Skip to Content

IPPBX Acceptable Use Policy

Effective Date: July 27, 2026
Last Updated: July 27, 2026

This Acceptable Use Policy (“AUP”) governs use of the websites, cloud telephone systems, telephone numbers, calling, messaging, artificial intelligence, automation, applications, equipment, networks, integrations, and other services provided by IPPBX, LLC (“IPPBX”).

This AUP forms part of the agreement between IPPBX and each Customer.

Customers are responsible for compliance by their employees, contractors, administrators, agents, users, guests, affiliates, and anyone using their account, devices, credentials, telephone numbers, or integrations.

1. Core Requirement

Customers may use the Services only for lawful, authorized, legitimate business purposes.

Use must comply with:

  • Applicable federal, state, local, and international law;
  • Telecommunications and privacy regulations;
  • Carrier and messaging-provider policies;
  • Industry registration requirements;
  • Third-party platform terms;
  • IPPBX agreements and policies; and
  • Reasonable instructions issued to protect the Services and their users.

2. Prohibited Illegal, Fraudulent, and Harmful Activity

The Services may not be used to:

  • Commit, assist, promote, or conceal unlawful activity;
  • Defraud or attempt to defraud any person or organization;
  • Obtain money, property, credentials, or information through deception;
  • Impersonate another person, company, government agency, bank, healthcare provider, charity, or public official without authorization;
  • Make false or misleading representations;
  • Harass, threaten, intimidate, stalk, extort, or abuse another person;
  • Promote violence or credible threats of violence;
  • Exploit or endanger children;
  • Distribute unlawful obscene or sexually exploitative material;
  • Violate intellectual-property, privacy, publicity, or confidentiality rights;
  • Facilitate illegal gambling, trafficking, controlled substances, weapons sales, or other prohibited transactions;
  • Evade trade sanctions, export restrictions, or lawful government controls;
  • Interfere with an investigation;
  • Destroy or conceal evidence;
  • Facilitate money laundering; or
  • Conduct activity reasonably likely to expose IPPBX, its carriers, or its providers to legal or regulatory action.

3. Spam, Phishing, and Deceptive Communications

Customers may not use the Services for:

  • Spam calls, messages, faxes, emails, or automated communications;
  • Phishing or credential theft;
  • Fake technical-support communications;
  • Government, tax, bank, delivery, healthcare, utility, or law-enforcement impersonation;
  • Deceptive fundraising;
  • Advance-fee, investment, cryptocurrency, employment, grant, prize, or refund scams;
  • Misleading debt-relief or credit-repair offers;
  • Fraudulent lead generation;
  • Communications that conceal the identity of the responsible business;
  • Communications designed to mislead a recipient about the purpose of the contact; or
  • Repeated communication after a recipient has opted out.

4. Caller ID, Number, and Identity Requirements

Customers may use only telephone numbers, caller names, sender identities, domains, and branding that they own or are authorized to use.

Customers may not:

  • Spoof or falsify caller ID;
  • Transmit misleading CNAM information;
  • Use an unauthorized telephone number;
  • Manipulate branded-calling information;
  • Falsify SMS sender information;
  • Rotate numbers to avoid blocking or reputation controls;
  • Replace blocked numbers for the purpose of continuing prohibited traffic;
  • Misrepresent the originating party;
  • Alter call information to evade carrier filtering;
  • Attempt to obtain improper STIR/SHAKEN treatment or attestation;
  • Use a number assigned to another customer;
  • Submit fraudulent porting documents; or
  • Port or attempt to port a number without authorization.

5. Outbound Calling Requirements

A Customer initiating outbound calls must:

  • Have a lawful basis for contacting each recipient;
  • Maintain required consent and permission records;
  • Identify the business responsible for the call;
  • Provide legally required artificial-voice or prerecorded-message disclosures;
  • Honor federal, state, and internal Do Not Call requirements;
  • Apply opt-out and suppression requests promptly;
  • Follow permissible calling hours and quiet-hour rules;
  • Maintain records required by applicable law;
  • Use accurate caller identification;
  • Avoid excessive attempts;
  • Use legally sourced call lists; and
  • Provide reasonable evidence of compliance when requested.

A Customer may not use outbound calling for:

  • Random or sequential dialing;
  • War dialing;
  • Numbers generated without a lawful business basis;
  • Scraped lists without legally sufficient permission;
  • Purchased or shared lists without documented lawful authority;
  • Mass consumer solicitation without required consent;
  • Ringless voicemail intended to evade calling restrictions;
  • Repeated abandoned or silent calls;
  • Repeated calls intended to annoy or pressure;
  • Calling recipients after an opt-out;
  • Calling blocked or suppressed numbers through alternate numbers;
  • Calling emergency lines, hospitals, government lines, or sensitive numbers without a legitimate purpose;
  • Artificially increasing traffic or duration; or
  • Activity that carriers reasonably classify as robocalling, spam, or abusive automation.

6. AI-Generated Voice and Automated Calling

Customers using AI-generated voice, artificial voice, prerecorded messages, voice cloning, automated dialing, or AI outbound calling must obtain all legally required consent and provide all required notices.

Customers may not use AI calling to:

  • Impersonate an identifiable individual without authorization;
  • Clone or reproduce a person’s voice without permission;
  • Conceal that a communication is automated where disclosure is required;
  • Mislead a recipient into believing the caller is human;
  • Misrepresent the caller’s identity or authority;
  • Conduct fraudulent sales or fundraising;
  • Pressure vulnerable individuals;
  • Circumvent consent requirements;
  • Defeat opt-out mechanisms;
  • Create false evidence;
  • Make deceptive political, public-safety, financial, healthcare, or government communications; or
  • Avoid carrier, regulatory, or platform controls.

Customers must test AI callers before public activation and maintain appropriate escalation, monitoring, and shutdown procedures.

7. AI Inbound and AI Outbound Fair Use

AI Inbound Calling

AI inbound calling advertised as unlimited is intended for genuine inbound communications received by the Customer’s own business.

It may not be used to:

  • Operate an unrelated third-party call center;
  • Resell AI-call capacity;
  • Generate artificial inbound traffic;
  • Conduct load testing without written permission;
  • Route traffic for unrelated organizations;
  • Maintain calls solely to consume computing resources;
  • Facilitate fraudulent or unlawful communications; or
  • Circumvent plan or technical limits.

AI Outbound Calling

AI outbound calling is included for normal business use under fair-use standards.

The following may be restricted or require separate written approval:

  • Bulk or mass campaigns;
  • High-volume call-center traffic;
  • Continuous automated dialing;
  • Excessive concurrent calling;
  • Repetitive short-duration traffic;
  • High levels of unanswered calls;
  • Rapid repeated attempts;
  • Campaigns on behalf of unrelated third parties;
  • Purchased or scraped list outreach;
  • High-risk industries or destinations;
  • Traffic inconsistent with the Customer’s plan or business;
  • International, premium-rate, or high-cost traffic;
  • Political or public-advocacy campaigns;
  • Debt collection;
  • Lead-generation resale;
  • Traffic-pumping arrangements; and
  • Any pattern likely to damage number, carrier, or network reputation.

IPPBX may use reasonable technical controls, including throttling, pacing, concurrency controls, attempt limits, destination restrictions, campaign review, and account-specific limits.

8. SMS and MMS Requirements

Customers must comply with applicable messaging-consent, registration, carrier, and industry requirements.

Customers must:

  • Obtain required opt-in consent;
  • Retain evidence of consent;
  • Identify the sending organization;
  • Provide required HELP instructions;
  • Honor STOP and other recognized opt-out requests;
  • Maintain suppression records;
  • Register brands and campaigns where required;
  • Use approved message templates where required;
  • Keep privacy and terms information accurate;
  • Send only content consistent with the registered campaign; and
  • Comply with carrier content restrictions.

Customers may not:

  • Send unsolicited bulk messages;
  • Buy, sell, rent, or share opt-in lists for unrelated marketing;
  • Use misleading links;
  • Use URL shorteners prohibited by a carrier;
  • Send malware or credential-harvesting links;
  • Continue messaging after an opt-out;
  • Change numbers to evade blocking;
  • Misrepresent the registered brand;
  • Conduct snowshoe messaging across multiple numbers;
  • Send prohibited content under applicable carrier policy; or
  • Use emergency language deceptively.

Carrier approval does not guarantee message delivery. Carriers may filter, reject, block, or suspend traffic at their discretion.

9. Call Recording and Transcription

Customers may not record, monitor, transcribe, summarize, analyze, or store a communication unless they have provided every required notice and obtained every required consent.

Customers are responsible for:

  • One-party and all-party consent laws;
  • Employee-monitoring rules;
  • Confidentiality obligations;
  • Healthcare and financial privacy requirements;
  • Access permissions;
  • Retention settings; and
  • Secure handling of recordings and transcripts.

Customers may not secretly record a communication where notice or consent is legally required.

10. AI, Automation, and Business Decisions

AI and automation may not be used to:

  • Make unlawful discriminatory decisions;
  • Deny employment, housing, credit, insurance, healthcare, education, or public benefits without legally required review;
  • Produce fabricated records intended to deceive;
  • Generate false legal, medical, financial, or safety representations;
  • Circumvent human approvals configured by the customer;
  • Manipulate vulnerable individuals;
  • Facilitate fraud or coercion;
  • Create unauthorized financial transactions;
  • Access information beyond granted permissions;
  • Take actions outside approved workflows; or
  • Disable security, compliance, logging, or audit controls.

Customers must use qualified human review for high-impact decisions and material financial, legal, medical, employment, safety, or compliance actions.

11. Security and Network Abuse

Customers may not:

  • Introduce malware, ransomware, viruses, spyware, or malicious code;
  • Probe, scan, or test systems without authorization;
  • Attempt to bypass authentication;
  • Obtain another user’s credentials;
  • Access another customer’s data;
  • Interfere with service availability;
  • Conduct denial-of-service attacks;
  • Overload or stress-test systems without approval;
  • Exploit a vulnerability;
  • Circumvent rate, capacity, or usage limits;
  • Reverse engineer protected systems;
  • Scrape the platform;
  • Intercept communications without authorization;
  • Use compromised devices or credentials;
  • Operate unauthorized proxies, relays, or gateways;
  • Engage in toll fraud;
  • Resell stolen or compromised accounts; or
  • Conceal a security incident.

A suspected vulnerability must be reported privately to IPPBX and must not be exploited, publicly disclosed, or used to access data.

12. High-Risk and Abusive Telephone Traffic

IPPBX may restrict or require preapproval for:

  • Premium-rate destinations;
  • High-cost international destinations;
  • Call forwarding;
  • Simultaneous ringing;
  • Toll-free traffic;
  • Short-duration calls;
  • High-volume calls;
  • Auto-dialing;
  • Predictive dialing;
  • Traffic with high abandonment;
  • Revenue-share destinations;
  • Traffic pumping;
  • Artificially generated traffic;
  • Calls intended primarily to generate carrier compensation;
  • Repeated forwarding loops;
  • Unusual geographic patterns;
  • Unusually rapid call attempts; and
  • Other traffic identified as high risk by IPPBX or a carrier.

Customers are responsible for all charges caused by compromised credentials, unauthorized devices, call forwarding, configuration errors, or fraudulent use unless caused solely by IPPBX’s willful misconduct.

13. Data and Privacy Abuse

Customers may not use the Services to:

  • Collect personal information through deception;
  • Access records without authorization;
  • Sell or disclose information unlawfully;
  • Track individuals unlawfully;
  • Build unauthorized profiles;
  • Identify anonymous individuals unlawfully;
  • Process data beyond the Customer’s disclosed purpose;
  • Retain information longer than legally permitted;
  • Ignore valid privacy requests;
  • Upload unlawfully obtained data;
  • Circumvent consent or privacy choices; or
  • Combine data in a manner prohibited by law.

Customers must maintain appropriate notices, permissions, access controls, deletion processes, and security procedures.

14. Regulated Information

Customers may not submit specially regulated information unless IPPBX has approved the use in writing and the parties have completed any required agreement.

Restricted information may include:

  • Protected health information;
  • Full payment-card data outside an approved process;
  • Social Security numbers;
  • Government-classified information;
  • Export-controlled information;
  • Criminal-justice information;
  • Sensitive biometric information;
  • Student records;
  • Highly sensitive financial records; and
  • Information requiring specialized government security controls.

15. Emergency and Life-Safety Use

Customers may not use AI callers, automations, SMS, voicemail, or ordinary IPPBX applications as the sole method for:

  • Calling 911;
  • Emergency dispatch;
  • Fire or security monitoring;
  • Medical emergency response;
  • Life-safety alerts;
  • Critical infrastructure controls;
  • Suicide or crisis intervention;
  • Alarm monitoring; or
  • Any function where failure could reasonably cause death, injury, or major property damage.

Customers must maintain appropriate emergency and backup systems.

Customers may not place false emergency calls, swat another person, or transmit false public-safety information.

16. Intellectual Property and Platform Integrity

Customers may not:

  • Copy or reproduce IPPBX software without permission;
  • Resell or sublicense the Services;
  • Remove trademarks or ownership notices;
  • Reverse engineer, decompile, or disassemble software;
  • Scrape documentation or platform data;
  • Publish unauthorized performance tests;
  • Create a competing product from IPPBX materials;
  • Circumvent license controls;
  • Share proprietary prompts, configurations, or workflows; or
  • Use IPPBX trademarks deceptively.

17. Resale and Third-Party Use

Unless IPPBX provides written approval, a Customer may not:

  • Resell Services;
  • Operate as a telecommunications carrier using the Services;
  • Provide PBX or AI-call capacity to unrelated organizations;
  • Share an account among separate legal entities;
  • Use one plan as a service bureau;
  • Offer outsourced mass calling;
  • Sublease numbers or equipment; or
  • Allow an unrelated third party to control campaigns.

Approved resellers and partners remain subject to their written partner agreements and this AUP.

18. Investigation and Cooperation

IPPBX may request information reasonably necessary to investigate:

  • Spam complaints;
  • Fraud;
  • Consent;
  • Number ownership;
  • Messaging registration;
  • Call-list sources;
  • Opt-out handling;
  • Security incidents;
  • Carrier complaints;
  • High-risk traffic;
  • Regulatory inquiries; or
  • Suspected policy violations.

Customers must cooperate and may be required to provide:

  • Consent records;
  • Scripts;
  • List-source information;
  • Campaign descriptions;
  • Call or message samples;
  • Registration documents;
  • Business identity documents;
  • Opt-out procedures;
  • Security information; and
  • Corrective-action plans.

Failure to provide requested information may result in restriction or suspension.

19. Enforcement

IPPBX may take action when it reasonably believes that activity violates this AUP, creates risk, or is prohibited by a carrier or provider.

Actions may include:

  • Warning the Customer;
  • Requiring corrective action;
  • Requiring campaign approval;
  • Blocking a destination;
  • Blocking a number or sender;
  • Throttling or pacing traffic;
  • Limiting concurrency or call attempts;
  • Disabling outbound or inbound calling;
  • Disabling SMS, MMS, fax, recording, AI, or automation;
  • Suspending users or integrations;
  • Removing prohibited content;
  • Preserving relevant records;
  • Charging applicable carrier, investigation, or remediation costs;
  • Suspending or terminating the account;
  • Reporting activity to carriers, vendors, regulators, or law enforcement; and
  • Cooperating with legal process.

Immediate action may be taken without advance notice when delay could increase fraud, legal, security, carrier, network, financial, or public-safety risk.

IPPBX is not required to provide Services that a carrier, regulator, vendor, or platform has blocked or prohibited.

20. Reporting Abuse

Suspected abuse, fraud, spoofing, unlawful calling, unlawful messaging, security issues, or policy violations may be reported to:

Include, where available:

  • The calling or messaging number;
  • The receiving number;
  • Date and time;
  • Description of the communication;
  • Screenshots, recordings, or message content;
  • The organization believed to be responsible; and
  • Any opt-out request previously made.

21. Policy Changes

IPPBX may update this AUP to reflect changes in law, carrier policy, technology, security risks, industry standards, or the Services.

The updated policy will identify its effective date. Continued use after the effective date constitutes acceptance to the extent permitted by law.

22. Contact Information

IPPBX, LLC
3500 South DuPont Hwy
Dover, Delaware 19901
United States
Email: info@ippbx.com
Telephone: 877-821-8371