Acceptable Use Policy

This Acceptable Use Policy (“AUP”) is incorporated by reference into the Agora Terms of Service (available at https://www.agora.io/en/terms-of-service/) and any applicable Order Form or other written agreement between Customer and Agora governing Customer's access to or use of the Services (collectively, the “Agreement”). All capitalized terms used but not defined in this AUP have the meanings given to them in the Agreement.

1. Contracting Entity and Scope

The primary contracting entity for the purposes of this AUP is Agora Lab, Inc., a California corporation (“Agora”). Agora affiliates, including Agora.io Singapore PTE. LTD., may serve as the contracting entity where so designated in an applicable Order Form or other written agreement between the parties.

This AUP applies globally to all use of Agora's real-time communications, video, audio, messaging, and API platform services, regardless of the geographic location of the Customer, its End Users, or the infrastructure through which the Services are accessed.

2. Definitions

For the purposes of this AUP, the following terms have the meanings set forth below. Terms not defined here have the meanings given in the Agreement.

3. Prohibited Uses

Customer will not, and will not permit any End User to, use the Services, any Customer Application, or any Content in connection with any of the following Prohibited Uses:

1. Unlawful, Fraudulent, or Deceptive Activity. Using the Services for any purpose that is unlawful, fraudulent, or deceptive under any applicable law, rule, or regulation in any jurisdiction, including misrepresentation of identity, affiliation, or authorization.
2. Offensive or Harmful Content. Transmitting, distributing, or making available Content that is offensive, sexually explicit, obscene, gratuitously violent, harassing, defamatory, threatening, discriminatory, or otherwise objectionable, as determined by Agora in its reasonable discretion.
3. Illegal Gambling. Using the Services to facilitate or promote illegal gambling, games of chance, sweepstakes, or contests in violation of applicable law.
4. Violation of Third-Party Rights. Promoting, encouraging, or facilitating any activity that violates the rights of any third party, including intellectual property rights, rights of privacy, rights of publicity, or rights of personality, or facilitating any illegal activity.
5. Infrastructure Abuse. Imposing an unreasonable or disproportionately large load on the Services or Agora's infrastructure; conducting distributed denial-of-service (DDoS) attacks or similar disruptive activities; circumventing or attempting to circumvent any filtering, security measures, rate limits, or other protective features of the Services; scraping, harvesting, or otherwise systematically extracting data from the Services in an unauthorized manner; or accessing, modifying, deleting, damaging, or disrupting the Services or any data of other Agora customers.
6. Reverse Engineering. Reverse engineering, decompiling, disassembling, translating, or otherwise attempting to extract the source code of the Services or any Agora Software, except to the extent expressly permitted by applicable law notwithstanding a contractual restriction.
7. Competitive Benchmarking. Using the Services, Agora Software, or Documentation for benchmarking or comparative purposes where the results are published, disseminated, or disclosed to any third party, unless expressly authorized by Agora in writing.
8. Children-Directed Applications. Building or operating any Customer Application for which use of the Services is primarily directed to, or for which a significant portion of End Users will be, children under 16 years of age (or such younger age as specified by applicable law), without Agora's prior written consent. Where consent is granted, Customer remains solely responsible for compliance with all applicable children's privacy and protection laws, including the U.S. Children's Online Privacy Protection Act (COPPA) and analogous applicable laws.
9. AI-Specific Restrictions. With respect to AI Services or any AI-enabled functionality accessed through the Services, Customer will not, and will not permit any End User to:
   1. use AI Services to impersonate any individual without that individual's authorization;
   2. create, distribute, or use deceptive synthetic voices, synthetic media, or deepfakes that are intended to mislead recipients as to their authenticity or origin;
   3. violate publicity rights, personality rights, or biometric privacy rights, including under the Illinois Biometric Information Privacy Act (BIPA) and analogous applicable laws in any jurisdiction;
   4. deploy or distribute AI-generated outputs without first reviewing and validating the accuracy, suitability, and lawfulness of such outputs for the intended use; or
   5. use AI Services in any manner that violates applicable laws governing AI-generated content.
10. Biometric and Voice Consent. Where use of the Services involves the processing of voice, speech, facial geometry, or other biometric identifiers, Customer must, prior to submitting such data for processing, obtain all consents and provide all disclosures required under applicable biometric privacy laws, including BIPA and analogous applicable laws. Failure to obtain and maintain such consents constitutes a Prohibited Use.
11. Export Controls and Sanctions. Using the Services in violation of applicable export control laws, trade sanctions, or embargo regulations, including the U.S. Export Administration Regulations (EAR), the International Traffic in Arms Regulations (ITAR), and regulations administered by the U.S. Office of Foreign Assets Control (OFAC), as well as analogous applicable laws of other jurisdictions. Without limiting the foregoing, Customer will not export or re-export the SDK or use the Services from countries subject to comprehensive U.S. sanctions or with any party identified on a restricted or denied party list.
12. Interference with Other Customers. Engaging in any activity that disrupts, degrades, impairs, or interferes with any other customer's use of the Services, including attempts to probe, scan, or test the vulnerability of Agora systems or networks in an unauthorized manner.
13. Unauthorized Reselling or Redistribution. Reselling, sublicensing, redistributing, or otherwise making the Services or any component thereof available to third parties on a standalone basis, outside the scope of a Customer Application authorized under the Agreement, unless expressly authorized by Agora in writing.
14. Malware and Harmful Code. Transmitting, uploading, or distributing any virus, worm, Trojan horse, ransomware, spyware, adware, or other malicious or harmful code, file, or program through or in connection with the Services.
15. Spam and Unsolicited Communications. Using the Services to send, facilitate, or enable the transmission of unsolicited bulk communications, spam, phishing messages, or chain messages, or to harvest, collect, or assemble email addresses or other contact information of third parties for the purpose of sending unsolicited communications.

4. Customer Responsibilities

1. Security Implementation. Customer will implement all security measures recommended in Agora's then-current Documentation, security policies, and security guides, including measures relating to encryption, token authentication, channel separation, and credential management. Customer is responsible for maintaining the security of all networks, systems, endpoints, and applications used to operate the Customer Application and access the Services.
2. End User Compliance. Customer will ensure that all End Users comply with this AUP and will enter into a written agreement with each End User that is consistent with, and at least as protective of Agora's rights as, the Agreement. Customer is responsible for promptly suspending or terminating access for any End User that violates this AUP.
3. Content Monitoring and Moderation. Customer is responsible for monitoring and moderating Content transmitted through the Services in connection with Customer Applications. Customer will take prompt remedial action upon becoming aware of any Content or use that violates this AUP or applicable law.
4. DMCA and Content Takedown Processing. Customer is responsible for promptly processing and handling notices it receives from any third party claiming that Content in connection with the Services violates such party's rights, including notices under the U.S. Digital Millennium Copyright Act (DMCA) and analogous applicable laws in other jurisdictions.
5. Consents and Legal Compliance. Customer will obtain and maintain all legally required consents, authorizations, and permissions for all data collected, processed, or transmitted through the Services, including consents required by applicable privacy, biometric, telecommunications, and consumer protection laws. Customer is responsible for its own compliance with all applicable laws and regulations in connection with its use of the Services.

5. Enforcement

1. Investigation. Agora may investigate any suspected violation of this AUP, including by reviewing Content, logs, and usage data. Customer will cooperate with any such investigation and provide reasonably requested information.
2. Suspension and Termination. If Agora reasonably determines that Customer or any End User has violated this AUP, Agora may, in its sole discretion and without prior notice where an issue causes or is likely to cause immediate harm: (i) issue a warning; (ii) remove or disable access to any Content that violates this AUP; (iii) temporarily or permanently suspend Customer's or an End User's access to the Services in whole or in part; or (iv) terminate the Agreement in accordance with its terms. Agora will use commercially reasonable efforts to provide notice prior to or promptly after taking enforcement action, except where prohibited by law or where notice may compromise an investigation.
3. Law Enforcement Cooperation. Agora may cooperate with law enforcement agencies, regulatory authorities, or third parties in connection with conduct or activity that Agora reasonably believes may violate any applicable law, regulation, or this AUP, including by disclosing relevant information in accordance with applicable legal process.
4. No Obligation to Monitor; Right to Monitor. Agora is not obligated to monitor, review, or screen Content or Customer's use of the Services for compliance with this AUP. However, Agora reserves the right to do so at any time, in its sole discretion, and to take enforcement action as set forth in this Section 5.
5. No Liability for Enforcement Action. Agora will not be liable to Customer or any End User for any enforcement action taken in good faith pursuant to this Section 5.

6. Data Privacy and Data Processing

This AUP does not contain substantive data processing or data protection terms. Agora's processing of personal data in connection with the Services is governed by the Agora Data Processing Agreement (“DPA”), which is available at the Agora Trust Center at https://trust.agora.io/. To the extent applicable, the DPA is incorporated by reference into the Agreement and governs the processing of personal data in accordance with its terms. Customers are directed to the Trust Center for the current DPA, subprocessor lists, and related data protection documentation.

7. Modifications to This Policy

Agora reserves the right to update, modify, or replace this AUP at any time. Agora will provide notice of material changes by posting the updated AUP on its website and, where practicable, by notifying affected Customers via email or through the Agora console. Changes will become effective on the date specified in the updated AUP or, if no date is specified, thirty (30) days after posting. Customer's continued use of the Services after the effective date of any such changes constitutes Customer's acceptance of the updated AUP. If Customer does not agree to the updated AUP, Customer's sole remedy is to discontinue use of the Services and terminate the Agreement in accordance with its terms.

8. Contact Information

To report a violation of this AUP, to submit questions regarding this AUP, or to request further information, please contact Agora at:

Agora Lab, Inc.
2804 Mission College Blvd., Suite 110 Santa Clara, CA 95054
Email: contact-us@agora.io
Phone: +1 (408) 879-5885