Acceptable Use Policy

Last updated: July 8th, 2026

1. Overview and Relationship to the Terms of Service

This Acceptable Use Policy (the “Policy” or “AUP”) governs how you may use the Goliath Data platform and services (the “Service”), including our CRM, data, skip-tracing, and outreach features across text messaging, calling, email, and physical mail. This Policy is incorporated into and forms part of the Goliath Data Terms of Service (the “Terms”). Capitalized terms not defined here have the meanings given in the Terms.

By accessing or using the Service, you agree to this Policy. A violation of this Policy is a breach of the Terms. Where this Policy and the Terms conflict, the Terms control, except that this Policy controls with respect to the specific acceptable-use and compliance matters it addresses. We may update this Policy from time to time as laws, carrier requirements, and industry standards change; your continued use of the Service after an update constitutes acceptance of the updated Policy.

2. Your Responsibility for Legal Compliance

You are solely responsible for determining that you have a lawful basis and the legal right to contact each individual you contact through the Service, and for complying with all laws that apply to how you contact them. This responsibility applies regardless of the source of your contacts, the channel you use, or the nature of your business.

Depending on the channels and content you use, applicable laws may include, without limitation: the Telephone Consumer Protection Act (“TCPA”); the CAN-SPAM Act; the National Do Not Call Registry and applicable state Do Not Call lists; and state telemarketing, solicitation, consent, registration, and disclosure laws — including, without limitation, Texas Senate Bill 140 and the Florida Telephone Solicitation Act (“FTSA”). You are responsible for monitoring changes to these and other applicable laws and for adjusting your use of the Service accordingly.

You are responsible for, among other things:

• Establishing and maintaining a lawful basis for each contact and each channel you use;

• Scrubbing your lists against the National Do Not Call Registry and applicable state Do Not Call lists before contacting recipients;

• Promptly honoring all opt-out, STOP, unsubscribe, and do-not-call requests, and suppressing recipients who have opted out;

• Respecting all applicable calling and messaging hour restrictions (“quiet hours”), which vary by state;

• Providing accurate sender and caller identification and all disclosures required by law;

• Obtaining and maintaining any registrations, bonds, certificates, or carrier approvals your outreach requires, including A2P 10DLC brand and campaign registration; and

• Maintaining records sufficient to demonstrate your own compliance, including consent records.

3. Sender Status, Consent, and Records

You are the sender and initiator of all communications you create, schedule, or send through the Service. Goliath Data provides tools that you direct and control; we do not review, approve, or verify the lawfulness of your contacts, lists, or content before they are sent.

Goliath Data does not obtain, verify, supply, or store consent on your behalf, and has no obligation to produce consent records on your behalf. You are solely responsible for obtaining, documenting, retaining, and — if required by a court, regulator, carrier, or recipient — producing any consent, opt-in, or authorization on which your contacts rely.

4. Channel-Specific Obligations

4.1 Text Messaging (SMS/MMS)

You must have a lawful basis and the legal right to text each recipient, comply with the TCPA, the National and applicable state Do Not Call lists, and applicable state telemarketing laws (including Texas SB 140 and the FTSA), honor STOP and other opt-out requests promptly, observe quiet hours, and maintain valid A2P 10DLC brand and campaign registration and all carrier and messaging-industry requirements applicable to your traffic.

4.2 Calling (including Multiline and Staffed Calling)

You must have a lawful basis and the legal right to call each recipient, comply with the TCPA, the National and applicable state Do Not Call lists, and applicable state telemarketing and caller-registration laws (including Texas SB 140), honor do-not-call and opt-out requests promptly, observe calling-hour restrictions, and provide required caller identification and disclosures.

4.3 Email

You must have a lawful basis to email each recipient and comply with the CAN-SPAM Act and applicable state law, including accurate header, sender, and subject-line information, a functioning unsubscribe mechanism that you honor promptly, and a valid physical postal address where required.

4.4 Physical Mail

You must have the legal right to mail each recipient, accurately identify yourself and your business in your mailers, and comply with applicable advertising and consumer-protection laws.

5. Import and Campaign Attestations

When you import contacts into the Service or launch a campaign, you may be required to affirm the representations in this Policy for the applicable channel. These affirmations are a condition of your use of the Service. You agree that each affirmation is true and accurate at the time you make it, and that Goliath Data is entitled to rely on it. We may record and retain these affirmations — including the affirming user, the date and time, the affected list or campaign, the version of the affirmation, and related metadata — as a record of your acknowledgment.

6. Prohibited Uses

You may not use the Service to:

• Contact any person without a lawful basis or in violation of any applicable law, including the TCPA, CAN-SPAM, the National or any state Do Not Call list, or any state telemarketing or consent law;

• Send messages or place calls to recipients who have opted out, unsubscribed, or requested not to be contacted;

• Send during prohibited hours or in violation of applicable frequency or volume restrictions;

• Falsify, disguise, or obscure your identity, sender information, or the origin of a communication, or evade carrier filtering, registration, or spam-prevention measures;

• Transmit content that is unlawful, fraudulent, deceptive, harassing, defamatory, or that infringes third-party rights;

• Send content prohibited by carriers or messaging-industry standards, or misrepresent your traffic or use case during registration; or

• Circumvent, disable, or interfere with any security, compliance, suppression, or rate-limiting feature of the Service.

7. Your Representations and Warranties

You represent, warrant, and covenant that, for every communication you initiate through the Service: (a) you have a lawful basis and the legal right to contact the recipient through the channel used; (b) you will comply with all applicable federal, state, and local laws and all carrier and messaging-industry requirements; (c) you will promptly honor all opt-out, STOP, unsubscribe, and do-not-call requests; and (d) your content is accurate, not deceptive, and clearly identifies you as the sender. You are solely responsible for your consent records and for producing them if required.

8. Limitation of Liability

Goliath Data’s liability under the Terms and this Policy for any claim is limited to direct damages only. Goliath Data’s total liability shall not exceed the total fees you paid to Goliath Data for the services that are the subject of the claim during the six (6) months preceding the claim.

8.1 Exclusion of Liability

Goliath Data is not liable for any indirect, special, incidental, or consequential damages that may arise from the use of, or inability to use, the services provided. This includes, but is not limited to, loss of profits, data, or business interruption, damage to reputation, loss of anticipated savings, or wasted expenditure. This exclusion applies even if Goliath Data has been advised of the possibility of such damages. It is understood that the services are provided “as is,” with no warranty of uninterrupted or error-free operation.

9. Indemnification

You agree to indemnify, defend, and hold harmless Goliath Data and its officers, directors, employees, agents, and affiliates from and against any and all claims, liabilities, damages, losses, and expenses, including reasonable attorneys’ fees and costs, arising out of or in any way connected with:

• Your use of the services provided under the Terms and this Policy;

• Any breach or non-compliance by you with any term of the Terms or this Policy; and

• Any claim that your actions or use of the services infringe upon, violate, or misappropriate any third party’s rights or cause harm to a third party.

Goliath Data shall not be liable for any fines, penalties, or damages resulting from TCPA or related complaints. You acknowledge that you are solely responsible for ensuring compliance with all applicable laws and regulations regarding the use of telemarketing services in your area.

10. Suspension and Termination

We may suspend or terminate your access to the Service, in whole or in part, without notice, if we believe you have violated the Terms or this Policy, or as necessary to comply with applicable law or carrier requirements. If your access is suspended or terminated for a violation, you will not be entitled to any refund, credit, or compensation of any kind.

11. Changes to this Policy

We may modify this Policy at any time to reflect changes in law, carrier or messaging-industry requirements, or our practices. We will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after a change takes effect constitutes your acceptance of the revised Policy.

12. Contact

Questions about this Policy may be directed to Goliath Data at [email protected].

© Goliath Data. All rights reserved. This Acceptable Use Policy is incorporated into the Goliath Data Terms of Service.