Acceptable Use Policy

1. Purpose and Scope

This Acceptable Use Policy ("AUP") governs the use of the EON Platform services (the "Services") and is incorporated into and forms part of the EON Platform Terms of Service. This AUP applies to all users of the Services, including account holders, authorized users, and any person or entity that accesses or uses the Services through a Customer's account.

The purpose of this AUP is to protect EON Platform, its Customers, message recipients, carrier partners, and the broader messaging ecosystem from harmful, illegal, or abusive activity. Violations of this AUP may result in suspension or termination of your account, as described in Section 10.

2. Prohibited Content

You may not use the Services to create, store, transmit, or distribute any content that falls within the following categories:

2.1 SHAFT Content (Restricted Categories)

The CTIA Messaging Principles and carrier policies restrict or prohibit the following content categories, collectively known as "SHAFT":

• Sex / Sexual Content: Sexually explicit or suggestive content, including promotion of adult entertainment services, dating services with sexual content, pornography, escort services, sexual health products marketed in an explicit manner, or any content depicting or describing sexual acts. Age-gated programs with prior EON Platform approval and dedicated short code may be exceptions for lawful, non-explicit sexual health or dating services.
• Hate: Content that promotes, incites, or glorifies hatred, violence, or discrimination against any individual or group based on race, ethnicity, national origin, religion, gender, gender identity, sexual orientation, disability, age, or any other protected characteristic. Hate content is strictly prohibited with no exceptions.
• Alcohol: Promotion, advertising, or sale of alcoholic beverages, including beer, wine, spirits, and related products. Exceptions may apply only with prior written approval from EON Platform, verified age-gating mechanisms requiring date-of-birth entry (yes/no age confirmation is insufficient), and use of a dedicated short code approved for age-gated content.
• Firearms: Promotion, advertising, or sale of firearms, ammunition, explosives, weapons accessories, or related products. This includes hunting equipment, gun shows, firearms training marketing, and concealed carry promotion. Exceptions may apply only with prior written approval from EON Platform and compliance with all applicable federal, state, and local firearms regulations.
• Tobacco / Cannabis: Promotion, advertising, or sale of tobacco products, e-cigarettes, vaping devices and accessories, nicotine products, cannabis, CBD products, or any related paraphernalia. This category is subject to stringent carrier restrictions and generally requires a dedicated short code with age-gating.

2.2 Illegal Content

Content that is illegal under federal, state, or local law, including but not limited to:

• Promotion or facilitation of illegal drugs or controlled substances
• Promotion of illegal gambling or unlicensed gambling operations
• Content that violates intellectual property rights (copyright, trademark, trade secret)
• Content that constitutes or facilitates fraud, money laundering, or other financial crimes
• Content that promotes or facilitates human trafficking or exploitation
• Content that violates export control or sanctions regulations
• Child sexual abuse material ("CSAM") or any content depicting the exploitation of minors (this will be reported to the National Center for Missing & Exploited Children and law enforcement immediately)

2.3 Deceptive and Harmful Content

• False, misleading, or deceptive content designed to deceive recipients
• Phishing messages or messages designed to fraudulently obtain personal information, passwords, financial information, or other sensitive data
• Impersonation of government agencies, law enforcement, financial institutions, or other entities
• False claims of affiliation with organizations, companies, or individuals
• Predatory lending or deceptive financial services offers
• Fake urgency, false scarcity, or other manipulative marketing tactics that would constitute unfair or deceptive acts or practices under Section 5 of the FTC Act (15 U.S.C. § 45)
• Pyramid schemes, multi-level marketing scams, or "get rich quick" schemes
• Malware, spyware, ransomware, or links to websites containing malicious code

2.4 Harassment and Threats

• Content that threatens, harasses, bullies, or intimidates any individual
• Content that constitutes stalking under applicable law
• Doxxing or unauthorized disclosure of another person's private information
• Extortion or blackmail

3. Prohibited Activities

You may not engage in the following activities using the Services:

3.1 Spamming and Unsolicited Messaging

• Sending unsolicited commercial messages ("spam") to recipients who have not provided valid prior consent
• Sending messages to recipients who have previously opted out or revoked consent
• Sending bulk messages without valid prior express written consent as required under the TCPA (47 U.S.C. § 227)
• Using the Services to send messages that violate the CAN-SPAM Act (15 U.S.C. §§ 7701-7713)
• Sending messages at excessive frequency that constitutes harassment or that exceeds the frequency disclosed at the time of opt-in

3.2 Purchased, Rented, or Scraped Lists

• Uploading or using contact lists that were purchased, rented, leased, or borrowed from third parties unless you can demonstrate that each individual on the list provided direct, verifiable consent to receive messages from your specific business
• Uploading contacts obtained through web scraping, data harvesting, or automated data collection tools
• Using contact information obtained from social media profiles, public directories, or other public sources without the individual's express consent to receive marketing messages from your business
• Using contact lists obtained through sweepstakes, contests, or promotions unless the entrant was clearly and conspicuously informed that they would receive marketing messages from your business and provided separate, affirmative consent

3.3 Technical Abuse

• Attempting to circumvent rate limits, sending quotas, or other technical restrictions
• Using automated tools, scripts, or bots to access the Services except through our published APIs
• Attempting to reverse engineer, decompile, or disassemble the Services
• Probing, scanning, or testing the vulnerability of the Services or any network connected to the Services
• Interfering with or disrupting the integrity or performance of the Services
• Attempting to gain unauthorized access to the Services, other accounts, or computer systems or networks connected to the Services

3.4 Identity and Sender Misrepresentation

• Falsifying sender identity, including using misleading sender names, phone numbers, or email addresses
• Impersonating another business, person, or entity
• Registering 10DLC campaigns or sender identities with false or misleading business information
• Using the Services on behalf of a third party without disclosing the true sender identity to recipients

4. Consent Requirements

All messages sent through the Services must comply with the following consent requirements:

• SMS/MMS Marketing Messages: You must obtain prior express written consent as defined under 47 C.F.R. § 64.1200(f)(9) before sending any marketing text message. Consent must be evidenced by a signed written agreement (including electronic signatures) that clearly authorizes you to send marketing messages, discloses that consent is not a condition of purchase, identifies your business by name, describes the types and frequency of messages, states that message and data rates may apply, and explains how to opt out.
• SMS/MMS Informational Messages: You must obtain at minimum prior express consent (which may be oral) before sending informational or transactional text messages.
• Email Marketing Messages: You must comply with the CAN-SPAM Act. While CAN-SPAM does not require prior opt-in consent for commercial emails, all emails must include a functioning opt-out mechanism, your physical address, and accurate header and subject line information. We strongly recommend obtaining opt-in consent for email marketing as a best practice.
• Consent Must Be Specific: Consent must be specific to your business and your messaging program. Blanket consent to receive messages from unspecified businesses or marketing partners is insufficient.
• Consent Records: You must maintain records of consent for each contact, including the date, time, and method of consent, the language of the consent disclosure, and the specific program(s) for which consent was granted. These records must be retained for a minimum of five (5) years and provided to EON Platform upon request within five (5) business days.

5. Message Content Requirements

All messages sent through the Services must comply with the following content requirements:

5.1 SMS/MMS Message Requirements

• Include clear identification of the sending business
• Include opt-out instructions (e.g., "Reply STOP to unsubscribe") in every marketing message
• Include "Msg&Data rates may apply" disclosure or equivalent language
• Not exceed the message frequency disclosed at the time of opt-in
• Be sent only between the hours of 8:00 AM and 9:00 PM in the recipient's local time zone
• Accurately represent the nature and purpose of the message
• Not contain misleading URL shorteners that obscure the destination domain

5.2 Email Message Requirements

• Include accurate "From," "To," and "Reply-To" header information
• Use a subject line that accurately reflects the message content
• Clearly identify the message as an advertisement or solicitation (where applicable)
• Include your valid physical postal address
• Include a clear and conspicuous unsubscribe mechanism that remains functional for at least thirty (30) days
• Not use deceptive headers, forged routing information, or misleading subject lines

6. CSV and Contact Import Rules

When importing contacts via CSV upload or any other method, you must adhere to the following rules:

• Consent Verification: Before importing any contact list, you represent and warrant that you have obtained valid consent from each individual on the list to receive the type of messages you intend to send (marketing SMS, MMS, and/or email) from your specific business.
• No Purchased or Rented Lists: You may not import contact lists that were purchased, rented, leased, borrowed, or otherwise acquired from third parties, except where each individual on the list provided direct, verifiable consent to receive messages from your specific business.
• Data Accuracy: You are responsible for ensuring that all contact information is accurate and up-to-date. You must not upload phone numbers or email addresses that you know to be invalid, disconnected, or reassigned.
• Suppression List Compliance: Before importing contacts, you must scrub your list against your internal do-not-contact list, the National Do-Not-Call Registry (for SMS/MMS), and any carrier-provided suppression lists.
• No Minor's Data: You may not import contact information for individuals known to be under the age of eighteen (18).
• Data Minimization: Import only the data fields that are necessary for your messaging campaigns. Do not upload sensitive personal information (Social Security numbers, financial account numbers, health information, government-issued identification numbers) unless absolutely necessary for your legitimate business purpose and you have obtained specific consent for the processing of such data.
• Format Requirements: CSV files must contain properly formatted data with clear column headers. Phone numbers must be in valid format and include country codes where applicable.

7. AI Feature Usage Rules

When using the AI-powered message generation features, you must comply with the following rules:

• Human Review Mandatory: All AI-generated message drafts must be reviewed and approved by a human before being sent. You must not configure any automated workflow that sends AI-generated messages without human review.
• Compliance Responsibility: You are solely responsible for ensuring that all messages, including those generated or suggested by AI, comply with the TCPA, CAN-SPAM Act, CTIA guidelines, FCC rules, state laws, and this AUP. AI-generated content is not reviewed for legal compliance.
• No Prohibited Content Generation: You must not use the AI features to generate content that would violate this AUP, including SHAFT content, deceptive content, hate speech, or any other prohibited content category.
• Accuracy Verification: You must verify the accuracy of any factual claims, offers, pricing, promotions, or disclaimers contained in AI-generated messages before sending.
• Data Awareness: When using AI features, you acknowledge that selected contact data and campaign parameters are transmitted to our AI provider (Anthropic) for message generation. Do not include unnecessary sensitive personal information in fields used for AI message generation.
• No Jailbreaking or Prompt Manipulation: You must not attempt to manipulate, override, or circumvent the AI system's safety guidelines, content filters, or intended behavior through prompt engineering, prompt injection, or similar techniques.

8. Carrier Compliance

You must comply with all applicable carrier requirements, including but not limited to:

8.1 CTIA Messaging Principles

• Adhere to the CTIA Messaging Principles and Best Practices (as updated, including the October 2025 revision)
• Maintain transparent sender identification in all messages
• Support standard opt-out keywords (STOP, QUIT, END, REVOKE, OPT-OUT, CANCEL, UNSUBSCRIBE) and process them promptly
• Respond to HELP keyword requests with program information, including sender identity, contact information, and opt-out instructions
• Comply with all content guidelines and restrictions set by carriers

8.2 10DLC Registration and Compliance

• Register all 10DLC campaigns with The Campaign Registry ("TCR") with accurate business information and use-case descriptions
• Maintain accurate and current campaign registrations
• Comply with throughput limits and rate restrictions assigned to your registered campaigns
• Not send message content that is inconsistent with your registered campaign use case
• Gradually ramp up message volume for new campaigns and phone numbers as required by carriers

8.3 Carrier-Specific Policies

Each major U.S. carrier (AT&T, T-Mobile, Verizon, and others) maintains specific messaging policies that may impose additional restrictions beyond those stated here. You are responsible for familiarizing yourself with and complying with the policies of all carriers to which you send messages. EON Platform may provide guidance on carrier-specific requirements but does not guarantee the completeness of such guidance. Carrier policies are subject to change without notice.

9. Monitoring and Reporting

9.1. Platform Monitoring. EON Platform reserves the right, but does not assume the obligation, to monitor the Services for violations of this AUP. We may use automated tools to scan message content, review opt-out rates, monitor complaint rates, and detect patterns indicative of policy violations.

9.2. Carrier Feedback. We receive feedback from carriers regarding message filtering, blocking, and complaints. High complaint rates, carrier blocks, or spam reports associated with your account may trigger review and enforcement action.

9.3. Reporting Violations. If you become aware of any violation of this AUP by any user of the Services, please report it to support@eonmessaging.com immediately.

10. Enforcement

EON Platform may take any of the following actions in response to a violation or suspected violation of this AUP, in our sole discretion and without limitation:

• Warning: Issue a written warning identifying the violation and requiring corrective action within a specified timeframe.
• Content Removal: Remove, block, or disable access to content that violates this AUP.
• Feature Restriction: Temporarily or permanently restrict your access to specific features of the Services, including AI message generation, message sending, or contact import capabilities.
• Rate Limiting: Reduce your message sending rates or quotas.
• Account Suspension: Temporarily suspend your account and all associated messaging activity pending investigation.
• Account Termination: Permanently terminate your account and delete your data in accordance with our data retention policies.
• Legal Action: Pursue legal remedies, including reporting violations to law enforcement or regulatory authorities where appropriate.

The severity of the enforcement action will depend on the nature, severity, and frequency of the violation. Certain violations, including sending CSAM, phishing, or hate speech, will result in immediate account termination without prior warning.

We will provide you with notice of the violation and the enforcement action taken, except where we are legally prohibited from doing so or where immediate action is required to prevent harm. You may appeal an enforcement action by contacting support@eonmessaging.com within ten (10) business days of the enforcement notice.

11. Changes to This Policy

We may update this AUP from time to time to reflect changes in law, carrier requirements, or our practices. If we make material changes, we will notify you by posting the updated policy on our website with a new effective date and, for material changes, by email. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated AUP.

12. Contact Information

For questions about this Acceptable Use Policy, to report a violation, or to appeal an enforcement action, please contact us at: