VoiceRun Acceptable Use Policy

This Acceptable Use Policy (AUP) sets rules for use of the VoiceRun Services under an agreement that incorporates it. For enterprise Services, the applicable version is incorporated through a mutually executed Order Form and the Enterprise Services Agreement. Publication alone does not amend a separate self-service agreement or authorize an unpurchased Service. Capitalized terms have the meanings given in the applicable agreement.

1Responsibility for use

Customer must comply with this AUP and ensure compliance by its Authorized Users, participating Affiliates and other persons to whom Customer grants access to the Services. Customer must not direct, enable or knowingly permit prohibited use through its applications or workflows. Customer must communicate relevant restrictions to those users, maintain reasonable controls against abuse, and promptly address prohibited activity that it discovers or that VoiceRun brings to its attention. Receiving an unsolicited inbound call does not by itself make Customer responsible for the caller's misconduct.

2Lawful communications and consent

Customer must comply with laws applicable to its calls and other communications, including applicable telemarketing, automated dialing, artificial or prerecorded voice, do-not-call, calling-time, identification and recording requirements. In the United States, these include the Telephone Consumer Protection Act, applicable FCC rules, the Telemarketing Sales Rule and state requirements, to the extent applicable to the activity. Customer must also comply with applicable carrier and network-use requirements communicated by VoiceRun or the carrier for the purchased Services.

Before initiating a communication or recording, transcribing or monitoring it, Customer must obtain any required consent, provide required notices and have a lawful basis for the activity. Customer must maintain evidence of required consent and honor applicable national, state and customer-specific do-not-call restrictions, revocations of consent and opt-out requests. Customer must not evade these requirements by changing numbers, accounts, calling routes or service providers. An existing customer relationship, a purchased contact list or use of an AI voice does not by itself establish permission to call.

Customer must identify the calling business and purpose, provide required AI or automated-agent disclosures, and offer any legally required opt-out mechanism. Customer must configure its workflows to honor these requirements and stop further communications where permission has been withdrawn or contact is otherwise prohibited. VoiceRun remains responsible for implementing any disclosure, consent or opt-out functionality expressly included in its agreed scope.

3Fraud impersonation and voice rights

The Services must not be used for scams, phishing, extortion, fraudulent transactions, unlawful surveillance, or deceptive collection of credentials, money or personal information. Customer must not falsely claim to represent a government agency, business or individual, or mislead a recipient about the source or authorization of a communication.

Customer must have the rights, permissions and any consent required to use a person's voice, likeness, recordings or other protected material. Cloning or materially imitating an identifiable person's voice without that person's authorization is prohibited. Customer must not use a synthetic or cloned voice to deceive a recipient about who is speaking or whether the speaker has authorized the communication. An authorized synthetic persona or disclosed AI agent is permitted when used lawfully and within the purchased scope.

Customer must use only telephone numbers and caller identification it is authorized to use. Deceptive caller-ID spoofing, impersonation of an emergency service, manipulation of origin information to evade blocking, and attempts to bypass consent or fraud controls are prohibited.

4Abuse and service integrity

Customer must not use the Services to create, generate, solicit, distribute, transmit or otherwise facilitate sexual content involving minors, including child sexual abuse material or sexualized depictions of minors, whether real, fictional or AI-generated. Any use that promotes or facilitates child sexual abuse, exploitation or grooming is prohibited.

Customer must not use the Services for unlawful threats, harassment, exploitation, discriminatory conduct, or communications that infringe privacy, intellectual property or other rights. Customer must not conduct abusive repeated calling, artificial traffic generation, toll fraud, traffic pumping, or campaigns designed to overwhelm recipients, emergency systems or communications networks. Bulk or automated use is not prohibited merely because it is automated; it must be lawful, authorized and within agreed capacity and use limits.

Customer must not introduce malware, attempt unauthorized access, obtain another customer's data, evade authentication or billing controls, disable security protections, or conduct denial-of-service attacks. Customer must not bypass purchased usage limits through unauthorized accounts or technical circumvention. Reverse engineering and intrusive testing remain subject to the Agreement and any rights that applicable law does not permit the parties to restrict. Ordinary authorized integration, internal functional testing and use of documented APIs are permitted.

5Data safeguards and restricted configurations

Customer must use the Services only for data and activities supported by the purchased scope and agreed safeguards. Customer must not submit data obtained unlawfully or direct VoiceRun to process it without the necessary rights and instructions. Customer must not submit protected health information subject to HIPAA to VoiceRun except as permitted by the HIPAA provisions of the Enterprise Services Agreement and an executed Business Associate Agreement covering the relevant Services and configuration.

Emergency-use restrictions and product-specific limitations in the Enterprise Service Specific Terms continue to apply. This AUP does not establish a certification, authorize a regulated use case, or replace the parties' data-protection, confidentiality or no-training obligations.

6Reports and cooperation

Customers should report suspected abuse promptly through the support channel supplied during onboarding or identified in their Order Form. A person who is not a customer may use the contact options on the VoiceRun website and identify the report as an abuse report. Include the approximate time and time zone, relevant calling numbers or service identifiers, and a description of the activity. Do not include passwords, payment credentials, PHI or unnecessary personal information; VoiceRun may arrange a secure way to provide additional evidence if needed.

Customer must reasonably cooperate with investigations of suspected abuse, including providing relevant consent records and technical information lawfully available to it, and taking reasonable steps to stop or prevent recurrence. Any access to or disclosure of Customer Data remains subject to the Agreement and applicable law. VoiceRun need not await a court or regulator's finding before enforcing this AUP on reasonable evidence.

7Enforcement and changes

VoiceRun may require remediation and, where it reasonably determines that a material violation has occurred or is ongoing, restrict or suspend the affected use under the Enterprise Services Agreement's protective-suspension provisions. Where practicable, VoiceRun will explain the issue and provide an opportunity to remedy it before suspension. Immediate action may be taken where reasonably necessary to prevent ongoing fraud, material harm, a security threat or network disruption, or to comply with law or a binding carrier or regulatory requirement. Restrictions must be proportionate to the issue, and affected access will be restored promptly when the basis for the restriction ends.

Termination, fees and remedies remain governed by the Agreement. This AUP does not introduce a separate indemnity, liability cap or right to reuse Customer Data. Changes to an enterprise customer's incorporated AUP follow the Enterprise Services Agreement's version and notice protections; posting a new policy does not by itself replace the version governing an existing committed Order.