Messangi Acceptable Use Policy (AUP)

Effective Date: June 2026

This Acceptable Use Policy (this “AUP”) describes the rules that apply to any party (“Customer” or “you”) using any services or products (“Services”) provided by Messangi Corporation, a company organized under the laws of the State of Florida, United States (“Messangi”), or its affiliates, including APIs, platforms, communications channels, and messaging infrastructure across SMS and MMS, WhatsApp, RCS, voice, email, push notifications, and mobile wallet. This AUP also applies to any user of any application or service made available by the Customer that interfaces with the Services (“End Users”).

This AUP is incorporated by reference into the Messangi Terms of Service or other written agreement between you and Messangi (the “Agreement”). A breach of this AUP is a material breach of the Agreement. The examples in this AUP are not exhaustive.

Global Services. Messangi provides the Services to customers worldwide, and messages submitted through the Services may be delivered to recipients located in many countries. You are responsible for complying with all laws and requirements applicable both where you operate and where your recipients are located, including consent, content, registration, and notice requirements in each relevant jurisdiction, as further described in Sections 5 and 6.

1. Overview and Objective

Messangi is committed to providing a secure, compliant, and reliable environment for messaging and communication. This AUP establishes rules for proper use, to protect the Services, ensure compliance with applicable law, and maintain the integrity of messaging ecosystems across SMS and MMS, WhatsApp, RCS, voice, email, push notifications, and mobile wallet. By using the Services, you agree not to misuse the Services or help anyone else do so.

2. Prohibited Content

You and your End Users must not use the Services to transmit, store, display, distribute, or otherwise make available any content that:

Is unlawful, obscene, defamatory, harassing, abusive, or threatening.
Promotes or incites violence, terrorism, hate speech, or discrimination, or originates from hate groups or individuals promoting criminal or dangerous movements.
Violates intellectual property or privacy rights.
Is false, misleading, or deceptive, including impersonation.
Contains or promotes scams, phishing, fraud, pyramid schemes, or malicious links.
Sexually exploits or endangers minors, or promotes illegal activity.

3. Messaging Restrictions

The following rules apply to messaging traffic across all channels:

Consent and no unsolicited messaging. You must obtain and maintain valid, documented opt in consent from each recipient before sending marketing or bulk messages, and must be able to evidence that consent on request.
Opt out. You must include clear opt out instructions and honor opt out requests promptly, including STOP keywords and country specific requirements.
No traffic obfuscation. Snowshoeing, number cycling, and spreading volume across sender identifiers to evade filtering are prohibited.
Authenticated sending only. Sending through unregistered, spoofed, or unauthorized numbers or display names is prohibited.
United States 10DLC. All United States 10DLC traffic must be registered through The Campaign Registry, including brand vetting and approved campaigns. Unregistered traffic is prohibited.
WhatsApp and channel policies. When using WhatsApp, you must comply with the Meta and WhatsApp Business terms and messaging policies that Messangi flows down through the Agreement. You must also follow the requirements of CTIA, the GSMA, mobile operators, and other aggregators. Noncompliance may result in filtering, fines, or suspension.

4. Technical and Platform Misuse

You may not:

Probe, scan, penetrate, reverse engineer, or test the vulnerability of any Messangi system without prior written authorization.
Perform or support denial of service attacks.
Bypass or defeat rate limiting, authentication, or anti spam mechanisms.
Introduce viruses, worms, malware, or code intended to harm, intercept, or alter functionality.
Use automation, bots, or scripts to abuse the platform or gain unauthorized access.

5. Data Privacy and Security

You are responsible for ensuring that your use of the Services complies with all applicable data protection and privacy laws in every jurisdiction where you operate and where your recipients are located. Depending on those locations, these may include the GDPR and UK GDPR (Europe and the United Kingdom), the CCPA as amended by the CPRA and other United States state privacy laws, the LGPD (Brazil), the LFPDPPP (Mexico), Law 1581 of 2012 and Decree 1377 of 2013 (Colombia), Law 19.628 as amended by Law 21.719 (Chile), the constitutional and sectoral data protection requirements applicable in Venezuela, and Law 29733 (Peru).

Specifically:

You must collect, store, and transmit personal data lawfully, with a valid legal basis and recipient consent where required.
You must not use the Services to collect personal data without providing required notice to individuals.
You must protect your platform credentials and API keys, and notify Messangi at security@messangi.com without undue delay of any actual or suspected unauthorized access or use.
You must honor data subject rights requests relating to the data you upload, as the controller of that data.

Protected health information. Protected health information subject to the United States Health Insurance Portability and Accountability Act (“HIPAA”) is not permitted on the Services. You must not submit protected health information to the Services unless you and Messangi have signed a separate Business Associate Agreement. Health and other sensitive or special category data remain subject to the heightened requirements of applicable law, including Article 9 of the GDPR and equivalent provisions in LATAM regimes, and to the Data Processing Addendum.

6. Compliance with Legal and Industry Standards

You may not use the Services in violation of any applicable local, national, or international law or regulation, the CTIA Messaging Principles and Best Practices, the Mobile Marketing Association Code of Conduct, or applicable carrier requirements. Customers using the Services in the United States must comply with FCC and TCPA requirements. Where you send messages to recipients outside your own jurisdiction, you must also comply with the messaging, consent, and content requirements of each destination jurisdiction.

7. Enforcement and Violations

Messangi may: investigate any violation or misuse; suspend or terminate access without prior notice where conduct poses a risk to the platform, other users, or compliance; block specific sender identifiers, numbers, campaigns, or destinations; notify carriers, regulators, or law enforcement where required; and request records of opt in or communications to verify compliance. Repeated or egregious violations may result in permanent suspension or legal liability.

8. Reporting Violations

If you become aware of any violation of this AUP or misuse of the Services, report it to legal@messangi.com, including a description of the violation, logs if available, and relevant context. Customers are expected to cooperate with any investigation initiated by Messangi or its partners.

9. Updates to this AUP

Messangi may update this AUP from time to time. For material changes, Messangi will provide reasonable advance notice by posting a revised version with an updated Effective Date or by notifying customers directly. Your continued use of the Services after the Effective Date of a revised AUP constitutes acceptance. Where you and Messangi have entered into a signed Agreement that requires amendments to be made by signed writing, the amendment terms of that Agreement control with respect to changes to this AUP.

10. Resellers, Partners, and Downstream Use

If you make the Services available to your own customers or end users, including under a reseller, partner, or white label arrangement, you must impose obligations on those downstream users that are at least as protective as this AUP, and you remain responsible for their compliance and for any breach of this AUP by them.

11. Examples of Permissible Use

The following uses are generally permitted with proper consent and legal compliance: transactional alerts such as receipts and account notices; two factor authentication and verification codes; customer support notifications; promotional messages with recipient opt in; and regulatory announcements or emergency alerts.

12. Contact

For questions about this AUP, contact support@messangi.com. For legal matters, contact legal@messangi.com. To report an actual or suspected security compromise, contact security@messangi.com. By using the Services, you agree to comply with this AUP and understand that violations may lead to service disruption, reporting, or legal consequences.

13. Language and Governing Law

Messangi may provide this AUP in languages other than English for convenience. The English version controls in the event of any conflict. The governing law and venue applicable to this AUP are those stated in the Agreement.