Compliance and consent

Why this page exists

Most agencies selling this will not put any of it in writing, because writing it down creates something you can hold them to. That is precisely why we have. If a supplier cannot tell you how they handle opt-outs, they are not handling opt-outs.

Carrier registration (A2P 10DLC)

In the US, businesses sending texts through a normal ten-digit number must register the business and the campaign with the carriers. This is not optional and it is not a formality. Unregistered traffic gets filtered, which means your messages silently do not arrive and you conclude the product is broken.

On Growth and VIP we handle registration for you. We need your legal business name, your tax ID or company number, your address and a website, all of which the carriers verify. It usually takes a few days and occasionally longer, which is why we start it on day one of the build rather than at the end.

Replying to a caller is not cold texting

This distinction is the whole legal basis of the product, so it is worth being precise about.

When someone dials your business, they have initiated contact with you and given you their number by doing so. Replying to that person, promptly, about the thing they just called about, is a response to their own inbound contact. That is a very different position from picking a number off a list and messaging a stranger.

What we will never do, on any plan, for any amount of money:

• Text a purchased, scraped or rented list.
• Message anyone who has not contacted your business first.
• Keep messaging someone after they have asked us to stop.
• Send marketing blasts to your past customers dressed up as service messages.

If you want those things, we are the wrong supplier, and we would rather lose the sale than get your number blocked and you sued.

Opt-outs

Every conversation carries opt-out wording. Replying STOP, UNSUBSCRIBE, END, QUIT or CANCEL removes that number immediately and permanently, across every automation, not just the one they replied to.

It is honoured instantly and automatically. There is no queue, no daily batch job, and no way for a staff member to accidentally message them again later, because the block sits at the number level.

Quiet hours

No automated message goes out between 9pm and 8am in the recipient's own timezone, regardless of when the call came in. A missed call at 11pm gets its text at 8am, which is both the legal position and simply the decent one.

You can narrow that window further if you want. You cannot widen it.

What the AI will never say

The scope is deliberately narrow, and everything outside it triggers a handoff to a human with the full transcript attached.

• No clinical, medical or safety advice. Not about medications, not about whether a treatment is safe for someone, not about symptoms. Ever.
• No legal or financial advice. Same rule, same reason.
• It will not claim to be a human. If someone asks directly, it says it is an assistant and offers to get a person. It never denies it.
• It will not invent anything. Prices, availability, policies and capabilities come from what you gave us. If it does not know, it says so and asks someone.
• It will not discuss anyone's records, history or account details over text.
• It will not argue or pressure. No fake urgency, no invented scarcity, no chasing beyond the agreed follow-up sequence.

If you are in a regulated industry

Medical, dental, legal, financial and veterinary businesses carry extra obligations, and we work with them regularly. What that means in practice:

• We will sign a BAA where HIPAA applies. Ask for it during onboarding.
• We do not store treatment notes or case details in the automation layer. It handles scheduling and price ranges. Anything substantive goes to your team.
• Your compliance lead approves the scripts before launch, in writing, and we will not go live until they have.
• Escalation rules are yours to set. If you want every mention of a particular word routed to a human, we build that.

Your data

• It is yours. Contacts, transcripts, bookings, all of it.
• You can export it any time, in a normal format, by asking. There is no retention hostage-taking if you leave.
• We do not sell it, share it, or train public models on it.
• We delete it on request, subject to whatever records you are legally required to keep.
• Access is limited to the people working on your account.

What we need from you

Compliance is shared, and two parts of it are genuinely yours.

1. Accurate registration details. The carriers verify them. Wrong details mean a rejected registration and a delayed launch.
2. Honest scripts. If you ask us to write something misleading about pricing or availability, we will decline. That is not us being difficult, it is the thing that gets both of us in trouble.