Acceptable Use Policy

You may not use the platform, directly or through an AI agent you configure, to:

• Engage in or promote illegal activity, fraud, scams, phishing, or deceptive practices.
• Harass, threaten, stalk, defame, or harm any person, or incite violence against anyone.
• Impersonate a person, business, or government agency without authorization, or misrepresent who is calling or messaging.
• Create or distribute malware, or gain or attempt to gain unauthorized access to systems, accounts, networks, or data.
• Interfere with or disrupt the integrity or performance of the platform or the carrier networks that carry your traffic.
• Generate, store, or distribute content that is unlawful or infringing, or that exploits or endangers minors.
• Open new accounts or workspaces to evade a suspension, termination, or limit we have applied.
• Build or train a competing product, or resell the platform, except as expressly permitted.

You are the caller of record for every call your agents place, and you are solely responsible for complying with the laws and carrier rules that apply to your calling. AI-generated and prerecorded voices are treated as artificial or prerecorded voice for compliance purposes, and placing those calls without the consent the law requires is prohibited on our platform.

Before and while running outbound voice campaigns, you must:

• Obtain and document all legally required consent before calling recipients, including prior express written consent where the TCPA and similar laws require it for autodialed, prerecorded, artificial-voice, AI-generated-voice, or marketing calls.
• Scrub against the National Do Not Call Registry and applicable state lists and maintain an internal do-not-call list. The platform's DNC scrubbing features assist with this, but compliance remains your obligation.
• Honor do-not-call and opt-out requests promptly, and retain records of consent and opt-outs for as long as the law requires.
• Respect permitted calling hours in the recipient's local time and comply with applicable state telemarketing laws.
• Obtain consent before recording calls, including from every participant in two-party and all-party consent jurisdictions.
• Configure autodialing and campaign pacing responsibly. Abandoned calls, dead-air calls, and calling patterns designed to overwhelm a recipient or a destination violate this policy.

Caller ID must accurately identify you or the business on whose behalf your agent is calling. You may present only numbers you are authorized to use, and you may never transmit misleading or inaccurate caller ID with intent to defraud, cause harm, or wrongfully obtain anything of value, which the Truth in Caller ID Act prohibits.

The following traffic schemes are prohibited in any form:

• Traffic pumping and access stimulation, meaning calls generated to inflate volume to high-cost destinations or to share in access charges.
• International revenue share fraud, meaning calls placed to premium or revenue-generating international numbers in order to collect a portion of the resulting charges.
• Artificially inflated traffic of any kind, including calls or messages generated primarily to create billable events rather than genuine conversations.
• Relaying or reselling third-party voice traffic through your account without our written approval.

Application-to-person messaging is governed by carrier rules and industry guidelines in addition to law. Before sending SMS in the United States, you must complete A2P 10DLC campaign registration through the platform, register your brand and use case accurately, and send only traffic consistent with your registered campaign. WhatsApp traffic must comply with WhatsApp Business policies.

Consistent with CTIA messaging guidelines, you must obtain recipient opt-in before sending marketing or other non-transactional messages, keep proof of that opt-in, honor STOP and similar opt-out keywords immediately, and make it clear in your messages who is sending them and how to get help or opt out.

Carriers prohibit or heavily restrict certain content categories on A2P routes regardless of consent, and you may not send carrier-prohibited content. This includes the categories carriers describe as SHAFT, meaning sex, hate, alcohol, firearms, and tobacco, plus cannabis where prohibited. It also includes carrier-restricted categories such as high-risk lending, debt relief and debt forgiveness, and similar programs, which may be sent only where carriers permit them and only with the required registration and consent.

You may not evade carrier controls, including by:

• Snowshoeing, meaning spreading similar or identical message content across many numbers to dilute volume and evade detection or filtering.
• Using shared public URL shorteners or deliberately obscured links to hide message content or destinations.
• Routing messages through grey routes or other unregistered paths to avoid A2P registration, fees, or filtering.
• Manipulating message content, sender identity, or encoding to defeat carrier spam filtering.

Spam is prohibited on every channel, not just email. Bulk or automated communications that recipients did not agree to receive, that provoke complaints, or that hit spam traps violate this policy regardless of the channel used. Where your use of the platform drives email or other electronic messaging, that messaging must comply with the CAN-SPAM Act, including accurate sender identification and a working unsubscribe mechanism.

We operate honeypot detection and monitor complaint and delivery signals to identify spam campaigns. Traffic flagged by carriers, recipients, or our own systems may be paused while we investigate.

Where the law requires it, your agents must disclose at the start of an interaction that the recipient is communicating with an automated or AI system, and must identify your business and the purpose of the contact. Even where disclosure is not strictly required, your agents may not claim to be human when a recipient directly asks.

You must maintain appropriate human oversight of your agents, and you remain responsible for the prompts, knowledge, tools, and instructions you configure and for the outputs your agents produce.

You may not use the platform to:

• Clone or synthesize the voice of a real person without that person's documented authorization.
• Impersonate a person, brand, or government agency, or misrepresent the identity of the business an agent speaks for.
• Interfere with elections, suppress voting, or spread political disinformation through automated calls or messages.
• Run social engineering or pretexting schemes, or extract credentials, payment details, or personal information by deception.

Phone numbers are a shared, finite resource, and their reputation directly affects deliverability for every customer on the platform. Acquire only the numbers you need for active, legitimate use, and release numbers you no longer use.

You may not stockpile numbers you have no genuine, near-term plans to use, rotate through fresh numbers to outrun blocks, filters, or reputation damage, or acquire numbers to imitate another business or to deceptively mimic a recipient's local area. We may reclaim numbers that show no legitimate activity for an extended period or that are used in violation of this policy, with notice where practical.

You may not use the platform to create, store, or transmit content that is unlawful, infringing, defamatory, or that violates the privacy or rights of others. You must have a lawful basis to process the personal information you handle through the platform, comply with applicable privacy laws, and not upload sensitive data you are not authorized to process.

Where Assistable processes personal data on your behalf, that processing is governed by our Data Processing Addendum at /dpa. Our own privacy practices are described in our Privacy Policy at /privacy.

You may not probe, scan, or test the vulnerability of the platform without written authorization, circumvent authentication or access controls, or use the platform to overload or disrupt our infrastructure or anyone else's. You also may not use the platform to distribute malware or to launch or facilitate denial-of-service attacks.

If you discover a security vulnerability, report it responsibly to support@assistable.ai and give us a reasonable opportunity to address it before any public disclosure. You can read more about our security practices at /trust.

Self-serve use of the platform is billed on a pay-as-you-go basis, and usage is subject to the limits described in our Fair Use Policy at /fair-use. Sustained or automated usage that materially exceeds normal patterns may be rate-limited, and very high-volume use cases may require an enterprise agreement.

Fair use limits exist to protect platform stability and deliverability for all customers, not to penalize growth. If you expect a large increase in traffic, reach out in advance through /contact so we can plan for it.

If you receive an unwanted call or message from a number operated through Assistable, or you believe a customer is violating this policy, report it at /report-abuse or email support@assistable.ai. Include the phone number involved, the date and time of the contact, and any content you can share. We review reports promptly and act on confirmed violations.

Law enforcement agencies seeking customer records should follow the process described at /law-enforcement-request.

We investigate suspected violations using automated signals, including honeypot detection and carrier feedback, together with manual review. We may require KYC review, additional verification, or documentation of consent and opt-in at any time, and continued access may depend on completing it.

Where practical, we give notice and an opportunity to remediate, but we act immediately and without notice where conduct creates a risk of harm to recipients, fraud, legal exposure, or service disruption. We cooperate with carriers and, where legally required, with regulators and law enforcement, and we may make emergency disclosures as permitted by 18 U.S.C. 2702, as described at /law-enforcement-request. A violation of this policy is also a violation of our Terms of Service at /terms.

Enforcement is proportionate to the severity and history of the conduct. Depending on the circumstances, we may:

• Warn you and require remediation within a stated period.
• Remove or disable access to content that violates this policy.
• Limit throughput, pause campaigns, or restrict specific features, channels, or numbers.
• Suspend access to some or all of the platform.
• Terminate your account and any associated workspaces.