TCPA Disclosure & SMS/Voice Compliance Statement

Effective Date: May 8, 2026

In plain English

The TCPA is the federal law that governs business texting and calling in the United States. The short version of this page:

• You can’t accidentally break the rules. Alta refuses to send a text that’s missing your business name, lacks an opt-out line, or goes out during quiet hours.
• Opt-outs are honoured in seconds. When a customer texts STOP, Alta locks their number out across your account before any other message can reach them.
• You don’t need a lawyer to get started. Alta handles the 10DLC paperwork, quiet-hour math, and recording disclosures for you. The details below are for anyone who wants to verify the specifics or needs them for compliance review.

If a customer ever feels their rights were violated, they can email us at compliance@getalta.ai. We investigate every report.

This document describes how Alta complies with the United States Telephone Consumer Protection Act of 1991 (TCPA, 47 U.S.C. § 227) and related state laws, FCC rules, and CTIA / mobile-carrier guidelines (10DLC, A2P, Toll-Free messaging). It is intended for:

• Alta Operators — to understand the compliance rails that protect you while operating the Service.
• Consumers — to understand your rights and how to opt out.
• Carriers, regulators, and counsel — to evaluate Alta's compliance posture.

1. Who is the sender?

When Alta sends an SMS or places a voice call, the Operator is the legal sender. Alta is a tool that operates the messaging infrastructure on the Operator's behalf, similar to how an email service provider operates email on its customer's behalf.

This means:

• The Operator must obtain valid prior express consent (or prior express written consent for promotional content) before any outbound message is sent.
• The Operator is responsible for honouring all opt-outs.
• Alta's compliance systems are a safety net layered on top of — not a replacement for — the Operator's own diligence.

2. Consent

Alta supports the consent levels required by TCPA:

Operators capture consent by:

1. Web forms — Alta-generated forms include the FCC-required disclosures and a separate check-box for marketing consent (cannot be pre-checked).
2. Verbal during a call — Alta records the consent moment and stores the timestamp + transcript.
3. In-person paper forms — Operator may upload signed consent forms; Alta stores them with the Consumer record.

Consent records are retained for the life of the Consumer relationship plus 4 years (longer than the TCPA 4-year statute of limitations).

3. Opt-out compliance

3.1 Recognised keywords

The following keywords (case-insensitive, any position in the message) trigger an immediate opt-out:

STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, OPTOUT, OPT OUT, OPT-OUT, REMOVE, NO, STOP ALL.

Alta also recognises natural-language opt-outs (e.g. "please don't text me again", "take me off your list") via the ComplianceGovernor.

3.2 Honour-stop time

Federal rule: within a reasonable time, generally <24 hours. Alta processes opt-outs within 3 seconds of receipt — the Consumer is marked Do-Not-Contact (DNC) and any in-flight outbound messages to that number are cancelled before they reach Twilio.

3.3 Confirmation message

After receiving an opt-out, Alta sends exactly one confirmation message:

"You're opted out. We won't text you again from {Business Name}. Reply START to opt back in."

No further messages may be sent until the Consumer opts back in.

3.4 Permanence

Once a number is marked DNC, the suppression list is permanent across the Operator's account. Operators cannot manually remove numbers from the DNC list; the only way back on is a Consumer- initiated START.

4. Mandatory message content

Every outbound SMS sent from an Alta account includes:

1. Sender identification. The Operator's business name appears in the body — either in the greeting ("Hi from Acme Plumbing —") or as a footer ("— Acme Plumbing."). Alta's TcpaEnforcer blocks any message that omits the business name and auto-fixes when possible.
2. Opt-out instructions. The first message of every new conversation and every promotional message includes "Reply STOP to opt out." or equivalent (see § 3.1).
3. No prohibited content. Alta blocks SHAFT-C content (sex, hate, alcohol, firearms, tobacco, cannabis) at render time; such messages never reach the carrier.

5. Quiet hours

Alta enforces calling and messaging quiet hours:

| Default | 8 PM – 8 AM local time (recipient's timezone) | | State overrides (stricter) | WA: 9 PM – 9 AM, FL: 9 PM – 8 AM, others as published by state AGs | | Holidays | Operators may add holiday blackouts in Settings → Compliance | | Emergency carve-out | Emergency / safety-of-life messages may be sent outside quiet hours when the conversation is in an emergency state |

Outbound traffic queued during quiet hours is automatically deferred to the next allowed window.

6. Calling-frequency limits

Without a Consumer's explicit consent to more frequent contact, Alta caps marketing outreach at:

• 1 marketing message per Consumer per 7 days.
• 4 marketing messages per Consumer per calendar month.

Transactional and explicitly-requested messages are not counted against these caps.

7. Records & auditability

For every outbound message Alta retains:

• Consumer phone number, Operator account ID, timestamp.
• The exact final message text after compliance auto-fix.
• The compliance check result (passed / auto-fixed / blocked).
• The consent record on file at the time of send (a copy, so later changes to the consent record do not retroactively change the audit trail).
• The carrier delivery status.

Records are stored for the life of the account plus 4 years and are available to Operators in Settings → Compliance → Audit Log and to regulators upon valid legal request.

8. National Do-Not-Call Registry & state DNC lists

Alta scrubs outbound voice dial lists against:

• The National DNC Registry (refreshed every 31 days).
• The state DNC lists for IN, LA, MO, OK, OR, TN, TX, WY (refreshed monthly).
• The Operator's internal DNC list.

Voice numbers on any list are removed before the dial queue runs.

9. Call recording & two-party consent

Alta supports automatic call recording. In two-party-consent states (CA, CT, FL, IL, MA, MD, MI, MT, NH, NV, PA, WA), Alta prepends a recording disclosure to every call:

"This call may be recorded for quality and training. Stay on the line to consent, or you may hang up now."

The Consumer's response is captured in the recording itself. If the Consumer objects, the recording is destroyed within 24 hours.

10. 10DLC registration

Operators using Alta's SMS feature must complete 10DLC registration:

1. Brand registration — Alta collects the legal entity name, EIN, country of registration, address, vertical, website.
2. Campaign registration — Alta creates one or more campaigns per account, mapped to use-cases ("Customer Care", "Marketing", "Mixed").
3. Throughput — Approved campaigns operate at carrier-assigned MPS (messages-per-second) rates. Unregistered numbers cannot send commercial SMS via Alta after 90 days of account creation.

Brand-registration fees are passed through at cost.

11. Carrier filter compliance

Alta's outbound pipeline implements the following carrier rules:

• URL shorteners — Only branded short links from Alta-managed domains are permitted; public shorteners (bit.ly, tinyurl.com) are rewritten to long-form URLs.
• Phone numbers in body — Allowed; format normalised to E.164.
• Capital letters & repeated punctuation — Capped at industry norms to avoid spam-pattern detection.

12. Reporting violations

Operators or Consumers who believe a TCPA violation has occurred may report it to compliance@getalta.ai. We investigate within 5 business days and take corrective action as appropriate (operator coaching, suspension, or termination).

13. Compliance contacts

Alta Compliance Team Email: compliance@getalta.ai

General Counsel Email: legal@getalta.ai

For state-level inquiries, please reference the state above.

This document is informational and does not constitute legal advice. Operators should consult counsel for their specific compliance obligations.