Acceptable Use Policy

This policy applies to everything you do with Promo Buddy — the console, the API, the winner links you issue, and what you do with the data after you export it. It forms part of the Terms of Service, and breaching it is a breach of those terms.

Taking a CSV off the platform does not take it outside this policy. The listener records you export are the same people they were before the download.

Being straight about the mechanism, because it changes where the responsibility sits:

• Nothing screens what you enter before it is saved. There is no moderation layer between your team and the records it keeps. We find out about a breach when somebody tells us.
• We do keep records about the records — consequential actions are written to an audit log with the acting user and their IP address, and API calls are logged the same way. So a misuse is traceable after the fact, which is exactly the wrong order for the person it was aimed at.

You are therefore the control. The rules below are not a formality; most of them protect people who cannot see this page and never clicked “agree” — the listeners in your database.

Every contest builds a database of real people’s names, numbers and home addresses. The rules for it:

• Collect only what running promotions needs, and use it only for that. The listener database is prize fulfilment, eligibility and tax records — not a general-purpose CRM for whatever the building thinks of next.
• Do not buy, sell or trade listener lists through the platform. Importing a purchased list, or exporting your audience to sell it, is outside what this product is for.
• Do not use a listener’s details to contact them for anything they would not recognise as part of the promotion they entered. The export exists so your records are portable, not so the afternoon guy can text a winner he thought was cute. That sentence is in here because everyone in radio knows a version of that story.
• Honour what your own contest rules promised entrants — about eligibility, about odds, and about what happens to their details.

A winner link is a credential: anyone holding the URL can open the page and submit details against that winner record. So:

• Send a link to the winner it was issued for, and nobody else. Do not post one on air, on socials, or in a group chat.
• Do not fill in a winner link on someone’s behalf and present the result as their signature. The point of the record is that the listener typed it; a staff-typed “signature” is a fabricated release.
• Revoke a link that was sent to the wrong place — revocation is immediate and every later visit is a 404.

Deceptive contests

• Running a promotion you do not intend to award, or advertising a prize that does not exist in the stated quantity or value.
• Fabricating winner records — a “winner” who is an employee, a friend, or nobody at all, recorded to make a contest look real or to move a prize off the books.
• Rigging an outcome while presenting it as chance or merit.
• Running a contest that is an illegal lottery, or one that breaches the contest, sweepstakes or gaming law where it runs. What the law demands where you broadcast is yours to determine — see the terms— but “we did not check” is not a defence we will host.

Harm to listeners

• Using listener details to harass, stalk, intimidate or defraud anyone. This is the fastest route to losing the account.
• Discriminatory eligibility rules where the law prohibits them.
• Recording notes about listeners that you would be ashamed to show the listener. They can ask to see their record; assume they will.

Rights of others

• Entering copy into liners or imaging that you do not have the rights to run, or putting a sponsor’s name on a promotion they never agreed to back.
• Publishing content from the platform that is defamatory, or that breaches someone’s privacy or confidence.

Platform integrity

• Sharing API keys outside your organisation, reselling raw access to the API, or operating a service that is a thin wrapper over it, unless we have agreed to it in writing.
• Creating multiple accounts or workspaces to get around plan caps.
• Probing, scanning or load-testing the service, guessing at winner link tokens, or attempting to reach another workspace’s data. Coordinated security testing is welcome — arrange it first by emailing support@workflowcorp.com, marked for the attention of the security team, and agree the scope and the window before you start. Test against your own workspace and your own records, never anyone else’s.
• Coming back after a termination under a new account.

If you believe your details are in a Promo Buddy workspace and are being misused — or you have encountered a contest run through this platform that breaches this policy — email support@workflowcorp.com, marked for the attention of the abuse team. Tell us what you can: the station, when it happened, and how you are connected. You do not need an account with us to report something.

Reports from a person about their own data are treated as urgent. We acknowledge a report within two business days — business days being Monday to Friday, 8:00 AM to 6:00 PM US Central — and can suspend a workspace while we look into it.

Depending on what happened, we may:

• Ask you to stop, and give you a chance to put it right.
• Suspend or terminate the workspace or the account.
• Report the matter to law enforcement or a regulator, and preserve the associated records.

For fraud against listeners, fabricated winner records, or misuse of the listener database against a person, we will act immediately and without notice. Terminating a paid workspace for a breach does not entitle you to a refund of the current period; see the terms.

Appeals. If you think a decision was wrong, email support@workflowcorp.com within 30 days of it, marked for the attention of the appeals team. Name the workspace and the decision, and include whatever we did not have in front of us — the contest rules, the sponsor agreement, the context. We will look again and tell you what we conclude. A suspension normally stays in place while an appeal is open.