ProductManifestoPricingEnterprise
Try free
Acceptable Use Policy
Effective September 30, 2026

Capable — Acceptable Use Policy

Effective date: 2026-09-30

This Acceptable Use Policy ("AUP") governs your and your Authorized Users' use of the Capable Services. It is incorporated into the Terms of Service (the "Agreement"); capitalised terms have the meaning given there. A material breach of this AUP is a material breach of the Agreement.

1. Prohibited content

You will not submit, store, or transmit through the Services any content that:

  • is unlawful, defamatory, harassing, abusive, threatening, or hateful;
  • infringes or misappropriates any third party's intellectual property, privacy, or other rights;
  • contains malware, ransomware, or other malicious code;
  • is sexually exploitative of, or otherwise harmful to, children; or
  • you do not have the right to submit or to have processed as contemplated by the Agreement.

2. Prohibited conduct

You will not, and will not permit any Authorized User or third party to:

  • use the Services to send spam, unlawful, or deceptive communications;
  • attempt to gain unauthorised access to the Services, other customers' data, or any related systems or networks;
  • interfere with or disrupt the integrity or performance of the Services, including by overloading, flooding, or denial-of-service activity;
  • circumvent or attempt to circumvent authentication, authorisation, rate limits, usage limits, or any security or access controls;
  • scrape, harvest, or systematically extract data from the Services other than your own Customer Data through supported functionality;
  • use the Services to build or train a competing product, or to benchmark on behalf of a competitor;
  • resell, sublicense, or provide the Services to third parties as a service bureau except as expressly permitted; or
  • use the Services in violation of any applicable law, sanctions, or export controls.

3. Lawful basis for data you bring in

You are responsible for the data you and your Authorized Users put into the Services, including any third-party personal data. You represent and warrant that, for all personal data you import, upload, send, or generate in the Services, you have a valid legal basis and all rights, permissions, notices, and consents required under applicable law. This includes personal data:

  • imported from a connected Google, Microsoft, or IMAP mailbox and calendar (email header metadata, email message content stored to power the CRM and search, and calendar metadata and agendas);
  • synced from a connected LinkedIn account (where the LinkedIn beta is enabled);
  • sent to Capable by your own systems through the inbound product-event API;
  • contained in files you upload to records;
  • entered by people who book time with you through a public booking page; and
  • captured by the meeting recorder.

Where you record meetings, you are responsible for providing any notices and obtaining any consents required for recording in the relevant jurisdictions. The recorder's built-in notices (the bot's in-meeting announcement and the pre-meeting email to external attendees with a one-click opt-out) assist with this but do not replace your own obligations.

Connected third-party accounts. You may connect only accounts you are entitled to use (your own, or your organisation's with its permission), and you must comply with the connected provider's terms — including Google's, Microsoft's, and LinkedIn's user agreements. Where you send events from your own product, you are responsible for keeping the API key confidential and for the lawfulness of every event you send.

Special-category and sensitive data. Do not submit special categories of personal data (such as health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade-union membership, or data concerning sex life or sexual orientation), government identifiers, or payment-card data into free-text fields, notes, uploaded files, or transcripts, except where you have a lawful basis and the additional protections required by law. The Services are not designed to be a system of record for such data.

4. Use of connected AI assistants

You may operate the Services through supported AI assistants, including Claude, ChatGPT, and Codex, under your or your organisation's agreement with the relevant provider. Your use must comply with that provider's then-current usage policies in addition to this AUP. You will not use the Services or a connected assistant to generate or facilitate prohibited, unlawful, or harmful content or activities, and you are responsible for reviewing AI-assisted outputs before relying on or committing them.

5. Security testing and vulnerability disclosure

You may not conduct penetration testing, vulnerability scanning, or other security testing against the Services without our prior written permission. If you discover a security vulnerability, please report it responsibly to hello@capable.run. We welcome good-faith disclosures and will not pursue action against researchers who act in good faith, avoid privacy violations and service disruption, and give us a reasonable opportunity to remediate before public disclosure.

6. Fair use and rate limits

The Services apply per-Workspace and per-user rate limits, and per-source daily limits on the inbound product-event API, to protect availability for all customers. You will not attempt to evade these limits. We may apply reasonable technical measures, including throttling, to enforce fair use.

7. Consequences

We may investigate suspected violations of this AUP and may remove or disable access to offending content, and suspend or terminate access, in accordance with the Agreement. Where a violation poses a security risk, is required to be addressed by law, or risks harm to us, our customers, or third parties, we may act immediately and without prior notice. We will cooperate with law-enforcement authorities as required by law.

To report abuse or a suspected violation, contact hello@capable.run.