ORBIT — Acceptable Use Policy

Operator: Joshua Kaen Bentley ("ORBIT", "we", "us") Effective date: 27 June 2026 Governing law / jurisdiction: Australia Contact for reports and questions: hello@tekanology.com

1. Purpose and scope

1.1 ORBIT is an approval-first AI "campaign control plane" for cause and fundraising campaigns. The platform proposes; you, the user, decide, approve, and act. Specifically, our AI may discover communities, influencers and information sources, draft outreach messages and personal asks, and generate social/blog content and timing or competitor analysis. The AI never publishes, posts, sends, or contacts anyone on your behalf. Every AI output is a proposal that requires your human approval, and every act of publishing or sending is performed manually by you.

1.2 Because ORBIT hands you tools that draft messages to and about real people — including people who never signed up for ORBIT and never consented to be contacted — your conduct, not ours, determines whether the platform is used lawfully and ethically. This Acceptable Use Policy ("AUP") sets the rules for that conduct.

1.3 This AUP applies to everyone who accesses or uses ORBIT, to all campaigns and content you create, and to all outreach, personal asks, and publishing you perform using or derived from the platform. It supplements, and is incorporated into, our Terms of Service and should be read together with our Privacy Policy. Capitalized terms not defined here have the meaning given in the Terms of Service.

1.4 Violating this AUP may lead to the consequences described in Section 10, up to and including suspension or termination.

2. Your core responsibilities

By using ORBIT, you agree that:

2.1 You are the publisher and sender. You are solely responsible for every message you send, every post you publish, every community you contact, and every person you reach out to — whether or not the underlying text was drafted by ORBIT's AI. AI assistance does not transfer responsibility to us.

2.2 You are an independent controller of the data you bring and generate. You — not ORBIT — decide whose names, handles, and contact details are entered, researched, profiled, and messaged. Where data-protection law applies (see Sections 5 and 6), you act as the controller of that activity and must have a lawful basis for it.

2.3 You will honor the platform's built-in approval and consent gates rather than treating them as paperwork (see Section 7).

2.4 You will comply with all applicable laws in every jurisdiction relevant to your campaign and your audience, including fundraising/charitable-solicitation law, consumer-protection law, anti-spam and electronic-privacy law, securities law (where a campaign involves investment or securities), and data-protection law.

3. Prohibited content and causes

You may not create, host, generate, promote, or fundraise for any campaign that:

3.1 Is illegal or unlawful in any jurisdiction where the campaign is run, where you are located, or where your audience is located — including any campaign whose purpose, goal, or use of funds is unlawful.

3.2 Is fraudulent, deceptive, or misleading. This includes:

fabricated, exaggerated, or materially misleading fundraising goals, stories, beneficiaries, or use-of-funds claims;
impersonating a person, charity, organization, or public figure, or falsely claiming endorsement, affiliation, tax-deductible status, or official charity registration you do not hold;
"raised" or "target" amounts, donation events, or outcomes that are invented or knowingly inaccurate;
diverting donated funds to a purpose materially different from the one represented to donors.

3.3 Promotes hatred, harassment, or violence, including content that attacks, demeans, dehumanizes, or incites violence or discrimination against people or groups on the basis of race, ethnicity, national origin, religion, caste, sex, gender, gender identity, sexual orientation, disability, age, or serious disease.

3.4 Exploits, sexualizes, or endangers minors, or facilitates human trafficking or exploitation.

3.5 Facilitates terrorism, violent extremism, or sanctioned activity, or benefits any individual or entity subject to applicable sanctions or export controls.

3.6 Misrepresents a regulated campaign type. ORBIT classifies campaigns by fundraising_type (for example: charity, personal, medical, political, disaster relief, securities). You must classify your campaign honestly and may not mislabel a campaign to evade compliance gating. Note that certain campaign types carry heightened legal duties:

Securities / investment campaigns may trigger securities-registration and disclosure law — do not solicit investment, equity, lending, or returns through ORBIT unless you are lawfully permitted to do so.
Political campaigns may trigger election, campaign-finance, and political-advertising rules.
Medical and disaster-relief campaigns must not make false health claims or exploit a tragedy or emergency you are not genuinely connected to.

3.7 Concerns special-category / sensitive matters without proper care. Medical, political, and disaster-relief stories, and any narrative you upload, may contain sensitive personal information (for example, health or political data — "special category data" under GDPR/UK GDPR). Do not include sensitive personal information about other identifiable people in campaign content, briefs, or uploads unless you have a lawful basis and, where required, their explicit consent. You are responsible for what your story, brief, and uploaded source material contain.

3.8 Infringes intellectual-property or publicity rights, including uploading images, PDFs, logos, or text you do not have the right to use.

4. Prohibited conduct — spam and unsolicited mass contact (read this carefully)

ORBIT's discovery and outreach features generate draft messages addressed to specific, named individuals and communities, plus "personal asks" addressed to your friends, family, and peers. These features are a sharp tool. The following rules are mandatory whenever you use outreach, personal-ask, or community-targeting features.

4.1 No spam. You may not use ORBIT to send, or to draft for sending, unsolicited bulk or mass messages, chain messages, or repetitive unwanted contact, by any channel (email, direct message, social, messaging apps, or otherwise).

4.2 Comply with anti-spam and electronic-privacy law. Any message you send after using ORBIT's drafts must comply with all laws applicable to you and your recipients, including, as relevant:

CAN-SPAM Act (US) — accurate "From"/subject lines, identification of the message as a solicitation where required, a valid physical postal address, and a working, honored opt-out/unsubscribe mechanism;
CASL (Canada) — generally requires consent (express or implied) before sending commercial electronic messages, plus sender identification and an unsubscribe mechanism;
GDPR / UK GDPR and the ePrivacy Directive / PECR (EU/UK) — a lawful basis for contacting individuals and, for electronic marketing, generally prior consent or a narrowly-applicable "soft opt-in";
any equivalent anti-spam, telemarketing, or electronic-marketing rules in your recipients' jurisdictions.

4.3 Consent and opt-outs are yours to obtain and honor. ORBIT does not obtain consent from recipients for you, and does not send on your behalf. Before you send, you must have the lawful basis or consent the law requires for that recipient and channel. You must honor every opt-out, unsubscribe, "stop", or do-not-contact request promptly and permanently, and must not contact anyone on ORBIT's outreach suppression list or who has asked you to stop. Suppression and opt-out are only effective if you act on them — the platform cannot enforce this for you.

4.4 No buying, scraping, or harvesting of contact lists, and no importing of contacts you have no lawful basis to message.

4.5 Personal asks must stay personal. "Personal ask" drafts are intended for genuine peer-to-peer messages to people with whom you have a real relationship. Do not repurpose them as a mass-contact or cold-outreach channel to evade Section 4.1–4.3.

5. Respect for communities, platforms, and their rules

ORBIT surfaces communities (for example Facebook Groups, subreddits, forums) and influencers as candidates. Surfacing a community is not permission to contact or post in it.

5.1 Follow each platform's terms and each community's rules. You must comply with the terms of service, API terms, and developer policies of every platform you connect or publish to (including Facebook/Instagram, Pinterest, and any WordPress site), and with the posted rules, norms, and moderation policies of every community, group, subreddit, or forum you engage.

5.2 No community spam or brigading. Do not post promotional or fundraising content into communities that prohibit it, do not post the same or substantially similar content across many communities ("brigading"/cross-posting spam), and do not evade bans, rate limits, or moderator decisions.

5.3 Self-promotion and disclosure. Where a community requires disclosure of self-promotion, affiliation, or commercial intent, you must provide it. Where a community requires moderator permission to post solicitations, obtain it before posting.

5.4 Connected accounts. You may connect only accounts, Pages, profiles, and WordPress sites that you own or are authorized to manage, and you may publish only content you are authorized to publish there. You are responsible for keeping your connected-platform credentials accurate and for the consequences of anything published through them.

6. No misuse of third-party (non-user) data

ORBIT's research features can store and AI-process information about people who are not ORBIT users and have not consented — names, handles, audience reach, role descriptions, fit/congruence/risk scores, and AI-drafted messages addressed to them. This is the platform's most significant privacy exposure, and you share responsibility for handling it lawfully.

6.1 No unlawful scraping or collection. Do not feed ORBIT, or use it to assemble, third-party personal data that you obtained unlawfully or in breach of a platform's terms.

6.2 Lawful basis and notice. Where data-protection law applies, you must have a lawful basis for profiling and contacting the non-users in your campaign (under GDPR/UK GDPR this typically requires a legitimate-interest assessment and the transparency/notice obligations of Articles 13–14, including notice to people you did not collect data directly from). Profiling or scoring named individuals without a lawful basis is prohibited.

6.3 Respect data-subject rights. If a person asks to access, correct, or delete data you hold about them, or objects to being profiled or contacted, you must act on that request and stop. Do not re-add, re-discover, or re-target someone who has objected or opted out.

6.4 No surveillance, stalking, or doxxing. Do not use discovery, profiling, or outreach features to harass, stalk, intimidate, surveil, or expose ("dox") any individual, or to build dossiers on people for those purposes.

6.5 No misuse of the AI drafts. The fact that the AI drafted a message to a named person does not mean it is lawful or appropriate to send it. You remain responsible for deciding whether contacting that person is permitted, wanted, and lawful before you send anything.

7. Use the platform's consent and approval gates in good faith

ORBIT is designed to be consent-aware. You must use these controls honestly rather than treating them as rubber stamps:

7.1 Approval before action. AI outputs default to requiring human approval (requires_human_approval). Do not build workarounds, automation, or scripts that bypass human review and cause content to be published or sent without a genuine human decision.

7.2 Truthful approval and consent attestations. When you record an approval basis for targeting a community (for example: ownership, moderator permission, documented relationship, or public/topical relevance) or a per-recipient consent basis for marking outreach as sent, that statement must be true. These fields are your self-attestation. Falsifying them — claiming permission, consent, or a relationship you do not have — is a serious violation of this AUP and may also be unlawful.

7.3 Default-deny is intentional. Discovered communities and contacts start as candidates and are not auto-targeted. Do not treat promotion out of "candidate" status as a formality; only target a community or contact when you genuinely have the basis you attest to.

7.4 Suppression is binding. Once a recipient is suppressed or has opted out, do not send to them, regardless of any draft the AI may still produce.

8. Honesty about your cause

8.1 Tell the truth. Your campaign goal, story, beneficiary, target and raised amounts, deadline, and use of funds must be accurate and not misleading at the time you publish them, and you must update or correct material information that changes.

8.2 Don't fake outcomes. Donation events and outcome figures you enter must reflect reality. Do not manufacture social proof or inflate results.

8.3 Be transparent about AI assistance where the platform you publish to, the community you post in, or applicable law requires you to disclose that content was AI-assisted or that a message is a solicitation.

8.4 No misrepresentation of ORBIT. Do not state or imply that ORBIT, its operator, or any connected platform endorses, has vetted, or is responsible for your campaign.

9. General technical and security prohibitions

You may not:

9.1 Access, test, scan, or use the platform without authorization, or attempt to access another user's account, campaign, or data;

9.2 Probe, scan, circumvent, or defeat authentication, payment/paywall, rate-limiting, or other security or entitlement controls (including the per-campaign activation paywall);

9.3 Interfere with or disrupt the service or its infrastructure (Postgres, Redis, the API, or connected platforms), including via excessive automated requests, denial-of-service, or abuse of the AI generation endpoints;

9.4 Upload or transmit malware, or use the platform to store or distribute malicious or unlawful files via the asset-upload feature;

9.5 Use the platform to violate the rights of any third party, including intellectual-property, privacy, and publicity rights;

9.6 Reverse engineer, resell, or provide the service to third parties except as expressly permitted in the Terms of Service.

10. Enforcement and consequences

10.1 Our discretion. We may investigate suspected violations and take any action we consider appropriate, with or without notice, including: issuing a warning; removing, disabling, or restricting access to content or campaigns; throttling or disabling AI generation, outreach, or publishing features; suspending or terminating your account; revoking sessions and connected-platform tokens; and refusing future service.

10.2 Urgent action. Where a violation is serious, unlawful, or poses a risk to others (for example, fraud, harassment, exploitation of minors, or unlawful mass-contact), we may act immediately and without prior notice.

10.3 No obligation to monitor; no waiver. We are not obligated to monitor content or outreach, and the fact that the AI can generate something does not mean it is permitted. Our failure to enforce any provision is not a waiver of our right to do so later.

10.4 Cooperation with authorities. We may report suspected unlawful activity to law-enforcement or regulatory authorities and may preserve and disclose information (including account data and the immutable audit log of actor IDs, IP addresses, and user agents) as permitted or required by applicable law and our Privacy Policy.

10.5 Your liability. You remain responsible for your use of the platform and for any claims, losses, fines, or penalties arising from your violation of this AUP, as further described in the Terms of Service. Refunds (if any) for campaigns affected by enforcement are governed by the Terms of Service.

11. Reporting abuse

11.1 If you believe a campaign, message, or user violates this AUP — or if you are a non-user who has been contacted, profiled, or included in a campaign and want to object, opt out, or have your data removed — please contact us at hello@tekanology.com.

11.2 Please include enough detail to let us locate the content (for example, the campaign, message, URL, handle, or name involved) and describe the issue. We will review reports and take action where appropriate. Where your request concerns your personal data, see our Privacy Policy for how data-subject and consumer-privacy rights (including under GDPR/UK GDPR and CCPA/CPRA) are handled.

11.3 We aim to acknowledge reports within 5 business days and to respond substantively as the matter requires.

12. Changes to this policy

12.1 We may update this AUP from time to time. Material changes will be posted at https://tekanology.com/legal and take effect on the stated effective date. Your continued use of ORBIT after a change takes effect constitutes acceptance of the updated policy.

This Acceptable Use Policy works together with the ORBIT Terms of Service and Privacy Policy. Where this AUP and the Terms of Service conflict, the Terms of Service controls.