number, email address, WhatsApp number, or chat handle from which the contact was made;
- the channel and a brief description of what happened;
- any recording, screenshot, or message you have that captures the contact;
- how we can reach you for follow-up.
We acknowledge serious abuse reports — those involving ongoing consumer harm, suspected fraud, threats, or contact with minors — within twenty-four hours. We investigate and respond on all reports within fifteen days. Reports that touch on personal data are also handled under our grievance redressal process described in the Privacy Policy.
15. How we enforce this policy
When we identify a violation, we typically follow this sequence: written warning, with a deadline to remediate; suspension of the affected feature, campaign, or channel; suspension of the entire account; termination of the agreement.
For serious violations — contact with minors, fraud, threats of violence, content harmful to children, election interference, or anything we reasonably believe is causing immediate harm to identifiable people — we will skip directly to suspension or termination, with no warning and no refund.
We cooperate with law enforcement, regulators, and platform partners in good faith. That includes preserving evidence in response to a lawful preservation request, disclosing account information and conversation logs when compelled by a lawful order under the Information Technology Act 2000 or applicable criminal procedure, and notifying telecommunications carriers, Meta (for WhatsApp), Apple, Google, and other downstream platforms about confirmed abuse on our network. Where a carrier or platform takes enforcement action against your account independently of us — for example, blocking your sender ID — we may not be able to reverse it.
16. Indemnification
You agree to defend, indemnify, and hold harmless YV Labs LLP and its officers, directors, employees, and authorised representatives against any claim, loss, fine, penalty, or expense (including reasonable legal fees) arising from your violation of this AUP, from the content you generate or transmit through popkorn, or from your end customers' claims against you in relation to communications you sent them. This is in addition to and not in derogation of the indemnities in the Terms of Service.
17. Changes to this policy
We may change this AUP from time to time. When we do, we will update the "Last Updated" date at the top, and for material changes — for example, adding a new category of prohibited use — we will notify you in your account dashboard at least thirty days before the change takes effect. Your continued use of popkorn after a change takes effect is your acceptance of the revised AUP.
18. Grievance Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:
Grievance Officer: Ashok Kumar
Email: grievance@popkorn.tech
Address: YV Labs LLP, Mumbai, India
We acknowledge complaints within twenty-four hours of receipt and respond within fifteen days, in accordance with IT Rules 2021. For grievances under the Digital Personal Data Protection Act 2023, a full response will be provided within ninety days under the DPDP Rules 2025; thereafter you may approach the Data Protection Board of India.
19. Contact
For matters arising under this policy:
- Report abuse: abuse@popkorn.tech
- Legal disputes and notices: legal@popkorn.tech
- Product support: support@popkorn.tech
- Security disclosure: security@popkorn.tech
- Grievance redressal: grievance@popkorn.tech
Postal: YV Labs LLP, 901 Satguru Towers, North Avenue, Santacruz West, Mumbai 400054, India.
questions? email hello@popkorn.tech.