Acceptable Use Policy

This Acceptable Use Policy ("AUP") is part of the Terms of Service. It exists because Starlight sends messages, reads public data, and takes actions on your behalf, and those activities are regulated in most of the places your prospects live. Terms that are capitalized but not defined here have the meaning given in the Terms.

1. Outbound Messaging

Laws that apply

You are responsible for complying with every electronic-communications and privacy law that applies to each recipient, including the US CAN-SPAM Act, Canada's Anti-Spam Legislation (CASL), the EU GDPR and ePrivacy Directive, the UK GDPR and PECR, Australia's Spam Act, and equivalent laws elsewhere. Some of these laws require prior consent for business-to-business email; where they do, you must have it before you send.

Every message must

• Accurately identify you or your company as the sender, with working reply-to and sender addresses
• Have a subject line and content that are not deceptive or misleading
• Give the recipient a reasonable way to opt out, whether an unsubscribe link, a reply, or clear instructions, and you must honor opt-outs within 10 business days and never later than the law requires
• Go to a business contact for a business purpose. Starlight is not a consumer-marketing or bulk-mailing tool

You must not

• Send unsolicited bulk messages, or the same message to large lists without individual relevance
• Harass, threaten, defame, or send deceptive or fraudulent communications to any recipient
• Promote adult content, illegal products or services, unregulated financial products, multi-level marketing schemes, get-rich-quick schemes, or unsolicited cryptocurrency offerings
• Contact anyone who has opted out, through any channel, or remove anyone from your suppression list to contact them again
• Use sending domains or mailboxes you do not control, or circumvent the rate limits, daily caps, warm-up limits, or policies of any connected mailbox provider
• Impersonate any person or entity or misrepresent your affiliation with anyone

Domain health

You are responsible for the SPF, DKIM, and DMARC configuration and the reputation of every domain you send from. Starlight surfaces deliverability problems but cannot fix your DNS for you.

2. Lead and Company Data

• Use Lead Data only for your own business-to-business sales and marketing, as licensed in Section 9 of the Terms
• Do not resell, sublicense, publish, or redistribute Lead Data, and do not use exports to build or enrich a database, list, or product offered to anyone else
• Do not attempt to re-identify, combine, or enrich Lead Data in ways that violate a data provider's terms or applicable law
• Honor data-subject requests. If a prospect asks you to delete their information, delete it from Starlight and from any system you exported it to
• Only import network connections (LinkedIn, Google, Instagram, X) and CRM records that you are permitted to share with a processor. Do not upload data you obtained in breach of another service's terms

3. AI-Generated Content

• Review AI Output before it is sent. You are the author of every message, whether you edited it or not
• Do not instruct the AI to fabricate facts, credentials, statistics, relationships, or endorsements, or to write in a way that conceals that a message is a sales approach
• Do not use the Service to create content that impersonates a real person without their authorization, or that is discriminatory, harassing, or unlawful
• Where a law requires you to disclose that a communication is automated (for example, California's bot disclosure law for automated accounts that incentivize a purchase), you are responsible for making that disclosure. Drafts you review and send yourself are your communications, not a bot's
• Do not use AI Output to train a model that competes with Starlight

4. Connected Platforms and the Chrome Extension

• Use the extension only with LinkedIn, X, and Reddit accounts that belong to you, and only within those platforms' terms. You accept the risk that a platform may restrict an account for automation, and you can reduce that risk by keeping Autopilot off, lowering your volumes, or using prefill-only sending
• Do not modify the extension, automate the extension with other tools, or use it to scrape, harvest, or export platform data beyond the flows described in the Privacy Policy
• Do not use Starlight to send connection requests or messages to people who have no plausible business reason to hear from you, or to post comments that are deceptive about your affiliation
• Respect the daily caps the extension enforces. They exist to protect your account

5. Agents, Chat, and the MCP Server

• Configure Agents with an honest description of your product and customer. An Agent told to fabricate will fabricate
• Do not use the chat assistant, Agents, or MCP clients to evade any rule in this AUP, to issue high volumes of automated requests that degrade the Service, or to probe for vulnerabilities
• Protect the credentials and tokens of any MCP or OAuth client you connect. Revoke clients you no longer use from Settings
• Autonomous sending (autopilot) is your decision and your responsibility. Turn it off if the output is not what you would send yourself

6. Security and Integrity of the Service

• Do not attempt to access another customer's data, bypass authentication, or interfere with the Service's infrastructure
• Do not reverse engineer, decompile, or extract the source code, prompts, models, or algorithms of the Service
• Do not scrape, crawl, or use automated means to access the Service outside the interfaces we provide (the app, the extension, and the MCP server)
• Do not run security testing against the Service without written permission. Good-faith research under our vulnerability disclosure program is welcome
• Do not share account credentials, maintain multiple free accounts, or self-refer to collect referral rewards

7. Enforcement

We prefer to warn before we act, and we will where it is safe to do so. Depending on severity, we may: contact you and ask you to fix the problem; pause sending from your account while we investigate; disable a specific feature, integration, or client; suspend your account; or terminate it for material breach under the Terms. We may also report unlawful activity to the relevant authorities. We are not obligated to refund blocks consumed by activity that violates this AUP.

8. Reporting Abuse

If you received a message through Starlight that you believe violates this policy, or you are a Starlight customer and want to report misuse, email privacy@joinstarlight.com. Recipients who want to stop receiving messages from all Starlight customers can email the same address, or use the unsubscribe link where a message includes one; we add the address to a suppression list that every customer's sends are checked against.

9. Changes

We may update this AUP as laws, platform policies, and the Service change. Material changes are announced with at least 30 days' notice as described in the Terms; the "Last updated" date at the top of this page reflects the current version.