Our acceptable use policy

Last updated: July 30, 2026

This Acceptable Use Policy (the “Policy”) applies to Tychron Corporation and all of its affiliated entities, which do business as Tychron (“Tychron”). This Policy sets forth activities prohibited by Tychron to users of Tychron’s services (the “Services”). This Policy applies to each Customer (the “Customer”) of Tychron and any users gaining access to the Services through a Customer (i.e., collectively with the Customer, “Users”). All capitalized terms not otherwise defined herein are as defined in the Customer’s agreement(s) (“Agreement”) with Tychron.

1. Purpose. This Policy is designed to assist in protecting the Services provided by Tychron, the Tychron network, Users of the network, the Internet, and the Internet community as a whole from improper service use and/or illegal activity. Any activities contrary to or in violation of this Policy are prohibited.

2. Prohibited Activities. A User’s failure to comply with this Policy constitutes a violation by the Customer as determined in Tychron’s sole discretion (“Violation”), with each such failure constituting a separate Violation. A Violation of this Policy may result in suspension or termination of Service and/or termination of the Customer’s Agreement, as described below. Customers shall immediately notify Tychron if they know or have a reasonable suspicion that a User of the Services is using them in Violation of this Policy. Customers shall contractually require that all Users comply with this Policy. Prohibited activities include, without limitation, the following:

2.1 Illegal Use. Use of the Services in violation of any law is prohibited. This includes but is not limited to violations of, e.g., the Telephone Consumer Protection Act, telephone slamming, or the like. Any use of the Services for the transmission, distribution, retrieval, or storage of material (“Transmission”) that violates any law or is in furtherance of any criminal enterprise is prohibited, including, without limitation, the following: (i) Intellectual Property – unauthorized Transmission of material protected by patent, copyright, trade secret, or other intellectual property rights (including, without limitation, the Digital Millennium Copyright Act); (ii) Inappropriate content – any Transmission of material that is obscene or constitutes child pornography, material that is libelous, defamatory, hateful, or that constitutes an illegal threat or abuse; (iii) Export control – Unauthorized Transmission of any material that may violate export control laws or other regulations; (iv) Forging of Headers – misrepresenting or forging message headers to mask the originator of a message; (v) CAN-SPAM ACT – failure to comply with all provisions of the CAN-SPAM Act (15 U.S.C. 7701, et. seq., and 16 C.F.R. Part 316) or (vi) Use of Tychron provided TNs – Telephone Numbers provided by Tychron may not be used by Customers or any downstream customers in use related to illegal robocalls, spam calls or messages, or any call or spam intended to harass, defraud, or steal money or information from the receiving caller.

2.2 Services and Network Security. Tychron makes no guarantee regarding, and assumes no liability for, the security and integrity of any data or information transmitted by a User over the Internet. Use of the Services is subject to the Communications Assistance for Law Enforcement Act (CALEA). Any attempt to breach system and network security measures is a Violation and may result in criminal and civil liability. These Violations include, without limitation, the following: (i) Unauthorized Access – Users may not attempt to gain unauthorized access to or attempt to interfere with the normal functioning and security of Tychron’s network or any other system, computers, accounts, or networks or purposely breach firewalls or security measures of another company’s or individual’s system (hacking); (ii) Unauthorized Monitoring – Users may not attempt to monitor any information on any network or system without authorization from the network administrator; (iii) Interference – Users may not attempt to intercept, redirect or otherwise interfere with communications intended for others; (iv) Fraud/Forgery – Users may not impersonate another party by altering IP addresses or forging TCP-IP packet header information within an e-mail or newsgroup posting; (v) “Denial of Service Attacks” – Users may not cause or further a denial of service attack or otherwise flood or attempt to overload a system; (vi) Virus Transmission– Users may not intentionally or negligently transmit files containing a computer virus, Trojan Horse, worms, corrupted data, or other destructive activities.

2.3 E-mail and Usenet News. The Customer agrees that it shall be responsible for monitoring the use of the Service and that Tychron shall not be obligated to monitor such use. Customer agrees that the following uses are Violations: (i) Unsolicited E-mail – the Customer may not allow the Services to be used to transmit SPAM or collect the responses from excessive volumes of unsolicited commercial e-mail messages. “SPAM” shall mean unsolicited bulk e-mails sent to a recipient where: (a) the recipient’s personal identity or context are irrelevant because the message is equally applicable to other potential recipients and (b) the recipient has not verifiably granted deliberate, explicit, and still-revocable permission for it to be sent. The use of another provider’s service to send unsolicited commercial or bulk e-mails, SPAMs or mass mailings to promote a site hosted on or associated with the Services is similarly prohibited; (ii) E-mail Relay – the use of another party’s e-mail server to relay e-mail without express permission from such party is prohibited; (iii) Usenet – all postings by Users to USENET groups must comply with that group’s charter and other applicable guidelines and Policy. Cross-posting and continuous posting of off-topic messages, including commercial messages, is prohibited; (iv) Bulk e-mail – the Customer shall not allow the Service to be used to send bulk e-mails unless the recipient of such e-mail has verifiably confirmed permission for the address to be included on the specific mailing list by confirming (responding to) the list subscription request verification (“Closed-Loop Opt-In”); and (v) Blacklisted IP-Address – the Customer may not allow an IP-Address that is registered to Tychron and used by the Customer to become blacklisted, banned or blocked by a third-party that monitors improper, or illegal use of the Internet.

2.4 Complaints. If Tychron receives any complaints from third parties with respect to a User’s use of the Services (“Complaints”), the Customer shall, within twenty-four (24) hours, respond to such Complaints to the reasonable satisfaction of Tychron and any failure to respond shall be deemed a Violation authorizing Tychron to take any of the actions described in Section 4. In addition, in the event Tychron receives more than five (5) Complaints in a one-month period or more than ten (10) Complaints in any ninety-day period, it shall be deemed a Violation authorizing Tychron to take any of the actions described in Section 4.

In the event that Tychron has a good faith suspicion that the Customer is in violation of Section 2, the Customer shall, within twenty-four hours of a request by Tychron, provide to Tychron a copy of any Transmission or e-mail that caused such suspicion or generated a Complaint as well as the underlying consent by the recipient to receive such Transmission or e-mail, provided that, the Customer shall take appropriate action to protect the privacy of the recipient.

2.5 Messaging Compliance and Consumer Consent. Use of the Services for application-to-person (“A2P”) messaging is subject to the CTIA Messaging Principles and Best Practices, the codes of conduct of the U.S. mobile carriers, the requirements of The Campaign Registry (“TCR”), and applicable law including the TCPA and FCC regulations. Without limiting Section 2.1, the following are Violations: (i) Unregistered A2P Traffic – transmitting A2P messaging over 10-digit long codes without a registered and approved TCR campaign, or outside the scope of the registered use case; (ii) Messaging Without Consent – sending messages without the level of consumer consent required for the content transmitted (including express written consent for marketing), using purchased, rented, or shared opt-in lists, or enrolling a consumer in more than one messaging program from a single opt-in; (iii) Failure to Honor Opt-Outs – failing to honor STOP or other opt-out requests, including revocation made by any reasonable means, within the timelines required by FCC rules; (iv) Prohibited Messaging Content – transmitting content prohibited on 10DLC by carrier codes of conduct, including, without limitation, substances illegal at the federal level (including cannabis and CBD), phishing, smishing, or impersonation, SHAFT-category content without robust age verification, high-risk financial offers, lead generation or affiliate marketing, and deceptive or evasive practices such as snowshoeing, number rotation, or URL cycling; (v) Consent Records – failing to retain records of consumer opt-in and opt-out sufficient to evidence consent — from the date of opt-in until at least six months after opt-out per CTIA guidelines, with Tychron recommending retention for four years after the last message — and to produce them in accordance with Section 2.4; (vi) A2P Misclassification and Route Evasion – disguising A2P traffic as P2P or conversational messaging to evade registration, vetting, or carrier review, or delivering messages over grey, off-net, or otherwise unauthorized routes, whether domestic or international; and (vii) Platform Program Policies– violating the program policies of the messaging platforms over which traffic is delivered, including Google's RCS Business Messaging policies and applicable verified-sender and branded-messaging program requirements.

2.6 Voice Calling Compliance. Use of the Services for voice calling is subject to applicable law and industry authentication frameworks. Without limiting Section 2.1, the following are Violations: (i) Calls Without Required Consent– placing calls that require prior express consent (or prior express written consent) under the TCPA and FCC regulations — including autodialed, prerecorded-voice, or artificial-voice calls (which include AI-generated voice) — without that consent, or contrary to the recipient's revocation of consent; (ii) Caller ID Spoofing – transmitting misleading or inaccurate caller ID information with the intent to defraud, cause harm, or wrongfully obtain anything of value, in violation of the Truth in Caller ID Act; (iii) Do-Not-Call Compliance – placing telemarketing calls to numbers on the National Do Not Call Registry or applicable state registries absent an exemption, or failing to honor company-specific do-not-call requests; (iv) Call Authentication and Robocall Mitigation – originating traffic in a manner designed to defeat or evade STIR/SHAKEN call authentication or robocall mitigation programs, or failing to cooperate with Tychron's traceback, attestation, and Know-Your-Customer processes; (v) Emergency Services Misuse – auto-dialing, testing against, or otherwise directing non-emergency automated traffic to 911, 988, or other emergency and public-safety numbers; and (vi) Traffic Pumping and Revenue Fraud – originating or stimulating traffic for the purpose of generating access charges, revenue-share payments, or settlement revenue — including access stimulation, toll-free (8YY) pumping, and international revenue-share fraud — or transmitting patterns of short-duration calls characteristic of such schemes.

2.7 Regulatory Responsibility; Compliance Databases and Registrations. The Customer is solely responsible for identifying, understanding, and complying with — and for ensuring that its Users and any downstream customers comply with — all laws, regulations, industry requirements, registrations, filings, and database obligations applicable to the Customer's use of the Services, in each jurisdiction in which the Customer operates or in which its traffic originates or terminates. Tychron's provision of the Services — including any screening, tooling, or registration assistance — does not transfer any such obligation to Tychron. Regulatory requirements change frequently. The references in this Section are illustrative examples only, current as of this Policy's last-updated date; laws, rules, deadlines, and official interpretations may have changed since, and nothing in this Policy is legal advice or a complete or current statement of any law. The Customer must perform its own due diligence to identify and comply with the current version of every law and requirement applicable to its traffic, and the failure to obtain or maintain any applicable registration, filing, certification, query practice, or consent obligation is a Violation. Applicable requirements include, without limitation, the following: (i) Reassigned Numbers Database– where the Customer relies on prior express consent to call or message a number, querying the FCC's Reassigned Numbers Database at www.reassigned.us to verify that the number has not been permanently disconnected and reassigned since consent was obtained — the TCPA safe harbor for calls or messages to reassigned numbers is available only to callers that query the database and retain records of their queries; (ii) Robocall Mitigation Database– where the Customer or any downstream customer is itself a voice service provider, gateway provider, or intermediate provider, maintaining an accurate and active filing in the FCC's Robocall Mitigation Database ("RMD"), including a robocall mitigation plan and know-your-customer procedures, updating the filing within ten (10) business days of any change, and recertifying annually by March 1; Tychron may refuse — and may be required by law to refuse — traffic from any provider without an active RMD filing. Tychron maintains its own active RMD filing, available for review in the FCC's database; (iii) Call and Message Time Controls ("Quiet Hours") – not placing calls or sending messages outside approved hours: under federal rules, telephone solicitations and telemarketing messages may not be delivered before 8:00 a.m. or after 9:00 p.m. local time at the recipient's location, and stricter state windows, Sunday and holiday restrictions, and per-day or per-period contact-frequency caps apply in a number of states. The Customer is responsible for determining each recipient's local time — including where the phone number's area code and the recipient's actual location differ — and for queuing or suppressing traffic until an approved window; (iv) Federal Communications and Marketing Laws– the Communications Act and FCC regulations; the TCPA and 47 C.F.R. § 64.1200, including consent, sender-identification, and revocation-handling requirements; the FTC's Telemarketing Sales Rule; the National Do Not Call Registry and applicable state registries; the Truth in Caller ID Act; the TRACED Act and STIR/SHAKEN caller ID authentication rules (including, where applicable, obtaining the Customer's own Service Provider Code token and certificate); and the CAN-SPAM Act; (v) State Communications and Telemarketing Laws – state "mini-TCPA" and telemarketing statutes that extend to marketing calls, texts, and voicemails — with registration, bonding, quiet-hour, frequency, and private-enforcement regimes that are frequently stricter than federal law — including, as of this writing, statutes in Florida, Texas, Oklahoma, Oregon, Pennsylvania, Tennessee, Washington, Maryland, and Connecticut, and analogous laws of other states; (vi) Sector-Specific Laws– where applicable to the content or audience of the Customer's traffic, HIPAA, the Gramm-Leach-Bliley Act, the FDCPA and Regulation F, COPPA, and similar requirements; (vii) International Requirements– for traffic originating from or delivered to recipients outside the United States, the applicable laws of the origination and destination markets, including, e.g., Canada's CASL, the EU GDPR and ePrivacy rules, the U.K. PECR, and Australia's Spam Act; and (viii) Industry Programs – the registrations and industry requirements described in Section 2.5, including TCR campaign registration, carrier codes of conduct, CTIA guidelines, toll-free number verification, and short code program requirements. The Customer shall maintain records sufficient to evidence its compliance with the foregoing — including database query logs, filings, registrations, and consent records — and shall produce them in accordance with Section 2.4.

2.8 Brand and Account Responsibilities. The Customer — and each brand on whose behalf traffic is sent — is responsible for the following whether traffic is sent directly or through an intermediary, and each failure is a Violation: (i) Accurate Registration Data – the truthfulness, accuracy, and currency of all information submitted for brand or campaign registration, toll-free verification, short code applications, RCS agent onboarding, and caller-name (CNAM) or branded-calling display, with prompt correction when it changes; submitting false, misleading, or borrowed registration information is prohibited; (ii) Sender Identification and Keyword Handling – identifying the brand in each messaging program and honoring HELP with program information and STOP (and equivalent opt-out keywords) with an opt-out confirmation, for the life of the program; (iii) Opt-In Flows and Landing Pages – maintaining the call-to-action, terms, and privacy disclosures where opt-in is collected, including a publicly accessible privacy policy stating that mobile opt-in data will not be shared with third parties for marketing purposes, functioning links (public URL shorteners are prohibited on 10DLC), and content consistent with the registered campaign; (iv) Carrier Fees, Fines, and Audits– all pass-through fees, surcharges, penalties, and fines assessed by carriers, registries, or downstream connectivity partners on account of the Customer's traffic (including per-message non-compliance fines), and timely, complete responses to registry, carrier, or regulator audits and information requests; (v) Credential and Application Security– safeguarding API keys, tokens, and account credentials. Traffic transmitted using the Customer's credentials is the Customer's responsibility, including artificially inflated traffic ("SMS pumping"), toll fraud, and other fraud resulting from compromised Customer systems, and the Customer shall promptly notify Tychron upon discovering any compromise; (vi) Recipient Data Privacy– compliance with applicable privacy and data-protection laws for recipient personal data the Customer collects and uses (including state comprehensive privacy laws), for which the Customer is the controller or business and Tychron acts as a service provider or processor as described in Tychron's Privacy Policy; (vii) List Hygiene and Traffic Quality – maintaining recipient list hygiene — including suppression of opt-outs, deactivated numbers, and reassigned numbers — and keeping complaint, opt-out, and block rates within carrier and industry thresholds; Tychron may throttle, filter, or suspend traffic that exceeds them; (viii) AI and Bot Disclosure – complying with applicable federal and state requirements to disclose the use of artificial-intelligence-generated voice or automated conversational agents in calls and messages; and (ix) End-User Voice Service Obligations– where the Customer uses the Services to provide voice service to end users, compliance with 911 and E911 obligations (including Kari's Law and RAY BAUM'S Act dispatchable-location requirements), CPNI protections, and applicable FCC registration and reporting obligations.

2.9 Informational and Lookup Services.The following apply to Tychron's informational and lookup services — including CNAM, LRN, and MCL queries and similar data services ("Lookup Services") — and each failure is a Violation: (i) Permissible Use– query results may be used solely in connection with the Customer's own lawful, real-time communications processing for the number queried — routing, caller or sender identification, billing, and fraud prevention — and may not be used to locate, track, profile, harass, or stalk any individual or to compile information about individuals unrelated to a communication; (ii) No FCRA Use– Lookup Services are not consumer reports and Tychron is not a consumer reporting agency; results may not be used, in whole or in part, to determine any person's eligibility for credit, insurance, employment, housing, or any other purpose regulated by the Fair Credit Reporting Act; (iii) No Caching – query results may be used only for the immediate transaction that generated the query and may not be cached, stored, aggregated, or reused for any subsequent transaction; each subsequent transaction requires a fresh query. Transient technical copies necessary to complete the immediate transaction, and records the Customer is required by law to retain, are permitted; (iv) No Resale or Database Building – results may not be resold, redistributed, or published, or used to build, train, augment, or maintain any directory, dataset, model, or database, and bulk harvesting, scraping, or systematic enumeration of numbering resources is prohibited; and (v) Query Integrity– generating queries materially disproportionate to the Customer's actual communications traffic (including abnormal dip-to-call or dip-to-message ratios), circumventing rate limits or metering, or sharing credentials to aggregate query access is prohibited.

3. 10DLC Design Studios and Compliance Tooling. Tychron makes available tooling that generates suggested registration content, opt-in workflows, consent verbiage, message templates, web artifacts, and evidence-capture tooling (collectively, “Generated Materials”), including the 10DLC Campaign Design Studio and the 10DLC Opt-In Design Studio (the “Studios”). Use of the Studios is subject to the Tychron 10DLC Design Studios Terms & Conditions of Use, available for download within the Studios, which this Section summarizes and incorporates by reference; in the event of a conflict, those terms and the Customer’s Agreement control. In particular: (i) No Legal Advice – Generated Materials are provided for convenience and informational purposes only and are not legal advice; they must be reviewed and approved by the Customer and its compliance owner or counsel before production use; (ii) Consent Responsibility – consumer opt-in collection, opt-out handling, and consent record-keeping remain solely the Customer’s responsibility in every configuration. Where Tychron provides a collection endpoint — whether storing backup copies of consent events or operating the collection and validation flow on the Customer’s behalf — Tychron acts solely as a technical processor, and such receipt, processing, or storage does not transfer compliance responsibility for any consent to Tychron; (iii) Records – the Customer must regularly export and retain consent records processed or stored on Tychron infrastructure as its own consent evidence; (iv) Advisory Output – scores, verdicts, and reviews produced by the Studios are advisory assessments only and do not guarantee registration, approval, deliverability, throughput, or non-enforcement by any registry, DCA, carrier, or regulator; (v) Website Verification – by submitting a website address, the Customer authorizes Tychron’s automated systems to access that address, the publicly reachable pages it links to, and any redirect destinations for verification purposes, and confirms it has the right to authorize that access; and (vi) Automated Processing – content submitted to the Studios is processed by automated analysis systems, including third-party artificial-intelligence infrastructure operated for Tychron under contract, configured to exclude submitted content from use in training publicly available AI models, as further described in Tychron’s Privacy Policy.

4. Warning / Suspension / Termination. In the event of a Violation, Tychron may, in its sole and absolute discretion, take any or all of the following actions: (i) Warning – Tychron may issue a verbal, e-mail, or written warning notifying the Customer of the Violation and the corrective action that must be taken. A warning may also provide that Tychron will suspend or terminate all or part of a Customer’s service in the event of any additional Violation; (ii) Suspension – Tychron may suspend, with or without warning, all or part of a Customer’s Service and may condition restoration of such Service upon the Customer affecting corrective action; (iii) Termination – Tychron may, with or without warning, and with or without prior suspension, terminate all or part of the Customer’s service and may terminate the Customer’s Agreement.

The foregoing is not an exhaustive list of actions Tychron may take in the event of a Violation, and suspension or termination of Customer’s Service is not an exclusive remedy and shall not affect any other rights Tychron may have under the Agreement. Tychron shall have no liability to the Customer or Users in the event the Customer’s Agreement is terminated and/or a User’s service is suspended or terminated in accordance with this Policy.

5. Miscellaneous. Failure of Tychron to enforce this Policy or take any action with respect to a Violation shall not constitute a waiver of its right to enforce any action with respect to another Violation. Tychron takes no responsibility for any material created or accessed via the Services. Customer and User messaging traffic (including SMS, MMS, and RCS) is subject to automated screening — including by artificial-intelligence systems, with human oversight as required by applicable law — for fraud, spam, scams, phishing, malware, illicit content, and other violations of law, carrier or industry requirements, or this Policy, as further described in Tychron's Privacy Policy. Such screening does not constitute an assumption by Tychron of any obligation to monitor the Services, and Tychron does not verify, warrant, or validate the integrity, accuracy, or quality of information it receives or transmits, but reserves the right to review any Transmission where it has a good faith suspicion that a Customer or User may have violated this Policy. Tychron will cooperate with appropriate law enforcement and government agencies or other parties involved in investigating claims of illegal or inappropriate activity. Tychron reserves the right to modify this Policy at any time by communicating such modified Policy to the Customer or by posting it on Tychron’s website at www.tychron.com, effective upon posting.