Acceptable Use Policy

ATONOM ACCEPTABLE USE POLICY

Last Updated: September 15, 2026

This Acceptable Use Policy ("AUP") applies to customers ("you" or "Customer") using products or services ("Services") provided by Chat Funnels, LLC dba Atonom and its affiliates ("Atonom"), and to users of the Services ("Users"). Users include anyone who receives, interacts with, or is contacted through communications sent or facilitated by you or your Cloud Employees using the Services ("End Users").

This AUP forms part of your Agreement with Atonom. Capitalized terms not defined here have the meanings given in the Agreement. The Terms control any conflict unless they expressly state otherwise. Indemnification and liability are governed by Sections 9 and 10 of the Terms. Personal data processing is governed by the DPA, as explained in Section 6 below.

The prohibited activities below are examples, not an exhaustive list. Your responsibilities for Users and End Users are described in Section 7. Violations may result in enforcement under Section 8 and the Agreement.

1. Prohibited Activities

You must not use the Services to engage in, facilitate, permit, or encourage illegal, deceptive, or harmful activity, violate others' rights, or harm Atonom's business operations or reputation. Prohibited activities include:

Violations of Laws or Standards. Violating applicable laws, regulations, governmental orders, industry standards, or telecommunications provider or messaging platform requirements or guidance. These include rules on consent to transmit, record, collect, or monitor communications; opt-outs; lawful processing of personal and sensitive data under the DPA; and age verification, children's privacy, and content protections.

Falsification of Identity or Origin. Creating a false identity, spoofing, or misleading others about the sender or origin of a call, message, or other communication, including false or deceptive caller ID or header information.

Fraud and Deception. Offering fraudulent goods, services, schemes, or promotions, including make-money-fast, Ponzi, or pyramid schemes, or engaging in phishing, pharming, harvesting, or similar deception.

Harmful or Objectionable Content. Transmitting or making available any material that is unlawful, harassing, libelous, defamatory, abusive, threatening, harmful, vulgar, obscene, hateful, or racially, ethnically, or otherwise objectionable, or that encourages conduct that could constitute a criminal offense or give rise to civil liability.

Unauthorized Voices and Likeness. Using an AI voice, voice clone, or likeness without the necessary legal and licensed rights, or using a real person's voice or likeness (or a deceptively similar one) without that person's consent or for an unauthorized purpose.

Infringement. Infringing or misappropriating the intellectual property, privacy, publicity, or other rights of Atonom or any third party.

2. Messaging and Communications Requirements

Voice calls, text messages (SMS/MMS), emails, chat, and messages through third-party platforms are "Communications." You must comply with applicable communications laws and industry requirements, including the TCPA and FCC rules, the Telemarketing Sales Rule, Do-Not-Call requirements, CAN-SPAM, state laws, CTIA messaging standards, carrier and 10DLC requirements, and platform rules.

Consent. You must obtain all legally required consents, including prior express written consent where required, before you or your Cloud Employees send a Communication. You must ensure that consent remains valid and has not been revoked when each Communication is sent. You must keep complete, accurate consent records for at least five years or longer if required by law. Records must show the consenting person's identity, the date, time, and method of collection, and the exact consent language presented.

Do Not Call. You must not make calls or send texts prohibited by applicable National, state, or internal do-not-call rules. An exception to National or state registry restrictions does not override an individual's do-not-call request or consent revocation. An existing business relationship does not replace consent required for AI or other artificial-voice marketing calls.

Opt-Outs and Revocation. You must honor opt-out and consent-revocation requests made by any reasonable means as soon as practicable, and within any shorter deadline required by law, carrier, or platform rules. For calls, texts, and commercial emails, the deadline must not exceed ten business days. You must apply each request to the communications it covers, including other channels or message categories when required by law or the request. You must not send further Communications covered by the request unless legally permitted; labeling a message "transactional" does not by itself create an exception.

You must include clear opt-out instructions in initial messages and on request. You must honor standard keywords, including STOP, QUIT, CANCEL, END, REVOKE, OPT OUT, and UNSUBSCRIBE, and other reasonable methods. You must respond to HELP requests with your identity, customer-service contact information, and opt-out instructions. You must maintain suppression lists, keep them synchronized with the Services, and give Atonom the current opt-out information needed to help enforce them. For outbound AI voice calls and texts, you must check applicable federal, state, and internal do-not-call lists at least every 31 days, or more often if required by law.

Required Disclosures. You must clearly provide disclosures required by law, including your identity; use of AI or automated technology; message purpose and frequency; opt-out instructions; applicable message and data rates; and, where required, that consent is not a condition of purchase. You must implement any additional notices required by applicable industry standards or platform rules.

Calling and Recording. You must configure calling hours and recording, monitoring, and consent settings to comply with applicable law. You must provide required recording notices and obtain required consents before recording or monitoring a call.

Email. You must use accurate sender, routing, and subject-line information. You must identify commercial email as advertising where required, include a valid physical postal address, and provide a clear, working unsubscribe method that remains available for at least 30 days after sending. You must honor unsubscribe requests as required above.

Domain Authorization. You must use only domains, subdomains, and email addresses you are authorized to use. You must complete domain and sender verification required by Atonom or its providers, including SPF, DKIM, and DMARC where required.

Domain Reputation and Oversight. Cold outreach, mass email, and automated campaigns can affect deliverability, domain reputation, and sender scores. You are responsible for reviewing and configuring outreach limits, targeting, and sending schedules for your campaigns.

Data Sourcing and Enrichment. You must ensure that your use of recipient lists, prospect data, and enriched data is lawful and that you have any required consent before using them for outreach, including data obtained through Atonom or third-party providers. You must comply with applicable vendor terms and API limits. Atonom's use of subprocessors remains subject to the DPA.

Third-Party Platforms. You must comply with the terms, acceptable use policies, usage limits, and API requirements of third-party services and messaging platforms used with Cloud Employees, including Slack. Providers may restrict or suspend accounts for violations of their rules.

Prohibited Message Content. You must not send Communications that contain or promote content prohibited by wireless carrier policies or industry messaging standards, including unlawful content and, except where expressly permitted by carrier guidelines and applicable law, content relating to sex, hate, alcohol, firearms, tobacco, cannabis, prescription pharmaceuticals, or controlled substances, or unauthorized financial, medical, or legal services.

3. Service Integrity and Security

You, your Users, and End Users must not directly or indirectly:

Bypass Service Limitations. Attempt to bypass, exploit, defeat, or disable any limitation, restriction, security, authentication, or filtering measure placed on the Services, including any Usage Limits.

Probe or Exploit Vulnerabilities. Probe, scan, or test the vulnerability of the Services, or attempt to breach or circumvent any security mechanism or filtering capability.

Disrupt the Services. Conduct any denial-of-service (DoS) attack or otherwise transmit traffic or requests intended or reasonably likely to disrupt, disable, degrade, or overload the Services or the networks or facilities used to provide them, or otherwise interfere with any third-party networks linked to the Services.

Harmful Code or Bots. Transmit any harmful code, files, scripts, agents, or programs, including viruses or malware, or use any bot, scraper, crawler, or other automated means to access, query, or use the Services except through interfaces and credentials expressly authorized by Atonom.

Unauthorized Access. Attempt to gain unauthorized access to the Services, accounts, systems, or networks.

Reverse Engineering. Reverse engineer, copy, disassemble, or decompile the Services or any Atonom Technology, except to the extent this restriction is expressly prohibited by applicable law (in which case you must provide thirty (30) days' prior written notice to Atonom in accordance with the Terms, informing Atonom of your intention to perform any of the foregoing activities, and describing in reasonable detail your legal basis for doing so).

4. Usage Limits and Fair Use

Subject to the Agreement, Atonom may set and adjust reasonable usage, volume, rate, and throughput limits ("Usage Limits") to protect the Services' integrity, security, availability, and deliverability, and to meet legal and provider obligations or maintain provider relationships. Limits may apply per account, Cloud Employee, originating number, sending domain, workspace, or time period. Applicable limits will be available through the Online Order Center, Documentation, or account settings. You must not exceed or circumvent them.

5. Artificial Intelligence Use

Disclosure and Transparency. You must ensure End Users receive the AI and automation disclosures required under Section 2 and applicable law, including disclosure that they are communicating with a Cloud Employee or automated system where required.

AI Outputs and Oversight. AI can produce inaccurate, incomplete, or inappropriate responses. Atonom does not guarantee that outputs will be error-free or accurate. You must maintain appropriate human oversight, monitoring, and intervention under Section 3.6 of the Terms and comply with the restrictions and authorization requirements in Section 3.7.

6. Data Safeguards

Before using the Services to process data or Communications, you must determine whether their safeguards meet your needs and applicable legal requirements. You are responsible for the accuracy, quality, legality, and appropriateness of data and content you submit or transmit. The Data Processing Addendum ("DPA") governs Atonom's processing of personal data on your behalf. The DPA controls conflicts concerning personal data processing, and nothing in this AUP limits or changes it.

7. Customer Responsibility for Users and End Users

You are responsible for activity through your account and for your Users' and End Users' acts and omissions in connection with the Services. You must make them aware of, and ensure their compliance with, the AUP requirements that apply to them.

8. Enforcement and Suspension

Atonom may, but is not required to, monitor use of the Services and Communications volumes and patterns for compliance, security, deliverability, and operational purposes. Atonom may investigate suspected violations and, under Section 5.2 of the Terms, immediately throttle, filter, suspend, or disable affected Communications or access as reasonably necessary to comply with law, address unlawful use, a material security risk, or harm to the Services or others, or meet applicable carrier or platform requirements.

Atonom will promptly notify you, limit the scope and duration of restrictions to what is reasonably necessary, and restore access when the issue is resolved, unless law prohibits notice or restoration. Termination is subject to Section 5.2 of the Terms, including applicable notice and cure requirements. Payment obligations during any restriction or suspension remain governed by the Agreement.

9. Changes to this AUP

Atonom may update this AUP under Section 11.10 of the Terms, including its notice, effective-date, and acceptance requirements. Updated versions will be available through the Online Order Center or the Services.