Acceptable Use Policy

Talkif, Inc.

Effective Date: February 6, 2026 Last Updated: February 4, 2026

Table of Contents

1. Introduction and Scope
2. Definitions
3. Telephone Consumer Protection Act (TCPA) Compliance
4. Call Recording and Wiretap Law Compliance
5. Artificial Intelligence Disclosure Requirements
6. Prohibited Content and Conduct
7. Anti-Spam and Volume Restrictions
8. Data Protection and Contact Data Obligations
9. Platform Integrity and Security
10. Bring Your Own Carrier (BYOC) Responsibilities
11. International Compliance
12. Monitoring and Enforcement
13. Reporting Violations
14. Changes to This Policy
15. Contact Information

1. Introduction and Scope

1.1. This Acceptable Use Policy ("AUP" or "Policy") governs your use of the Talkif platform, including all services, APIs, integrations, and features provided by Talkif, Inc. ("Talkif," "we," "us," or "our"). This AUP is incorporated by reference into and forms part of the Talkif Terms of Service ("Terms").

1.2. By accessing or using the Talkif platform, you ("User," "you," or "your") agree to comply with this AUP. If you are using Talkif on behalf of an organization, you represent and warrant that you have the authority to bind that organization to this AUP.

1.3. This AUP applies to all use of the Talkif platform, including but not limited to:

(a) Outbound automated and AI-powered voice calls;

(b) Inbound call handling and routing;

(c) Bulk calling campaigns;

(d) Call recording and AI-powered call analysis;

(e) Contact list management and upload;

(f) Use of Talkif-provided telephony numbers;

(g) Bring Your Own Carrier (BYOC) integrations; and

(h) Any use of the Talkif API or platform features.

1.4. Talkif is a technology platform. You, the User, are solely responsible for ensuring that your use of the platform complies with all applicable laws, regulations, and industry standards. Talkif does not provide legal advice, and nothing in this AUP constitutes legal counsel. You should consult qualified legal counsel to determine your specific compliance obligations.

2. Definitions

2.1. "Automated Call" means any call initiated, conducted, or managed using the Talkif platform's automated dialing, AI voice, or campaign features, regardless of whether a human operator is involved at any point during the call.

2.2. "Campaign" means a bulk calling operation configured through the Talkif platform to contact multiple recipients from a contact list, either sequentially or in parallel, using automated dialing and AI voice capabilities.

2.3. "Contact Data" means any personal information relating to call recipients that you upload, store, or process through the Talkif platform, including but not limited to names, phone numbers, email addresses, and any associated metadata.

2.4. "BYOC" means "Bring Your Own Carrier," referring to the Talkif feature that allows Users to connect their own telephony carriers or SIP providers to the Talkif platform.

2.5. "Prior Express Consent" has the meaning given under the Telephone Consumer Protection Act, 47 U.S.C. Section 227, and implementing regulations of the Federal Communications Commission ("FCC"), and means consent that is clearly and unmistakably given by the called party before the call is placed.

2.6. "Prior Express Written Consent" has the meaning given under 47 C.F.R. Section 64.1200(f)(9), and means an agreement in writing that bears the signature of the person called, that clearly authorizes the caller to deliver or cause to be delivered to the person called advertisements or telemarketing messages using an automatic telephone dialing system or an artificial or prerecorded voice, and that includes the telephone number to which the signatory authorizes such advertisements or telemarketing messages to be delivered.

2.7. "Do Not Call List" means any legally mandated or voluntarily maintained list of telephone numbers whose owners have indicated they do not wish to receive certain types of calls, including the National Do Not Call Registry maintained by the Federal Trade Commission ("FTC").

2.8. "Call Recording" means the electronic capture and storage of audio content from a telephone call conducted through or facilitated by the Talkif platform.

2.9. "AI Caller" means an artificial intelligence system that conducts a telephone conversation on behalf of a User, including any AI-powered voice agent configured through the Talkif platform's flow system.

3. Telephone Consumer Protection Act (TCPA) Compliance

This section addresses the highest area of legal liability for Users of a calling platform. TCPA violations can result in statutory damages of $500 to $1,500 per call. Users are strongly advised to consult with legal counsel experienced in TCPA compliance.

3.1. Prior Express Consent

3.1.1. You must obtain Prior Express Consent from any individual before placing an Automated Call to that individual's telephone number. This requirement applies to all calls placed using the Talkif platform, whether to mobile phones, landlines, or VoIP numbers.

3.1.2. For informational Automated Calls (i.e., calls that do not contain telemarketing or advertising content), you must obtain Prior Express Consent from the called party before placing the call. Such consent may be oral or written, but must be obtained voluntarily and must not be a condition of purchasing any property, goods, or services.

3.1.3. For telemarketing Automated Calls (i.e., calls that contain advertising or constitute telemarketing as defined under 47 C.F.R. Section 64.1200), you must obtain Prior Express Written Consent from the called party before placing the call. Such written consent must:

(a) Be obtained in writing (including electronic signatures compliant with the E-SIGN Act);

(b) Bear the signature of the person called;

(c) Clearly authorize the caller to deliver telemarketing messages using an automatic telephone dialing system or an artificial or prerecorded voice;

(d) Include the specific telephone number to which such messages may be delivered;

(e) Not be required as a condition of purchasing any property, goods, or services; and

(f) Be retained by you for a minimum of five (5) years from the date of the most recent call made in reliance on such consent, or such longer period as required by applicable law.

3.1.4. Consent obtained by a third party on your behalf is your responsibility to verify and validate. You may not rely on consent obtained through deceptive means, and you must ensure any third-party consent acquisition complies with FCC requirements. While multi-seller consent forms are currently legally permissible (the FCC's one-to-one consent rule from FCC 23-107 was vacated by the Eleventh Circuit in January 2025), Talkif strongly recommends obtaining consent that specifically names you as the authorized caller, as this provides the strongest defense in any TCPA litigation.

3.1.5. Consent may be revoked by the called party at any time and through any reasonable means. You must honor revocation requests promptly and, in all cases, cease calling the number within a reasonable time not to exceed ten (10) business days of receipt of the revocation request.

3.2. Do Not Call Compliance

3.2.1. You must maintain an internal Do Not Call list containing the telephone numbers of all individuals who have requested not to receive calls from you. You must add numbers to this list as soon as practicable and in all cases no later than ten (10) business days after the request (per FCC rule effective April 11, 2025, amending 47 CFR § 64.1200(d)(3)), and you must honor such requests for a minimum of five (5) years.

3.2.2. You must scrub your contact lists against the National Do Not Call Registry maintained by the FTC before placing telemarketing calls. You must access the Registry at least once every thirty-one (31) days and must not call numbers that appear on the Registry, unless you have an Established Business Relationship (EBR) with the called party or have obtained Prior Express Written Consent.

3.2.3. You must honor all state Do Not Call lists applicable to the jurisdictions in which your call recipients are located.

3.2.4. You must not upload contact lists to the Talkif platform that you know or have reason to believe contain numbers registered on applicable Do Not Call lists, unless you have a valid exemption for each such number.

3.3. Time-of-Day Restrictions

3.3.1. You must not place telemarketing calls before 8:00 a.m. or after 9:00 p.m. in the called party's local time. This restriction applies per the FTC Telemarketing Sales Rule (16 C.F.R. Section 310.4(c)) and TCPA implementing regulations.

3.3.2. The Talkif platform provides campaign time window controls (earliest_call_time and latest_call_time) and contact timezone awareness (respect_contact_timezone). You are required to configure these controls to comply with time-of-day restrictions. While the platform provides these tools, the ultimate responsibility for compliance rests with you.

3.3.3. You must account for the fact that a contact's local time may differ from your own. When the respect_contact_timezone feature is enabled, the platform will use the contact's timezone to determine permissible calling hours. When this feature is not enabled, you must independently verify that calls are placed within permissible hours in the recipient's local time.

3.3.4. State-level time restrictions may be more restrictive than the federal 8:00 a.m. to 9:00 p.m. window. You are responsible for identifying and complying with any such state-specific restrictions.

3.4. Caller Identification Requirements

3.4.1. You must not engage in caller ID spoofing with intent to defraud, cause harm, or wrongfully obtain anything of value, in violation of the Truth in Caller ID Act (47 U.S.C. Section 227(e)) and the FCC's implementing rules.

3.4.2. All calls placed through the Talkif platform must transmit accurate caller identification information. The calling number displayed to the recipient must be:

(a) A number assigned to you or your organization;

(b) A number you are authorized to use; and

(c) A number at which you can be reached or at which a reasonable consumer can reach your organization.

3.4.3. You must not use Talkif to place calls that display misleading, inaccurate, or fictitious caller identification information.

3.5. Abandoned Call Rules

3.5.1. If you use Talkif's campaign features for telemarketing, you must comply with the FTC's abandoned call rules. Specifically, you must not abandon more than three percent (3%) of calls answered by a live person, measured per campaign per thirty-day period.

3.5.2. An "abandoned call" is a call that is answered by a live person but is not connected to a live sales representative or an appropriate recorded message within two (2) seconds of the called party's completed greeting.

3.6. Consent Record-Keeping

3.6.1. You must maintain records demonstrating that you obtained valid consent for each call placed through the Talkif platform. These records must include, at a minimum:

(a) The identity of the consenting party;

(b) The telephone number for which consent was given;

(c) The date and manner in which consent was obtained;

(d) The specific scope of the consent (e.g., informational calls, telemarketing calls);

(e) A copy of any written consent agreement or electronic consent record; and

(f) If applicable, records of consent revocation.

3.6.2. You must be prepared to produce consent records upon request by Talkif, any regulatory authority, or in connection with any legal proceeding. Failure to produce consent records upon Talkif's request may result in suspension or termination of your account.

3.6.3. Talkif does not serve as your consent management system. While the platform stores campaign and contact data, it is your obligation to independently maintain comprehensive consent records.

4. Call Recording and Wiretap Law Compliance

4.1. General Obligation

4.1.1. If you enable call recording through the Talkif platform, you are solely responsible for complying with all applicable federal and state wiretap laws, recording consent laws, and any international recording regulations.

4.1.2. Federal law (18 U.S.C. Section 2511) generally requires the consent of at least one party to a telephone conversation before it may be recorded ("one-party consent"). However, numerous states and foreign jurisdictions impose stricter requirements.

4.2. Two-Party (All-Party) Consent Jurisdictions

4.2.1. Approximately twelve (12) U.S. states require the consent of all parties to a telephone conversation before it may be recorded. These states include, but may not be limited to: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Oregon (for electronic communications), Pennsylvania, Vermont, and Washington.

4.2.2. If any party to a call is located in a two-party consent jurisdiction, you must obtain the consent of all parties before recording the call. Given the difficulty of determining a caller's location in real time, Talkif strongly recommends that all Users adopt an all-party consent approach for all recorded calls.

4.2.3. You must provide clear and conspicuous notice of recording at the beginning of each recorded call, such as: "This call may be recorded for quality assurance purposes." This notice must be provided before any substantive conversation occurs.

4.3. International Recording Laws

4.3.1. If you place or receive calls involving parties outside the United States, you must comply with the recording consent laws of the applicable foreign jurisdiction. Many jurisdictions, including member states of the European Union, require all-party consent for call recording.

4.3.2. You must not enable call recording for calls to or from jurisdictions where such recording would be unlawful, unless you have obtained all required consents.

4.4. Recording Retention and Access

4.4.1. You are responsible for determining the appropriate retention period for call recordings and for securely deleting recordings when they are no longer needed or upon the request of a recorded party (subject to applicable legal hold obligations).

4.4.2. You must not use call recordings obtained through the Talkif platform for any unlawful purpose, including but not limited to blackmail, extortion, unauthorized surveillance, or any purpose that would violate the privacy rights of the recorded parties.

5. Artificial Intelligence Disclosure Requirements

5.1. General Obligation

5.1.1. The Talkif platform enables AI-powered voice agents to conduct telephone conversations. You may be legally required to disclose that the call recipient is interacting with an AI system rather than a human. The legal landscape regarding AI disclosure obligations is rapidly evolving; you must monitor and comply with all applicable laws.

5.2. United States Requirements

5.2.1. The Federal Trade Commission ("FTC") has issued guidance indicating that using AI to impersonate real individuals may constitute a deceptive or unfair trade practice under Section 5 of the FTC Act (15 U.S.C. Section 45).

5.2.2. Several U.S. states have enacted or are considering legislation requiring disclosure of AI caller identity. You must comply with all such state laws applicable to the jurisdictions in which your call recipients are located.

5.2.3. You must not configure AI voice agents on the Talkif platform to affirmatively misrepresent themselves as human when directly asked by a call recipient whether they are speaking with a human or a machine.

5.3. European Union Requirements

5.3.1. The EU AI Act (Regulation (EU) 2024/1689) imposes transparency obligations on deployers of AI systems that interact directly with natural persons. Under Article 50 of the AI Act:

(a) Users deploying AI systems that interact with natural persons must ensure those persons are informed they are interacting with an AI system, unless this is obvious from the circumstances and context of use;

(b) Users deploying AI systems that generate or manipulate audio content (including synthetic voice) must disclose that the content is artificially generated or manipulated.

5.3.2. If you use the Talkif platform to place calls to recipients in the European Union or European Economic Area, you must ensure that AI caller disclosure is provided at the commencement of each call, in compliance with the EU AI Act's transparency requirements.

5.4. Recommended Disclosure Practices

5.4.1. Regardless of specific legal requirements, Talkif strongly recommends that all Users configure their AI voice agents to disclose their AI nature at the beginning of each call. Talkif considers this a best practice for ethical use of the platform.

5.4.2. Recommended disclosure language: "Hello, this is an AI-powered assistant calling on behalf of [Your Organization Name]."

6. Prohibited Content and Conduct

6.1. Illegal Activities

6.1.1. You must not use the Talkif platform to engage in, facilitate, or promote any activity that is illegal under applicable federal, state, local, or international law.

6.2. Fraud, Deception, and Scams

6.2.1. You must not use the Talkif platform to:

(a) Engage in any form of fraud, including but not limited to wire fraud (18 U.S.C. Section 1343), mail fraud, or consumer fraud;

(b) Conduct phishing, vishing (voice phishing), or social engineering attacks;

(c) Impersonate government agencies, law enforcement, financial institutions, or other entities for the purpose of deceiving call recipients;

(d) Make false or misleading representations to call recipients regarding the nature, purpose, or origin of the call;

(e) Operate or promote pyramid schemes, Ponzi schemes, or other fraudulent investment schemes; or

(f) Engage in any practice that would constitute a deceptive or unfair trade practice under Section 5 of the FTC Act.

6.3. Impersonation

6.3.1. You must not configure AI voice agents to impersonate specific real individuals without the express, documented consent of the individual being impersonated. This includes cloning or simulating the voice, speech patterns, or identity of any real person.

6.3.2. You must not use the Talkif platform to create deepfake or synthetic voice content intended to deceive recipients into believing they are communicating with a specific individual.

6.4. Harassment, Threats, and Intimidation

6.4.1. You must not use the Talkif platform to:

(a) Harass, threaten, intimidate, stalk, or abuse any individual;

(b) Place repeated calls to the same recipient with the intent to annoy, abuse, or harass;

(c) Use profane, obscene, or abusive language in automated calls; or

(d) Engage in conduct that would constitute harassment or stalking under applicable law.

6.5. Debt Collection Violations

6.5.1. If you use the Talkif platform for debt collection activities, you must comply with the Fair Debt Collection Practices Act ("FDCPA," 15 U.S.C. Section 1692 et seq.), Regulation F (12 C.F.R. Part 1006), and all applicable state debt collection laws.

6.5.2. Specifically, you must not:

(a) Call debtors before 8:00 a.m. or after 9:00 p.m. in the debtor's local time;

(b) Call debtors at inconvenient times or places known to you;

(c) Place more than seven (7) calls within a seven-day period to a particular person regarding a particular debt (per Regulation F);

(d) Place a call to a person within seven (7) days of having a telephone conversation with that person about the particular debt;

(e) Fail to provide required disclosures (including the mini-Miranda warning); or

(f) Engage in any other practice prohibited under the FDCPA or applicable state law.

6.6. Healthcare and Protected Health Information

6.6.1. You must not use the Talkif platform to transmit, store, or process Protected Health Information ("PHI") as defined under the Health Insurance Portability and Accountability Act ("HIPAA") unless you have entered into a Business Associate Agreement ("BAA") with Talkif and Talkif has confirmed its readiness to support HIPAA-compliant use cases.

6.6.2. You must not upload contact lists or configure call flows that would result in the disclosure of PHI to call recipients or third parties in violation of HIPAA, state health privacy laws, or other applicable healthcare regulations.

6.7. Emergency Services

6.7.1. You must not use the Talkif platform to place calls to emergency services (including 911, 112, or any other emergency number in any jurisdiction). The Talkif platform is not designed or intended for emergency calling and may not function reliably for such purposes.

6.8. Adult, Obscene, and Harmful Content

6.8.1. You must not use the Talkif platform to deliver automated calls containing:

(a) Obscene, pornographic, or sexually explicit content;

(b) Content that promotes violence or self-harm;

(c) Content that constitutes or promotes hate speech, discrimination, or incitement against any individual or group based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristic; or

(d) Misinformation or disinformation intended to deceive the public or manipulate democratic processes, including election-related robocalls containing false information.

6.9. Spreading Misinformation

6.9.1. You must not use the Talkif platform to disseminate false, misleading, or deceptive information, particularly regarding:

(a) Public health emergencies or health-related claims;

(b) Elections, voting procedures, or candidates for public office;

(c) Financial markets or investment opportunities; or

(d) Natural disasters, emergencies, or public safety matters.

7. Anti-Spam and Volume Restrictions

7.1. Prohibition on Unsolicited Bulk Calling

7.1.1. You must not use the Talkif platform to engage in unsolicited bulk calling (commonly referred to as "robocalling"). All campaigns must target recipients who have provided valid consent or with whom you have a qualifying business relationship as defined under applicable law.

7.1.2. "Bulk calling" in this context means any campaign targeting more than one recipient. This prohibition does not prevent legitimate campaign use where proper consent has been obtained for each recipient.

7.2. Contact List Requirements

7.2.1. All contact lists uploaded to or used on the Talkif platform must consist of contacts who:

(a) Have provided valid, documented consent to receive calls from you (as required under Section 3);

(b) Are existing customers or prospects with whom you have a legitimate, pre-existing business relationship; or

(c) Fall within a legally recognized exemption from consent requirements (e.g., calls for emergency purposes).

7.2.2. You must not upload contact lists that are:

(a) Scraped, harvested, or collected from websites, social media, or other public sources without the knowledge and consent of the individuals listed;

(b) Purchased from third parties without proper consent documentation establishing that each contact has consented to receive the type of calls you intend to place;

(c) Stolen, leaked, or obtained through data breaches or other unauthorized means; or

(d) Random or sequentially generated number lists.

7.3. Opt-Out and Unsubscribe

7.3.1. You must provide a clear and effective mechanism for call recipients to opt out of future calls during every automated call. This mechanism may include a verbal instruction (e.g., "Say 'stop' at any time to be removed from our calling list") or a DTMF keypress option.

7.3.2. You must honor all opt-out requests promptly. Recipients who opt out must be added to your internal Do Not Call list (see Section 3.2.1) and must not be contacted again unless and until they provide fresh consent.

7.3.3. Opt-out mechanisms must function correctly. Failure to process opt-out requests due to technical errors is not an acceptable excuse for continued calling.

7.4. Platform Rate Limits

7.4.1. The Talkif platform enforces per-account rate limits, concurrent call limits, and queue depth limits as described in the applicable service tier documentation. These limits exist for platform stability and to support compliance with applicable regulations.

7.4.2. You must not attempt to circumvent, override, or bypass platform-imposed rate limits through any means, including but not limited to:

(a) Creating multiple accounts to aggregate calling capacity;

(b) Distributing campaigns across multiple accounts to evade per-account limits;

(c) Exploiting API vulnerabilities to exceed rate limits; or

(d) Using BYOC integrations to bypass platform-level controls.

7.4.3. Platform rate limits are not a substitute for legal compliance. Even if the platform permits a given call volume, you remain responsible for ensuring that your calling practices comply with all applicable laws and regulations.

8. Data Protection and Contact Data Obligations

8.1. Lawful Basis for Processing

8.1.1. You are the data controller for all Contact Data you upload to or process through the Talkif platform. You are solely responsible for establishing and maintaining a valid lawful basis for the processing of Contact Data under all applicable data protection laws, including but not limited to the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA")/California Privacy Rights Act ("CPRA"), and the Turkish Personal Data Protection Law ("KVKK").

8.1.2. You represent and warrant that you have obtained all necessary consents, provided all required notices, and satisfied all legal requirements before uploading Contact Data to the Talkif platform.

8.2. Data Subject Rights

8.2.1. You must honor all data subject rights applicable under the laws governing your Contact Data, including but not limited to:

(a) Right of access -- the right of individuals to obtain confirmation of whether their data is being processed and to access such data;

(b) Right to rectification -- the right of individuals to have inaccurate data corrected;

(c) Right to erasure ("right to be forgotten") -- the right of individuals to have their data deleted when there is no compelling reason for its continued processing;

(d) Right to restrict processing -- the right of individuals to limit how their data is used;

(e) Right to data portability -- the right of individuals to receive their data in a structured, commonly used format;

(f) Right to object -- the right of individuals to object to data processing, particularly for direct marketing; and

(g) Right not to be subject to automated decision-making -- the right of individuals to not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

8.2.2. You must respond to data subject requests within the timeframes required by applicable law (e.g., thirty (30) days under GDPR, forty-five (45) days under CCPA). If you receive a data subject request that requires action by Talkif, you must promptly notify Talkif at the contact address specified in Section 15.

8.3. Prohibited Data Practices

8.3.1. You must not:

(a) Upload or process Contact Data for which you do not have a valid lawful basis;

(b) Upload Contact Data that you know or suspect was obtained through data breaches, theft, or other unlawful means;

(c) Sell, share, or transfer Contact Data obtained through the Talkif platform to third parties without a valid lawful basis and the knowledge of the affected individuals;

(d) Combine Contact Data from the Talkif platform with data from other sources in a manner that violates applicable data protection laws; or

(e) Process special categories of personal data (as defined under GDPR Article 9) or sensitive personal information (as defined under CCPA) through the Talkif platform without explicit consent and a clear lawful basis.

8.4. User Privacy Policy

8.4.1. You must maintain a publicly accessible privacy policy that accurately describes your use of the Talkif platform, including:

(a) The types of personal data you collect and process;

(b) The purposes for which you use the Talkif platform to contact individuals;

(c) The fact that you use an AI-powered calling platform;

(d) How individuals can exercise their data subject rights; and

(e) Your data retention practices.

9. Platform Integrity and Security

9.1. Prohibited Technical Activities

9.1.1. You must not:

(a) Attempt to gain unauthorized access to the Talkif platform, other users' accounts, or any systems or networks connected to the Talkif platform;

(b) Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, algorithms, or underlying architecture of the Talkif platform;

(c) Probe, scan, or test the vulnerability of the Talkif platform or any associated system or network without prior written authorization from Talkif;

(d) Interfere with or disrupt the integrity or performance of the Talkif platform, including by means of denial-of-service attacks, packet flooding, or other methods;

(e) Introduce malicious code, viruses, trojans, worms, or other harmful material to the Talkif platform;

(f) Use automated tools (bots, scrapers, crawlers) to access the Talkif platform in a manner not expressly authorized by Talkif; or

(g) Modify, adapt, or create derivative works based on the Talkif platform.

9.2. Circumvention of Controls

9.2.1. You must not attempt to circumvent any security, authentication, rate limiting, capacity, or access control mechanisms implemented by the Talkif platform. This includes but is not limited to:

(a) Bypassing account verification or authentication requirements;

(b) Manipulating API requests to exceed rate limits or quotas;

(c) Exploiting race conditions, timing vulnerabilities, or other technical weaknesses;

(d) Tampering with billing, balance, or usage tracking mechanisms; or

(e) Using multiple accounts to circumvent per-account restrictions.

9.3. Vulnerability Disclosure

9.3.1. If you discover a security vulnerability in the Talkif platform, you must report it to Talkif promptly at the contact address specified in Section 15. You must not exploit, publicize, or share information about any vulnerability before Talkif has had a reasonable opportunity to address it.

9.4. Account Security

9.4.1. You are responsible for maintaining the security of your account credentials, API keys, and any access tokens associated with your Talkif account. You must promptly notify Talkif of any suspected unauthorized access to your account.

9.4.2. You must not share account credentials or API keys with unauthorized parties. Use of the Talkif API must comply with the applicable API terms and rate limits.

10. Bring Your Own Carrier (BYOC) Responsibilities

10.1. Carrier Compliance

10.1.1. If you connect your own telephony carrier to the Talkif platform using the BYOC feature, you are solely responsible for ensuring that your carrier arrangement complies with all applicable telecommunications regulations, including but not limited to carrier licensing requirements, interconnection agreements, and numbering regulations.

10.1.2. You represent and warrant that you have the legal right to use the carrier services you connect to the Talkif platform and that your carrier agreement permits the type of traffic (including automated and AI-powered calls) that you intend to route through the Talkif platform.

10.2. SIP Credential Security

10.2.1. You are solely responsible for the security of your SIP credentials, IP addresses, and any authentication material used in connection with your BYOC integration. Talkif stores credentials provided by you to facilitate routing but does not assume responsibility for credential compromise resulting from your actions or omissions.

10.2.2. You must use strong, unique passwords for SIP authentication. You must promptly rotate credentials if you suspect any compromise.

10.3. Prohibited BYOC Uses

10.3.1. You must not use BYOC integrations to:

(a) Route calls through carriers for illegal purposes, including toll fraud, traffic pumping, or revenue sharing fraud;

(b) Bypass TCPA requirements or other calling regulations by routing traffic through offshore carriers;

(c) Circumvent Talkif's platform-level controls, rate limits, or content policies;

(d) Route traffic that would violate the acceptable use policies of your carrier or of Twilio (which provides the underlying BYOC trunk infrastructure); or

(e) Connect carriers that lack proper licensing or authorization for the jurisdictions in which calls will terminate.

10.4. Talkif's Right to Disconnect

10.4.1. Talkif reserves the right to disconnect or suspend any BYOC integration that, in Talkif's reasonable judgment, is being used in violation of this AUP, is causing harm to the platform or its users, or is generating complaints from carriers or regulatory authorities.

11. International Compliance

11.1. General Obligation

11.1.1. If you use the Talkif platform to place calls to recipients outside the United States, you are solely responsible for complying with the laws and regulations of the destination country regarding automated calling, telemarketing, call recording, data protection, and AI disclosure.

11.1.2. Talkif does not represent that use of its platform is lawful in any particular jurisdiction outside the United States. You must independently verify the legality of your intended use before placing international calls.

11.2. European Union and European Economic Area

11.2.1. If you place automated calls to recipients in the EU/EEA, you must comply with:

(a) The ePrivacy Directive (2002/58/EC) and its national implementations, which generally require prior consent for unsolicited automated calls. Most EU member states require opt-in consent for any automated or prerecorded marketing calls;

(b) The General Data Protection Regulation (GDPR), including requirements for lawful processing, transparency, data subject rights, and cross-border data transfers;

(c) The EU AI Act (Regulation (EU) 2024/1689), including transparency obligations for AI systems that interact with natural persons (see Section 5.3); and

(d) National telecommunications regulations that may impose additional requirements, such as registration with national telecom regulators or adherence to country-specific Do Not Call registries.

11.3. Republic of Turkey

11.3.1. If you place calls to recipients in Turkey or process personal data of individuals located in Turkey, you must comply with:

(a) The Law on the Protection of Personal Data (KVKK, Law No. 6698), including requirements for data processing consent, data subject rights, and registration with the Data Controllers Registry (VERBiS);

(b) The Law on the Regulation of Electronic Commerce (Law No. 6563), which governs commercial electronic messages including automated calls for commercial purposes;

(c) The Electronic Communications Law (Law No. 5809) and regulations issued by the Information and Communication Technologies Authority (BTK); and

(d) The Turkish Commercial Code provisions regarding unfair competition and misleading commercial practices.

11.4. United Kingdom

11.4.1. If you place calls to recipients in the United Kingdom, you must comply with the Privacy and Electronic Communications Regulations 2003 ("PECR"), the UK GDPR, and guidance issued by the Information Commissioner's Office ("ICO") regarding automated marketing calls.

11.5. Other Jurisdictions

11.5.1. Many other jurisdictions have enacted or are developing regulations governing automated calling, AI use, and data protection. You are responsible for identifying and complying with all regulations applicable to your calling activities, including but not limited to those of Canada (CASL, CRTC rules), Australia (Do Not Call Register Act, Spam Act), and any other countries to which you direct calls.

12. Monitoring and Enforcement

12.1. Talkif's Rights

12.1.1. Talkif reserves the right, but does not assume the obligation, to monitor use of the Talkif platform for compliance with this AUP. Such monitoring may include automated analysis of calling patterns, campaign metadata, complaint rates, and other usage metrics.

12.1.2. Talkif may, at its sole discretion, review call recordings, contact lists, flow configurations, and other account data when investigating potential AUP violations. You consent to such review as a condition of using the Talkif platform.

12.2. Enforcement Actions

12.2.1. Upon identifying a violation or suspected violation of this AUP, Talkif may take one or more of the following enforcement actions, depending on the severity and nature of the violation:

Tier 1 -- Warning:

(a) Written notification of the violation;

(b) Requirement to cure the violation within a specified timeframe (typically five (5) to thirty (30) business days depending on severity);

(c) Requirement to provide evidence of corrective measures taken.

Tier 2 -- Suspension:

(a) Temporary suspension of the offending feature, campaign, or service;

(b) Temporary suspension of the User's entire account;

(c) Reduction of rate limits or capacity allocations;

(d) Requirement to implement specific compliance measures before reinstatement.

Tier 3 -- Termination:

(a) Permanent termination of the User's account;

(b) Forfeiture of any prepaid balance remaining in the terminated account;

(c) Permanent ban of the User (and any affiliated individuals or entities) from the Talkif platform.

12.2.2. Immediate termination without prior warning may be imposed for severe violations, including but not limited to:

(a) Use of the platform for fraud, scams, or phishing;

(b) Impersonation of government agencies or law enforcement;

(c) Threats of violence or harm;

(d) Activity that results in legal action against Talkif;

(e) Activity that endangers the stability, security, or reputation of the Talkif platform;

(f) Activity that Talkif reasonably believes constitutes a criminal offense; or

(g) Repeated violations after prior warnings.

12.3. Reporting to Authorities

12.3.1. Talkif reserves the right to report any suspected illegal activity to applicable law enforcement agencies, regulatory bodies, or other relevant authorities, and to cooperate fully with such authorities in any resulting investigation or proceeding.

12.3.2. Talkif may report suspected TCPA violations to the FCC and/or FTC, suspected fraud to the FBI or relevant state attorneys general, and suspected data protection violations to applicable data protection authorities.

12.4. Indemnification

12.4.1. You agree to indemnify, defend, and hold harmless Talkif, its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to:

(a) Your violation of this AUP;

(b) Your violation of any applicable law or regulation;

(c) Any claim by a third party arising from calls you placed using the Talkif platform;

(d) Any regulatory fine, penalty, or sanction imposed on Talkif as a result of your actions; or

(e) Your Contact Data practices or the content of your automated calls.

13. Reporting Violations

13.1. If you become aware of any use of the Talkif platform that violates this AUP, you are encouraged to report it to Talkif at:

Email: abuse@talkif.ai

13.2. Reports may be made anonymously. Talkif will not retaliate against any User who makes a good-faith report of a suspected AUP violation.

13.3. When reporting a violation, please include as much detail as possible, including:

(a) The nature of the suspected violation;

(b) The identity of the violating account, if known;

(c) Any supporting evidence (call recordings, screenshots, timestamps); and

(d) The impact of the violation on you or others.

14. Changes to This Policy

14.1. Talkif reserves the right to modify this AUP at any time. Material changes will be communicated to Users via email to the address associated with their account and/or through a notice on the Talkif platform at least thirty (30) days prior to the effective date of the changes.

14.2. Your continued use of the Talkif platform after the effective date of any changes to this AUP constitutes your acceptance of the modified policy. If you do not agree with the changes, you must discontinue use of the platform and may request account closure.

14.3. Non-material changes (such as typographical corrections, formatting updates, or clarifications that do not alter the substance of any provision) may be made without prior notice.

15. Contact Information

For questions about this Acceptable Use Policy, to report violations, or to request clarification on any provision:

Talkif, Inc. 1111B S Governors Ave STE 23788, Dover, DE 19904 US

Appendix A: TCPA Quick Reference for Users

Note: This appendix is provided for informational convenience only and does not constitute legal advice. It does not override or supplement the obligations set forth in the body of this AUP. Consult qualified legal counsel for advice specific to your situation.

Appendix B: Two-Party Recording Consent States (Reference)

Note: This list is provided for informational convenience. Laws change frequently. Verify current requirements with qualified legal counsel before relying on this list.

This Acceptable Use Policy is effective as of the date set forth above and supersedes all prior versions.