Communications Compliance Addendum

Effective Date: July 1, 2026

Last Updated: July 1, 2026

Supersedes: This Addendum replaces the TCPA Compliance Addendum as the compliance document incorporated into the Agreement. The former TCPA Compliance Addendum is no longer published or incorporated by reference.

1. PURPOSE AND SCOPE

1.1 Incorporation by Reference. This Communications Compliance Addendum ("Addendum") supplements and forms part of the Talkif Terms of Service (the "Agreement"). In the event of conflict between this Addendum and the Agreement regarding calling-compliance matters, this Addendum controls.

1.2 Applicability. This Addendum applies to all use of the Talkif platform (the "Platform") to place or receive telephone calls, in any country. Telecommunications, telemarketing, consumer-protection, recording, AI-transparency, and data-protection laws generally apply based on where the called party is located — not where you are located. If you place calls into a jurisdiction, that jurisdiction's laws apply to those calls.

1.3 Why This Document Exists. The Platform places automated, AI-voiced telephone calls. Nearly every jurisdiction regulates automated calling, and many treat violations severely — including per-call statutory damages, regulatory fines, and in some cases criminal liability. This Addendum states, in one place, the obligations you accept when you use the Platform to call people.

1.4 Not Legal Advice. Talkif is not a law firm and this Addendum is not legal advice. It is a contractual allocation of responsibility together with a non-exhaustive orientation to the regulatory landscape. You are solely responsible for obtaining independent legal counsel for your specific use case, calling patterns, industry, and destination jurisdictions.

1.5 Evolving Law. Regulation of automated and AI-generated calling is actively evolving worldwide. You are responsible for monitoring and complying with changes in applicable law, whether or not this Addendum has been updated to reflect them.

2. ROLES AND RESPONSIBILITY MODEL

2.1 Talkif Is the Technology Provider. Talkif provides the software platform. Talkif does not determine the content, purpose, timing, or recipients of your calls, and does not initiate calls on its own behalf.

2.2 You Are the Caller. For purposes of every applicable calling regulation, you — the Customer — are the caller, sender, or initiator of every call placed through your account, and the data controller for the contact data you upload. All compliance obligations that attach to the caller attach to you.

2.3 Consequences of the Model. Because you are the caller:

(a) You must establish the lawful basis (consent or a recognized exemption) for every call before the call is placed;

(b) You must honor every opt-out, revocation, and do-not-call request directed at you;

(c) You bear the burden of proving, with records you maintain, that each call was lawful;

(d) You indemnify Talkif for claims arising from your calling activity, as set out in the Agreement and Section 8 of this Addendum.

2.4 Shared Interest, Not Shared Liability. Talkif provides technical controls that support compliance (Section 5) and monitors platform-level abuse signals (Section 6). These do not shift legal responsibility for your calls to Talkif, and Talkif's tools do not substitute for your own compliance program.

3. UNIVERSAL CUSTOMER OBLIGATIONS

The following obligations apply to every call placed through the Platform, to any destination. They reflect the common core of calling regulation worldwide; individual jurisdictions may impose stricter or additional requirements (Section 4).

3.1 Consent and Lawful Basis

(a) Obtain the level of consent (or confirm the exemption) required by the called party's jurisdiction before placing any automated or AI-voiced call. Where a jurisdiction distinguishes marketing from informational calls, marketing calls almost always require a higher consent standard — frequently prior express written consent or opt-in registration.

(b) Consent must be voluntary, informed, and specific to the number called. Do not condition a sale or service on consent to automated calls where the law prohibits it.

(c) Do not rely on consent obtained by a third party (lead generators, purchased lists, data brokers) without verifying that the consent is valid, current, and covers calls by you using automated/AI-voice technology.

(d) Treat consent as revocable at any time, through any reasonable means. Once revoked, stop calling — a call placed after revocation is a violation regardless of the original consent.

(e) Verify, on a reasonable cadence, that numbers have not been reassigned to a different person since consent was obtained.

3.2 Do Not Call and Opt-Out

(a) Maintain an internal do-not-call list of everyone who has asked you not to call, and suppress it against every call, campaign, and schedule. The Platform provides per-account DNC list management with automatic call suppression; using it does not relieve you of your legal record-keeping obligations.

(b) Where the destination jurisdiction operates a national or regional do-not-call registry, scrub your contact lists against it on the legally required cadence before uploading or calling.

(c) Provide a working opt-out mechanism in every automated call (for example: "say 'stop' or press a key to be removed from our calling list") and process opt-outs within the timeframe the destination jurisdiction requires — immediately where feasible.

3.3 Calling Hours

(a) Do not place calls outside the calling hours permitted in the called party's local time zone. Restrictions vary by jurisdiction and sometimes by day of week.

(b) Configure the Platform's campaign calling-window and contact-timezone controls accordingly, and apply the strictest restriction that could apply to your contact list. A conservative default of 09:00–20:00 local time on weekdays satisfies most regimes; verify for your destinations.

3.4 Caller Identification

(a) Transmit accurate caller ID on every call, using a number assigned to or controlled by you that can receive return calls. Caller ID spoofing and misleading caller identification are prohibited everywhere the Platform operates and are grounds for immediate termination.

(b) Identify yourself (or your business) at the beginning of every call, and provide a means for the called party to reach you.

(c) If you connect your own carrier (BYOC), you are responsible for your carrier's caller-ID handling and its participation in applicable caller-authentication frameworks.

3.5 AI Disclosure

(a) All calls placed through the Platform use AI-generated voice. A growing number of jurisdictions require that people be told they are interacting with an AI system. Configure your call flows to disclose the AI nature of the call where required — and as a best practice, everywhere.

(b) Never configure an AI agent to claim to be human when asked. Talkif treats affirmative misrepresentation of AI as human as a violation of the Acceptable Use Policy regardless of local law.

(c) Never use the Platform to imitate a specific real person's voice or identity without that person's documented consent.

3.6 Call Recording

(a) If you enable recording, comply with the interception and recording-consent laws of every jurisdiction where a party to the call may be located. Many jurisdictions require the consent of all parties.

(b) Because a called party's actual location often cannot be determined in advance (mobile numbers travel), the only reliable approach is to announce recording at the start of every recorded call and proceed only on that basis. Talkif strongly recommends this "announce everywhere" approach.

(c) You are responsible for the retention, protection, and lawful use of your recordings, and for deleting them when the law or a recorded party validly requires it.

3.7 Records and Burden of Proof

(a) Maintain records sufficient to prove, for every call: the lawful basis (consent record or exemption), the DNC scrub status of the list, and the handling of any opt-out — for at least as long as the destination jurisdiction's statute of limitations and record-keeping rules require (five years is a common conservative benchmark).

(b) The Platform's call and campaign records document that calls were placed; they are not consent records. Maintain consent evidence in your own systems.

(c) On notice of any complaint, investigation, or litigation, preserve all related records immediately.

3.8 Content and Conduct

Calls placed through the Platform must also comply with the Acceptable Use Policy, including its prohibitions on fraud, impersonation, harassment, emergency-number calling, and unlawful content — in every jurisdiction.

4. JURISDICTIONAL NOTES (NON-EXHAUSTIVE)

The notes below orient you to prominent regimes. They are not a complete statement of any jurisdiction's law, and the absence of a jurisdiction from this list does not mean it is unregulated. You must verify the current law of every jurisdiction you call.

4.1 United States. The Telephone Consumer Protection Act (TCPA) and FCC rules treat AI-generated voice as "artificial or prerecorded voice," requiring prior express consent for automated calls and prior express written consent for telemarketing. Additional obligations include the National Do Not Call Registry (31-day scrub cadence), internal DNC processing within 10 business days, federal calling hours (8 AM–9 PM local), truthful caller ID, and in-call identification and opt-out mechanisms. Statutory damages are $500–$1,500 per call with no aggregate cap, enforced through a private right of action and frequent class actions; regulators may impose additional forfeitures. Many US states impose stricter rules — including all-party recording consent, tighter calling hours, telemarketer registration, state DNC lists, and AI/bot disclosure statutes. US calling at scale warrants dedicated legal review.

4.2 European Union / EEA. The ePrivacy Directive (as implemented nationally) generally requires prior opt-in consent for automated marketing calls. The GDPR governs the processing of call recipients' personal data (you are the controller; see the DPA). The EU AI Act requires that people be informed when they interact with an AI system and that synthetic audio be disclosed. Several member states also operate national opt-out registries and telecom-regulator rules.

4.3 United Kingdom. The Privacy and Electronic Communications Regulations (PECR) and UK GDPR apply, with enforcement by the ICO; automated marketing calls require prior consent, and the TPS (Telephone Preference Service) registry must be respected.

4.4 Canada. CRTC Unsolicited Telecommunications Rules and the National Do Not Call List govern telemarketing; CASL applies to certain electronic messages; PIPEDA governs personal data.

4.5 Australia. The Do Not Call Register Act and Telemarketing Industry Standard restrict unsolicited calls and calling hours; the Privacy Act governs personal data.

4.6 Turkey. The Law on the Regulation of Electronic Commerce (No. 6563) requires prior approval (opt-in via the İYS system) for commercial electronic communications including automated calls; KVKK (No. 6698) governs personal data.

4.7 Everywhere Else. Most jurisdictions regulate at least one of: unsolicited/automated calling, calling hours, caller ID, call recording, AI disclosure, or personal-data processing. Before calling a new country, verify all six.

5. PLATFORM COMPLIANCE TOOLS

5.1 What the Platform Provides. Talkif provides technical controls that support — but do not constitute — compliance:

(a) Calling windows — per-campaign earliest/latest calling times, with optional evaluation in each contact's local time zone, and day-of-week restrictions;

(b) Do-not-call suppression — a per-account internal DNC list with automatic suppression across calls, campaigns, and schedules, an auditable request trail, and bulk import;

(c) Opt-out handling — in-campaign contact skip/opt-out status so opted-out contacts are excluded from further dialing;

(d) Rate and concurrency limits — per-account limits on calls per minute and concurrent calls, which also serve as abuse mitigation;

(e) Caller ID controls — support for verified caller IDs through our telephony providers;

(f) Call records — durable records of call metadata for audit purposes;

(g) Campaign controls — pause, resume, and stop for every campaign;

(h) Configurable retention — account-level retention windows after which call PII and recordings are automatically removed (see the Privacy Policy).

5.2 What the Platform Does NOT Do. Talkif does not:

(a) Verify that you obtained consent from called parties;

(b) Scrub your lists against any national or state do-not-call registry;

(c) Validate that your call flows contain legally required disclosures;

(d) Classify your calls as marketing or informational;

(e) Guarantee that calling-window configuration will prevent every out-of-hours call (for example, where contact timezone data is inaccurate);

(f) Obtain telemarketer registrations or licenses on your behalf.

5.3 Configuration Is Your Responsibility. The tools in Section 5.1 are effective only when configured correctly for your destinations. Misconfiguration does not excuse a violation.

6. MONITORING AND ENFORCEMENT

6.1 Compliance Signals. Talkif may monitor platform-level signals — call volumes and patterns, complaint rates received through carriers or called parties, abnormal answer rates, and regulator or carrier inquiries — for indications of non-compliant calling.

6.2 Compliance Inquiry. If Talkif identifies a credible compliance concern, Talkif may require you to produce, within five (5) business days: consent evidence for a sample of called parties, evidence of registry scrubbing for the relevant campaign, and a description of your compliance program. Failure to respond credibly is grounds for suspension.

6.3 Suspension and Termination. Talkif may suspend or terminate access — immediately for severe cases — where Talkif reasonably believes your calling violates applicable law or this Addendum, consistent with the Terms of Service and Acceptable Use Policy. Talkif may restrict calling hours, volumes, destinations, or campaign sizes as a proportionate intermediate measure.

6.4 Cooperation with Authorities. Talkif cooperates with telecommunications and data-protection regulators and law enforcement, and may provide call records and account information in connection with investigations, consistent with applicable law and the Privacy Policy.

7. REPRESENTATIONS AND WARRANTIES

You represent, warrant, and covenant that:

(a) You will obtain and document the lawful basis for every call before it is placed;

(b) Your contact lists were lawfully obtained, and contain no scraped, harvested, purchased-without-consent, or randomly generated numbers;

(c) You will honor opt-outs, revocations, and do-not-call requests within legally required timeframes;

(d) You will comply with the calling-hour, caller-ID, AI-disclosure, and recording-consent requirements of every destination jurisdiction;

(e) You hold all registrations and licenses required for your calling activity;

(f) You will maintain and produce on request the records described in Section 3.7.

8. LIABILITY AND INDEMNIFICATION

8.1 Your Liability. As the caller, you bear primary liability for violations of calling and data-protection law arising from your use of the Platform. In some regimes this exposure is uncapped and accrues per call (see Section 4.1 for the US example).

8.2 Indemnification. You will indemnify, defend, and hold harmless Talkif and its officers, directors, employees, and agents from and against all third-party claims, regulatory actions, damages, and expenses (including reasonable attorneys' fees) arising from your calling activity, your contact data practices, or your breach of this Addendum, as further set out in the Terms of Service.

8.3 No Shift by Tooling. Talkif's provision of compliance tools, monitoring, or guidance does not create any duty to detect your violations and does not shift liability for your calls to Talkif.

9. GENERAL

9.1 Amendments. Talkif may update this Addendum to reflect regulatory change with notice as provided in the Terms of Service.

9.2 Governing Law and Disputes. This Addendum is governed by the governing-law and dispute-resolution provisions of the Terms of Service.

9.3 Contact. Questions about this Addendum: legal@talkif.ai. Abuse reports: abuse@talkif.ai.

RELATED DOCUMENTS