Terms of service

01Introduction; version; acceptance

If you signed a separate Cover Page or other written agreement to access the Product with the same account, and that agreement has not ended, the terms below do not apply to you. Instead, your separately signed agreement continues to govern your use of the Product unless the parties agree otherwise in writing or electronically.

This Agreement is between Autophonix, LLC d/b/a ThunderPhone and the company or person accessing or using the Product. This Agreement consists of the Order Form below (which serves as the Cover Page) and the Framework Terms defined below.

Acceptance. Customer accepts this Agreement by completing the acceptance step presented in the Product: checking the acceptance checkbox and submitting it. That recorded submission is Customer's acceptance of this Agreement and its Effective Date. Creating login credentials, browsing, or being shown this Agreement is not, by itself, acceptance. If you complete the acceptance step on behalf of your company, you represent that you are authorized to accept this Agreement on behalf of your company, and Customer means that company.

Version; Effective Date of this document. This document is Terms of Service version 2.3, published August 4, 2026. Its substantive terms are unchanged from version 2.0, published July 31, 2026, except that this version removes procedural descriptions of other acceptance surfaces (from the Unlimited Claims designation and the limitation-of-liability section) and corrects the acceptance-evidence description to match the recorded evidence. It governs Customers who first accept this Agreement on or after that date, and any Customer who later affirmatively accepts it. A Customer whose acceptance is recorded against an earlier version remains governed by that earlier version (or its separately signed agreement) until the Customer affirmatively accepts a later version under the Changes section below.

Acceptance evidence. For each acceptance, Provider records the version accepted, a SHA-256 hash of the canonical text of the accepted document, the canonical English acceptance-checkbox language (the binding text of the acceptance), the display language, the accepting user and (where applicable) organization, the date and time of acceptance, and reasonable technical evidence of the accepting session. Customer may request a copy of the version it accepted by emailing legal@thunderphone.com.

02Order form

Framework Terms: This Order Form incorporates and is governed by Framework Terms made up of the Key Terms below and the Common Paper Cloud Service Agreement Standard Terms Version 2.1 (the "Standard Terms"), incorporated by reference and available at https://commonpaper.com/standards/cloud-service-agreement/2.1/. The ThunderPhone-specific modifications in this Order Form control over conflicting provisions of the Standard Terms. This Order Form serves as the Cover Page under the Standard Terms; references to the "Cover Page" and the "Order Form" mean this same document. Capitalized words have the meanings given in this Order Form or the Standard Terms. Provider retains an archival copy and SHA-256 hash of each version of this Order Form as presented for acceptance; the incorporated Standard Terms are the version-pinned document published at the URL above.

• Cloud Service: ThunderPhone provides an AI-assisted telephony platform for call setup and routing, optional call recording and transcription, real-time and asynchronous analytics, and related support and billing.
• Order Date: the Effective Date.
• Subscription Period: Customer does not commit to a fixed subscription period, minimum term, or automatic renewal. For purposes of provisions in the Standard Terms that refer to the "Subscription Period," that term means the continuous period beginning on the Effective Date and ending when this Agreement is formally terminated under the Service Term section below; it does not create a recurring subscription or renewal obligation. This definition modifies Section 5.1 (Order Form and Agreement) of the Standard Terms, and no automatic renewal or non-renewal notice mechanics apply.
• Cloud Service Fees: pricing is per-minute usage as posted at https://thunderphone.com/pricing. Customer will pay the applicable per-minute rates and any other posted usage fees based on actual use. Provider may update pricing prospectively by giving at least 30 days' notice; a rate change will not alter charges already incurred or the purchase value of credits already funded, except as clearly disclosed before purchase. No free trial is offered. Fees are exclusive of Taxes. Certain usage may be subject to carrier and regulatory pass-through surcharges, such as 10DLC, CNAM, E911, and USF, which may change and are charged at cost. Provider's call detail records are the system of record for calculating usage.
• Payment Process: as described in the Prepaid Billing section below.
• Non-Renewal Notice Period: not applicable; there is no automatic renewal.

03Key terms

• Customer: the company or person who accesses or uses the Product. If the person accepting this Agreement is doing so on behalf of a company, all use of the word Customer in the Agreement will mean that company.
• Provider: Autophonix, LLC d/b/a ThunderPhone.
• Effective Date: the date of Customer's first recorded affirmative acceptance of this Agreement, as described in the Introduction.
• Governing Law: the Federal Arbitration Act governs the interpretation and enforcement of the Dispute Resolution section. The laws of the State of California, without regard to conflict-of-law rules, govern the remainder of this Agreement.
• Chosen Courts: for disputes not subject to arbitration under the Dispute Resolution section below, and subject to the small-claims exception, the state courts located in San Francisco County, California and the United States District Court for the Northern District of California.
• General Cap Amount: 1x the Fees paid or payable by Customer to Provider in the 12-month period immediately before the event giving rise to the claim.
• Increased Cap Amount: the greater of 3x the General Cap Amount or $250,000, applicable to the Increased Claims identified in the Liability section below (this uses the defined term of Section 8 of the Standard Terms).
• Unlimited Claims: the claims designated as Unlimited Claims in the Covered Claims and Liability sections below, which are not subject to any cap.
• Notice Address for Provider: legal@thunderphone.com. Notice Address for Customer: the main email address on Customer's account.

04Covered claims; consent indemnity

PLEASE READ THIS SECTION CAREFULLY. IF CUSTOMER DISABLES CONSENT ANNOUNCEMENTS, RELIES ON ITS OWN CONSENT BASIS, OR ORIGINATES CALLS THROUGH APIS OR WEBHOOKS, CUSTOMER'S OBLIGATION TO INDEMNIFY PROVIDER FOR THE RESULTING CONSENT, RECORDING, AND CALLING-LAW CLAIMS IS UNCAPPED (AN UNLIMITED CLAIM).

• Provider Covered Claims: any action, proceeding, or claim that the Cloud Service, when used by Customer according to the Agreement, violates, misappropriates, or otherwise infringes upon a third party's intellectual property or other proprietary rights.
• Customer Covered Claims: (a) any action, proceeding, or claim that Customer Content, when used according to the Agreement, violates, misappropriates, or otherwise infringes upon a third party's intellectual property or other proprietary rights; (b) any claim arising from or relating to Customer's breach or alleged breach of Section 2.1 of the Standard Terms; and (c) the Consent Covered Claims defined below.
• Consent Covered Claims: any action, proceeding, investigation, demand, or claim arising from or relating to: (i) Customer's disabling, replacement, or modification of Provider's default consent announcement, or any inaccuracy in, or breach of, a consent-announcement attestation or other consent basis provided by Customer; (ii) calls Customer originates or configures through Provider's APIs or webhook integrations (including calls that do not carry an agent announcement), to the extent the claim arises from Customer's breach of this Agreement, Customer's failure to provide required notices or obtain or retain required consents, Customer's unlawful instruction or campaign, or another act or omission within Customer's control; or (iii) Customer's failure to provide required notices, obtain or retain required consent, honor withdrawal or opt-out rights, identify an artificial or prerecorded voice or the responsible calling business, or otherwise comply with laws governing recording, interception, transcription, automated analysis, artificial-intelligence disclosure, telephone solicitation, or communications — in each case except to the extent caused by Provider's breach of this Agreement, Provider's failure to perform Customer's saved configuration, Provider's gross negligence or willful misconduct, Provider's own negligent or willful violation of applicable law, or Provider's violation of a duty that cannot lawfully be delegated or waived.

Unlimited Claims designation. Customer's indemnification obligations for Customer Covered Claims — including, for the avoidance of doubt, all Consent Covered Claims — are designated Unlimited Claims under Section 8 of the Standard Terms. No General Cap Amount, Increased Cap Amount, or other limitation or exclusion of liability in this Agreement or the Standard Terms applies to them. This designation is disclosed in the notice above. It never extends to liability excluded by the Consent Covered Claims exception tail above, including Provider's own negligent or willful violation of applicable law.

05Attachments and incorporated documents

• Standard Terms: Common Paper Cloud Service Agreement Standard Terms Version 2.1 — https://commonpaper.com/standards/cloud-service-agreement/2.1/
• Privacy Policy: https://thunderphone.com/privacy
• DPA: https://thunderphone.com/dpa — incorporated into and forming part of this Agreement.
• Security Measures: https://thunderphone.com/dpa#security-measures (the security annex of the DPA).
• BAA: where Customer and Provider have executed a Business Associate Agreement, that BAA is incorporated into this Agreement and controls for Protected Health Information. Contact legal@thunderphone.com to request one.

06Service scope notes

• No Emergency Services. The Service is not a replacement for 911/999 or other emergency services.
• Carrier/Network Dependencies. Delivery, quality, and availability may depend on third-party carriers and networks.

07AI features; customer-configured agents

The Service uses artificial intelligence, and callers interacting with a configured agent may be interacting with an AI system. AI features may generate incomplete, inaccurate, or unexpected statements. AI output is not professional advice and is not a substitute for Customer's testing, supervision, and human review. Customer is responsible for its agent configuration, instructions, prompts, scripts, integrations, campaigns, recipient selection, and use of generated output.

Customer will provide all notices and obtain all consents required for artificial or prerecorded voice calls, AI participation, call recording, transcription, analytics, telemarketing, and related processing. For outbound calls, any consent required under the TCPA or similar law for an artificial, prerecorded, or AI-generated voice must exist before the call is initiated; an in-call greeting does not cure an unlawfully placed call. Customer will comply with applicable communications laws and rules, including the TCPA, telemarketing and opt-in/opt-out requirements, calling-hour restrictions, and Do-Not-Call restrictions, and will provide the responsible-business identification and contact or opt-out information required by law. Provider may suspend the Service for violations.

Customer will not configure or instruct an agent to falsely claim that it is human or to deny that it is an AI system when asked. Disabling or replacing Provider's default announcement does not eliminate any of Customer's legal obligations.

08Recording and consent; announcement control; API/webhook calls

• Recording and Consent. Customer is solely responsible for providing all legally required notices and obtaining and retaining all required consents for call recording, interception, transcription, automated analysis, storage, and related processing, for every participant on every affected call, including participants added by conference or transfer.
• Announcement control; attestation. Provider offers a default consent announcement as a compliance control. Where Provider permits Customer to disable it upon an attestation, Customer represents that each attestation is accurate, is made by an authorized organization administrator, and remains accurate for as long as the announcement is disabled. Provider may suspend or revoke an announcement exception and restore the announcement at any time. Disabling the announcement does not disable recording, transcription, analysis, storage, or AI operation, and does not transfer any of Customer's legal obligations to Provider.
• API- and Webhook-Originated Calls. Calls that Customer originates or configures through Provider's APIs or webhook integrations may connect without any agent announcement. Such calls are expressly excluded from Provider's consent-announcement framework and from any representation, description, or documentation of that framework, and no Provider consent, recording, or disclosure control is represented to apply to them. Customer is solely responsible for all recording, monitoring, AI-participation, and identification notices and consents on those calls, and they are Consent Covered Claims for indemnification purposes.

09Data protection; no AI training on customer content

• Data Protection. Provider processes Personal Data as described in the Data Processing Addendum, which is incorporated into and forms part of this Agreement.
• AI Training and Customer Data. Notwithstanding Section 1.6 of the Standard Terms, Provider will not use Customer Content, Customer Personal Data, PHI, call recordings, transcripts, or data derived from them to train or improve a generalized machine-learning model for Provider or any third party. Provider may process such data to provide, secure, troubleshoot, and improve Customer's use of the Service as permitted by the DPA and, where applicable, the BAA. Provider may use Usage Data only after it has been aggregated and deidentified so that it is not Personal Data and cannot reasonably be associated with Customer, a user, caller, or individual. PHI will never be used for model training.
• Support Channels; No PHI. Support conversations — in-product chat, email, and connected business-messaging tools — are business communication channels, not PHI-processing surfaces, and their content may be handled or mirrored by subprocessors that are not covered by a BAA. Customer will not, and will ensure its Users do not, submit PHI through support channels. PHI may be shared with Provider only through Service features covered by an executed BAA.
• Precedence. The DPA controls for Personal Data, and an executed BAA controls for PHI, over any conflicting provision of this Agreement or the Standard Terms.

10Service term; suspension; termination

No Subscription; Service Term. Customer does not commit to a fixed subscription period, minimum term, or automatic renewal. The Agreement is effective as of the Effective Date and continues until formally terminated as set out below.

Termination. Customer may terminate the Agreement at any time by written notice to legal@thunderphone.com sent from the account's administrative email or another verifiable channel. Provider may terminate without cause on thirty (30) days' notice and may terminate or suspend for cause as provided in the Standard Terms.

Suspension is not termination; billing lapse is never a deletion trigger. Suspension for insufficient funds, failed payment, exhausted or negative balance, inactivity, or compliance review is not termination. A lapse in payment is never, by itself, a termination of this Agreement and is never a trigger for deletion of Customer Data. During suspension, the Agreement remains in effect and Customer Data is retained under the DPA, any executed BAA, the Privacy Policy, and the applicable retention schedule.

Data return and deletion. After formal termination, Provider will return or delete Customer Data within sixty (60) days, subject to Customer's export rights, backup cycles, legal holds, legally required retention, the DPA, and any executed BAA. PHI will be returned or destroyed as required by the BAA.

11Prepaid billing; payment; billing disputes

Prepaid Usage Billing. Sections 4.2 (Invoicing), 4.3 (Automatic Payment), and 4.5 (Payment) of the Standard Terms are replaced as follows; Sections 4.1 (Fees) and 4.4 (Taxes) continue to apply. The Service is generally prepaid. Customer purchases usage credits, and charges are deducted from Customer's balance at the rates displayed in the Service or agreed in a signed Order Form. Customer must maintain a valid payment method on file to purchase credits, and may authorize automatic top-ups under the threshold, amount, and payment method selected in the Service. Provider may suspend usage when the balance is insufficient, negative, or cannot be replenished; suspension is governed by the Service Term section above and never triggers deletion of Customer Data. Customer will not receive general postpaid or net-30 invoicing unless Provider expressly approves it in a separately signed Order Form. If Provider expressly permits usage to exceed a prepaid balance, Customer authorizes Provider to charge the payment method on file for that excess usage.

Billing Disputes. Section 4.6 (Payment Dispute) of the Standard Terms is modified as follows: Customer must notify Provider of any good-faith billing dispute within 30 days after the charge date; the parties will work together in good faith to resolve disputes. Undisputed amounts remain payable.

12Liability caps and carve-outs

General Cap. Except as provided below, each party's aggregate liability is capped at the General Cap Amount: 1x the Fees paid or payable by Customer during the twelve (12) months preceding the event giving rise to the claim.

Increased Claims. The Increased Cap Amount — the greater of 3x the General Cap Amount or $250,000 — applies instead of the General Cap Amount to the following Increased Claims: breach of the confidentiality obligations in Section 10 (Confidentiality) of the Standard Terms; breach of the security obligations in Section 3 (Privacy & Security) of the Standard Terms or in the Security Measures annex of the DPA; breach of the DPA or an executed BAA; and Provider's indemnification obligations for Provider Covered Claims.

Unlimited Claims. No contractual cap or exclusion applies to the following Unlimited Claims: Customer's indemnification obligations for Customer Covered Claims (including all Consent Covered Claims), as designated in the Covered Claims section above; Customer's payment obligations; a party's infringement or misappropriation of the other party's intellectual property; fraud or willful misconduct; gross negligence where limitation is prohibited; or liability that cannot lawfully be limited. Nothing in this Agreement exempts a party from responsibility for its own fraud, willful injury, or violation of law where California Civil Code §1668 or other applicable law prohibits that exemption.

Nonwaivable rights. Nothing in this Agreement limits a data subject's rights, a regulator's authority, or obligations that cannot be limited under the SCCs, the UK Addendum, applicable privacy law, or HIPAA.

13Dispute Resolution; Binding Arbitration; Class Action Waiver

PLEASE READ THIS SECTION CAREFULLY. IT REQUIRES ARBITRATION OF DISPUTES ON AN INDIVIDUAL BASIS AND AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO SUE IN COURT AND TO A JURY TRIAL. YOU MAY OPT OUT WITHIN 30 DAYS AS DESCRIBED BELOW.

• Application; No Retroactive Effect. This Dispute Resolution section applies only to disputes that arise or accrue after Customer affirmatively accepts a version of this Agreement containing this section. It does not apply to any dispute that arose or accrued before that acceptance, and it does not displace the dispute-resolution terms of a separately signed agreement.
• Thirty-Day Opt-Out. Customer may opt out of this Dispute Resolution section by emailing legal@thunderphone.com within thirty (30) days after Customer first affirmatively accepts a version of this Agreement containing arbitration. The notice must identify Customer's legal name, organization, and account email, and clearly state that Customer opts out of arbitration. An opt-out applies to the Customer account identified in the notice and binds both parties as to that Customer. Opting out will not affect Customer's access to the Service or any other provision of this Agreement.
• Informal Resolution First. Before commencing arbitration, the claimant must send a written notice describing the dispute, the material facts, the account involved, and the relief sought. Customer must send notice to legal@thunderphone.com. Provider must send notice to Customer's administrative account email and any contractual notice address. The parties will attempt in good faith to resolve the dispute for thirty (30) days after receipt, and either party may commence arbitration only after that period. Applicable limitation periods and contractual filing deadlines are tolled during that period. Either party may seek emergency temporary relief necessary to prevent imminent irreparable harm, and either party may bring an eligible small-claims action, without completing this process.
• Binding Arbitration. Except as provided in this section, any dispute, claim, or controversy arising out of or relating to this Agreement or the Product, including its formation, interpretation, breach, or termination, will be finally resolved by binding arbitration administered by JAMS before one neutral arbitrator, in English. The JAMS Streamlined Arbitration Rules (jamsadr.com/rules-streamlined-arbitration) apply when the amount sought is $250,000 or less, excluding attorneys' fees and interest; the JAMS Comprehensive Arbitration Rules (jamsadr.com/rules-comprehensive-arbitration) apply otherwise, in each case as in effect when the arbitration demand is filed. The Federal Arbitration Act governs the interpretation and enforcement of this section. Judgment on the award may be entered in any court of competent jurisdiction.
• Consumer Arbitrations; Fees. A "Consumer Arbitration" is any arbitration in which Customer is an individual who obtained or used the Product primarily for personal, family, or household purposes, and any arbitration that JAMS treats as a consumer arbitration under its Consumer Minimum Standards (jamsadr.com/consumer-minimum-standards). In every Consumer Arbitration, those standards apply, Customer will pay no more than $250 total in administrator and arbitrator fees regardless of any administrator applicability determination, and Provider will pay all remaining administrator and arbitrator fees; if Provider initiates a Consumer Arbitration against Customer, Customer pays no administrator or arbitrator fees at all. These commitments are subject to any greater right provided by law. In a nonconsumer arbitration, fees are allocated under the applicable JAMS rules. Each party bears its own attorneys' fees unless a statute, this Agreement, or the arbitrator's award permits fee shifting.
• Seat; Hearings. The legal seat of arbitration is San Francisco County, California. Hearings may be conducted by videoconference, and a consumer may participate remotely or from the county of the consumer's residence when required by JAMS standards or applicable law.
• Fallback Administrator. If JAMS is unavailable or declines to administer the arbitration, it will be administered by the American Arbitration Association under its Commercial or Consumer Arbitration Rules, as applicable. If neither administrator is available, a court may appoint an arbitrator under 9 U.S.C. §5.
• Delegation. A court, not the arbitrator, will decide disputes concerning whether an arbitration agreement was formed, whether Customer accepted an amendment or which competing agreement controls, the enforceability of the class- or representative-action waiver, and whether a request constitutes nonwaivable public injunctive relief. The arbitrator will decide all other questions concerning the scope and application of this section, including arbitrability of particular claims.
• Coordinated and Mass Filings. If seventy-five (75) or more substantially similar arbitration demands are submitted or credibly threatened against the same party by the same or coordinated counsel, the JAMS Mass Arbitration Procedures and Guidelines (jamsadr.com/mass-arbitration-procedures) will apply. A JAMS Process Administrator may determine administrative issues and group common questions for scheduling, discovery, or other efficient case management. Each claimant retains an individual merits determination and individual remedy unless all affected parties agree otherwise in writing. No bellwether decision will bind a nonparty or nonparticipating claimant. Applicable limitation periods and contractual filing deadlines are tolled from delivery of a substantially complete demand until JAMS permits that demand to proceed. Neither party may use this process to impose unreasonable delay. Administrative grouping under this paragraph is not a class, collective, consolidated-merits, or representative action.
• Exceptions. Either party may (a) bring an individual claim in small-claims court, or (b) seek injunctive or other equitable relief in the Chosen Courts for actual or threatened infringement or misuse of intellectual property or confidential information, or unauthorized access to the Product.
• Individual Proceedings; Nonwaivable Relief. Except as stated in this paragraph, each party may bring claims only in its individual capacity, and not as a plaintiff or class member in a class, collective, consolidated, or representative action, and the arbitrator may not consolidate more than one person's claims or preside over any form of representative proceeding. Nothing in this Agreement waives a right to seek public injunctive relief where applicable law prohibits that waiver, prevents either party from reporting conduct to or participating in proceedings before a government agency, or restricts an agency's authority to investigate or obtain relief. To the extent permitted by law, arbitrable liability and individual-remedy issues will be resolved in arbitration first, and only a nonarbitrable public-injunctive remedy will proceed in the Chosen Courts.
• Jury Trial Waiver. To the extent any dispute proceeds in court rather than arbitration, each party knowingly and irrevocably waives its right to a trial by jury.
• Severability. If any portion of the waiver of class, collective, consolidated, or representative proceedings or relief is found unenforceable, only the specific nonwaivable relief or remedy affected by that finding will proceed in the Chosen Courts; every arbitrable claim, liability determination, and individual remedy — including those attached to the same claim — remains subject to individual arbitration under this section. Any other invalid language in this section will be severed only to the minimum extent necessary.
• Precedence. This section governs dispute resolution notwithstanding anything to the contrary in the Standard Terms. Mandatory forum, supervisory-authority, and data-subject rights under the DPA, the SCCs, the UK Addendum, an executed BAA, or applicable law control over this section and over the Chosen Courts selection.

14Changes to this Agreement; versioning

Changes; Versioning; Acceptance. Provider may update this Agreement by sending notice to Customer's administrative email and posting the updated Agreement at least thirty (30) days before its effective date. Continued use after the effective date constitutes acceptance of an update other than a Dispute Resolution Update. A "Dispute Resolution Update" is any addition or material change to arbitration, delegation, jury-trial waiver, or class-, collective-, consolidated-, representative-, or public-injunctive-relief provisions; a Dispute Resolution Update will apply only after Customer affirmatively accepts the updated Agreement electronically and will not apply to a dispute that arose or accrued before that acceptance. A customer governed by a separately signed agreement remains governed by that signed version unless the parties agree otherwise in writing or electronically. Each version of this Agreement is identified by a version number, and Provider retains an archival copy and SHA-256 hash of each version as presented. This section expressly modifies Section 12.2 of the Standard Terms.