Acceptable Use and Messaging Policy

This Acceptable Use & Messaging Policy (this "Policy") governs use of Julia and related websites, applications, APIs, phone numbers, and services (collectively, the "Services") operated by Julia AI Inc., a Delaware corporation ("Julia AI," "we," "us," or "our"). This Policy is incorporated by reference into, and forms part of, the Julia Terms of Service (the "Terms"). Capitalized terms not defined here have the meanings given in the Terms. "Customer" or "you" means the business account holder; "Users" means individuals accessing the Services under a Customer account.

Violation of this Policy is a material breach of the Terms and is grounds for throttling, filtering, suspension, or termination of the Services, in whole or in part, in accordance with the Terms. Where reasonably practicable we will provide notice before or promptly after taking action; however, we may act without prior notice where we determine action is necessary to protect the Services, our telephone number pools, our sender reputation, other customers, message recipients, or to comply with law or the requirements of our telecommunications carriers.

Questions about this Policy may be directed to info@onjulia.com.

1. General Acceptable Use

You must not, and must not permit any User or third party to:

1.1 Unlawful use. Use the Services in violation of any applicable law, regulation, court order, or third-party right, or to promote, facilitate, or conceal unlawful activity.

1.2 Infringement. Upload, transmit, or distribute content that infringes or misappropriates any copyright, trademark, trade secret, patent, right of publicity, right of privacy, or other proprietary right.

1.3 Malware and interference. Introduce viruses, worms, ransomware, spyware, or other malicious code; interfere with or disrupt the integrity, performance, or availability of the Services or the data of other customers; or circumvent any usage limit, quota, or security control.

1.4 Security testing. Probe, scan, penetration-test, load-test, or otherwise assess the vulnerability of the Services or any related network or system without our prior written consent.

1.5 Unauthorized access. Access or attempt to access any account, system, or data without authorization, or share, sell, or transfer login credentials in violation of the Terms.

1.6 Scraping and harvesting. Scrape, crawl, spider, or use automated means to extract data from the Services other than through documented APIs within published limits; or harvest, collect, or compile contact information (including phone numbers or email addresses) from the Services or any other source for the purpose of sending unsolicited communications.

1.7 False identity; impersonation. Misrepresent your identity or affiliation; impersonate any person or entity, including any government agency, financial institution, or other business; spoof, falsify, or misleadingly manipulate any sender identifier, caller ID, header, or origin information.

1.8 High-risk use. Use the Services in any application where failure or delay of the Services could lead to death, personal injury, or severe physical or environmental damage, including life-safety, emergency-dispatch, medical-device, air-traffic, or nuclear applications. The Services are not designed, tested, or licensed for such use, and are not a substitute for 911 or any emergency service.

1.9 Competing products; benchmarking. Access the Services to build a competing product or service, copy features or functions, or publish performance benchmarks without our prior written consent.

1.10 Resale. Resell, sublicense, rent, lease, or offer the Services on a service-bureau or white-label basis to third parties, except under a separate written agreement with us.

1.11 Data you lack rights to. Upload, store, or process any data that you do not have the legal right to provide to us, including without limitation: (a) personal information of children under 13 (or the higher age applicable under law) except in full compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state law; (b) customer proprietary network information (CPNI) or similar regulated telecommunications data you are restricted from disclosing; (c) protected health information subject to HIPAA, unless a business associate or other appropriate arrangement with us is in place; and (d) any data subject to confidentiality, export-control, or regulatory restrictions that would be violated by processing it through the Services.

2. Messaging & Telephony Compliance

The Services enable you to send email, SMS/MMS text messages, and voice calls, and to record and transcribe calls, on your own behalf, whether composed manually, triggered by automated workflows and flows you configure, or drafted or initiated through the Julia assistant at your direction or under configurations you enable. For every communication sent through the Services, you are the sender and initiator of record. You control, and are solely responsible for, the content, timing, recipient lists, and consent basis of every communication, regardless of the tool, automation, or AI feature used to compose or transmit it. Julia AI acts solely as a technology provider transmitting communications at your direction.

2.1 Consent

— Marketing calls and texts. You must obtain prior express written consent (a signed or electronically executed agreement that clearly and conspicuously authorizes marketing calls or texts using automated technology, an autodialer, or an artificial or prerecorded voice) before placing such calls or sending such texts to any recipient. Electronic consent compliant with the E-SIGN Act qualifies. — Informational and transactional messages. You must obtain prior express consent (which may be established by the recipient knowingly providing their number for that purpose) before sending informational or transactional calls or texts. — No conditioning. Consent to receive marketing communications may not be required as a condition of purchasing any goods or services. — Scope. You must respect the scope of the consent obtained. Consent for appointment reminders does not authorize promotions; consent given to one brand does not extend to another. — Records. You must maintain records sufficient to prove consent for each recipient (including who consented, when, how, to what, and the disclosure language presented) for at least four (4) years or the longer period required by law, and produce them to us promptly upon request in connection with any carrier audit, complaint, or investigation.

2.2 Opt-Outs and Do-Not-Call

— You must honor any revocation of consent made by any reasonable means (including reply keywords, verbal requests during a call, email, or website form) and process it as soon as practicable, and in all cases within ten (10) business days of receipt, after which no further covered messages may be sent to that recipient. Under FCC rules currently scheduled to take effect on January 31, 2027, a revocation made in response to one type of message may need to be treated as revoking consent to all calls and texts from you; you must comply with that rule if and when it takes effect. — The platform automatically processes STOP, UNSUBSCRIBE, CANCEL, END, QUIT and similar opt-out keywords and responds to HELP keywords. You must never circumvent, mask, disable, delay, or override this handling, message a recipient who has opted out (other than a single confirmation of the opt-out where permitted), or migrate an opted-out recipient to a different number or channel to continue messaging. — You must maintain an internal do-not-call list and honor entries indefinitely (or for the maximum period required by law). — For telemarketing calls, you must scrub against the National Do Not Call Registry (and applicable state registries) and place calls only to permitted recipients (e.g., those with express written consent or an established business relationship where the law allows).

2.3 Quiet Hours

You must not place marketing calls or send marketing texts before 8:00 a.m. or after 9:00 p.m. local time at the recipient's location. Where state law imposes stricter windows, frequency caps, per-day contact limits, or holiday restrictions (including under state "mini-TCPA" statutes such as those of Florida, Oklahoma, Washington, Maryland, Texas, and Virginia), you must comply with the strictest applicable rule. You are responsible for determining the recipient's likely location and time zone using reasonable methods.

2.4 A2P Registration and Sender Identification

— Application-to-person (A2P) SMS/MMS traffic requires brand and campaign registration with carrier messaging registries, completed through the platform. You must provide accurate, current, and complete registration information (including your legal business identity, use cases, opt-in descriptions, and sample messages), and update it when it changes. — Traffic that is unregistered, misregistered, or materially inconsistent with its registered use case may be blocked, filtered, or surcharged by carriers without notice, and we have no obligation to deliver it. — Every message must reasonably identify the sender (your business name), and marketing messages must include clear opt-out instructions at intervals required by carrier and industry guidelines.

2.5 Prohibited and Restricted Message Content

The following content may not be sent through the platform's messaging channels, consistent with carrier requirements and industry (CTIA) guidelines, regardless of consent, and in some cases regardless of legality in a particular jurisdiction:

— Sex: adult or sexually explicit content and related services; — Hate: hate speech, harassment, or content that degrades or threatens any person or group; — Alcohol, firearms, and tobacco: promotion of alcohol, firearms, ammunition, tobacco, vaping/e-cigarette products, or cannabis (including CBD and hemp-derived products), except in narrow cases where carriers expressly permit such traffic with robust age-gating and where you have obtained our prior written approval; — Illegal substances: controlled substances, drug paraphernalia, or content facilitating their sale; — Gambling: gambling, sweepstakes, or lottery content where prohibited or unlicensed; — High-risk financial content: payday loans, short-term high-interest lending, debt relief, debt collection outreach that violates applicable law, credit repair, stock/crypto "tips," and get-rich-quick or work-from-home schemes; — Deception: phishing, smishing, social engineering, fraudulent or deceptive marketing, fake urgency, or misrepresentation of the sender or offer; — Obscured links: URL shorteners or redirects that obscure the true destination domain; shared public link shorteners are prohibited (use a branded or dedicated domain); — Filter evasion: "snowshoeing" (spreading similar traffic across many numbers), number cycling or rotation to evade filtering, content obfuscation (deliberate misspellings, character substitution), or any other technique intended to evade carrier or platform spam controls.

We may update this list to reflect evolving carrier requirements and industry guidelines.

2.6 Email (CAN-SPAM)

For commercial email sent through the Services, you must: (a) use accurate header information and a sender name that truthfully identifies your business; (b) not use deceptive or misleading subject lines; (c) include your valid physical postal address in every commercial email; (d) include a clear and conspicuous unsubscribe mechanism that remains functional for at least thirty (30) days after the message is sent, and honor opt-out requests within ten (10) business days; (e) not send to any recipient after they opt out, and not charge a fee or require information beyond an email address to process an opt-out; and (f) not use purchased, rented, appended, or harvested email lists on the platform; you may email only recipients with whom you have a direct relationship and an appropriate consent basis.

2.7 Call and Meeting Recording and Transcription

The Services provide recording, transcription, and AI-analysis features for calls and meetings as a capability only: you decide whether, when, and what to record, and you are solely responsible for lawful capture. You must: (a) obtain the consent of all parties to a call or meeting before recording or transcribing where any participant is (or may be) located in an all-party-consent jurisdiction (given the difficulty of determining location, we strongly recommend obtaining all-party consent for every recording); (b) play or announce recording disclosures at the outset of a call or meeting as required by law (the platform provides configurable disclosure tools; you must enable and not disable them where required); and (c) comply with all applicable wiretap, eavesdropping, and communications-privacy laws. AI transcription and analysis of a call or meeting is treated as recording for purposes of this Section.

2.8 AI-Initiated Communications

All obligations in this Section 2 apply identically when a communication is drafted, scheduled, or sent through the Julia assistant or any automated workflow. In addition: — You must review and test the configurations, templates, triggers, and instructions you give the AI assistant, and you remain fully responsible for every communication it sends on your behalf, including any error, hallucination, or unexpected output. — Where law requires that automated or AI-generated interactions be disclosed as such (including state bot-disclosure and AI-transparency laws), you must ensure the disclosure is made. — The platform's built-in AI self-identification and disclosure features must not be disabled, masked, or subverted, and you must not instruct or configure the AI assistant to claim to be human where disclosure is required.

2.9 Platform-Provisioned Numbers

Telephone numbers provisioned through the platform are made available for your use but remain subject to the rules and processes of our telecommunications carriers and applicable numbering authorities. You acquire no property right in any number. Numbers may be suspended, reassigned, or reclaimed, by us or by carriers, for abuse, filtering or registration violations, regulatory demand, or extended inactivity. Porting numbers into or out of the platform is handled in accordance with carrier processes and applicable law; we will cooperate reasonably with valid port requests for numbers associated with an account in good standing.

2.10 Consequences; Pass-Through; No Delivery Guarantee

— Pass-through of fines. Fines, penalties, surcharges, audit costs, and remediation fees imposed by carriers, registries, or regulators that are attributable to your traffic or your violation of this Policy may be passed through to you, and you agree to pay them within thirty (30) days of invoice, without limiting any indemnification obligation in the Terms. — Protective action. We may throttle, filter, quarantine, block, suspend, or terminate messaging or calling capability (for specific campaigns, numbers, channels, or your entire account) for actual or reasonably suspected violations, with or without prior notice where we determine action is required to protect the platform's number pools, deliverability, sender reputation, other customers, or recipients, or to comply with carrier requirements or law. — No delivery guarantee. Message and call delivery depends on carriers, networks, spam filtering, and other factors outside our control. We do not guarantee delivery, delivery timing, or receipt of any communication, and we are not liable for filtering or blocking by third parties.

2.11 Your Consent to Communications from Julia AI

By creating an account and providing contact information, you consent to receive service, transactional, and account-related communications from Julia AI (including by email, SMS, and phone, and including messages sent using automated technology) at the contact points you provide; these are integral to the Services and cannot be opted out of while you maintain an account. You also agree that we may send you marketing communications, from which you may opt out at any time (reply STOP to texts; use the unsubscribe link in emails). You agree that this consent applies even if your number is listed on the National Do Not Call Registry or any state registry. Message and data rates may apply. Reply HELP for help.

3. Fair Use and Anti-Abuse

The Services are offered subject to fair-use limits designed to protect platform stability and deliverability for all customers:

3.1 Rate limits. We may impose and adjust sending rates, throughput ceilings, concurrency limits, and per-number or per-campaign volume caps for messaging, calling, and email.

3.2 Bulk-operation caps. Bulk operations (mass messaging, bulk record updates, bulk exports via API) are subject to per-operation and per-day caps published in product documentation or applied dynamically.

3.3 Storage and API fair use. Storage, attachment, and API usage must remain within published plan limits or, where unmetered, within volumes consistent with ordinary business use of a single organization. Sustained usage materially exceeding typical patterns may be throttled or require a plan change.

3.4 Anti-spam heuristics. We operate automated heuristics that score traffic for spam, fraud, and abuse signals (e.g., abnormal opt-out or complaint rates, invalid-number rates, content patterns, velocity anomalies). Traffic flagged by these systems may be delayed, quarantined, or blocked pending review. Attempting to probe, reverse-engineer, or evade these systems is itself a violation of this Policy.

4. Location Tracking and Workforce Monitoring

The Services include optional features that collect the location of your employees, contractors, and field personnel (mobile check-in, geofencing of job sites, field-personnel location, and time-clock verification). If you enable these features, you must:

4.1 Notify and obtain consent. Provide each affected person with clear, advance written notice that their location will be collected through the Services, describing what is collected, when, and why, and obtain their consent where required by applicable law, before enabling location collection for that person. Several US states require written notice of electronic monitoring of employees; you are responsible for knowing and meeting the requirements that apply to you.

4.2 Track only what the law allows. Do not use the Services to track any person's personal vehicle or personal device without the consent required by applicable law; do not collect location outside working hours or active shifts where applicable law restricts off-duty monitoring; and do not use location data for any unlawful, harassing, or discriminatory purpose.

4.3 No covert tracking. Do not attempt to conceal from your personnel that location collection is active, and do not disable, subvert, or instruct personnel to bypass any in-product notice or permission prompt shown to the tracked user.

4.4 Limit access and use. Restrict access to personnel location data within your organization to those with a legitimate business need, and use it only for the workforce-management purposes for which it was collected.

4.5 Not a safety system. Location features are not a lone-worker, emergency-response, or life-safety system and must not be relied on as one.

You are solely responsible for your monitoring practices, and claims by your personnel arising out of your use of location features are your responsibility under the indemnification provisions of the Terms.

5. E-Signature Misuse

With respect to the platform's electronic-signature features, you must not:

5.1 Forge or falsify. Sign, or cause a document to be signed, in another person's name without authority; falsify audit trails, timestamps, or signer identity; or submit a document for signature to a person who has not agreed to participate in the transaction.

5.2 Bypass consent. Bypass, pre-check, suppress, or misrepresent the electronic-records consumer-consent flow presented to signers, or obtain a signature from a consumer who has not first consented to transact electronically.

5.3 Excluded documents. Use the e-signature features for document types excluded from the E-SIGN Act and UETA or otherwise inappropriate for electronic execution on this platform, including: wills, codicils, and testamentary trusts; family-law documents such as adoption and divorce decrees; court orders, notices, and official court documents; notices of default, acceleration, repossession, foreclosure, or eviction relating to a primary residence; notices of cancellation or termination of utility services; notices of cancellation or termination of health or life insurance benefits; product recall or material-failure safety notices; and documents required to accompany the transportation or handling of hazardous, toxic, or dangerous materials.

6. Payments Misuse

With respect to payments facilitated through the platform, you must not:

6.1 Process payments for any business, product, or line of activity that you have not accurately disclosed to us or our payments partners, or that appears on any applicable prohibited- or restricted-business list;

6.2 Create, send, or collect on fraudulent, inflated, or fictitious invoices, or use the platform to launder funds, split transactions to evade limits, or process third-party transactions ("factoring") on behalf of businesses that are not yours;

6.3 Evade chargeback monitoring or dispute processes. Chargebacks, refunds, reversals, and associated fees arising from your transactions are your responsibility, and we or our payments partners may debit, offset, or withhold amounts to cover them as provided in the Terms and applicable payments agreements.

7. Reporting, Changes, and Relationship to the Terms

7.1 Reporting violations. To report a suspected violation of this Policy (including unwanted messages received from a Julia customer), contact info@onjulia.com with the relevant details (sender, number or email, content, and timestamps). We investigate credible reports and take action we deem appropriate, though we are not obligated to disclose the outcome.

7.2 Cooperation. You will cooperate promptly and in good faith with our investigations, including by providing consent records, campaign details, and recipient-list provenance upon request.

7.3 Changes to this Policy. We may update this Policy from time to time, including to reflect changes in law, carrier requirements, or industry guidelines. The current version will be posted at onjulia.com with a revised "Last Updated" date; material changes will be notified as described in the Terms. Continued use of the Services after the effective date of an update constitutes acceptance.

7.4 Incorporation into the Terms. This Policy is part of the Terms. In the event of a conflict between this Policy and the Terms with respect to acceptable use or messaging conduct, this Policy controls. Nothing in this Policy limits any right or remedy available to us under the Terms or at law. Our failure to enforce any provision of this Policy in one instance is not a waiver of our right to enforce it later.