Trust & compliance
Compliance is the product, not a checkbox.
Outbound AI messaging carries real TCPA and privacy risk. Here's exactly how Kelvin handles it — every rule below is enforced in software before a message goes out, and reviewed by TCPA counsel before each customer goes live.
Consent
No text message without documented consent for that number.
Every send checks a consent ledger at the moment of sending — not when the campaign was scheduled. No record, no send.
Opt-out
STOP — or “please stop texting me” — works across every channel in under a minute.
Keywords are caught instantly; plain-English opt-outs are caught by a classifier. The contact is suppressed on email and text, for every campaign.
AI disclosure
Every conversation opens by saying it's an AI assistant, with a way to reach a person.
Templates without the disclosure can't be approved. Kelvin never denies being an AI.
Send windows
9am–7pm in the customer's local time, Monday to Saturday, never on federal holidays.
Time zone comes from the service address. If it's unknown, the message doesn't send. Max one message a day, three a week, across all agents.
State rules
Stricter states get stricter treatment.
Florida is email-only at launch. Additional state rules are added as counsel advises.
CAN-SPAM compliant, from your own domain.
Unsubscribe link and physical address on every email; SPF, DKIM and DMARC set up before the first send.
What the AI says
No diagnosis, no refrigerant advice, no prices outside your price book, no financing terms.
Answers come only from your approved FAQ and price book, then pass an automated check before sending. Anything uncertain goes to a human.
Approval
Nothing sends until the owner approves it.
You see real rendered examples first. Approved templates are locked and versioned. A kill switch stops everything in under a minute.
ROI claims
We don't publish results we can't prove.
A small random holdout group is never contacted, so reported lift is measured, not assumed.
Your data
Handled like it's ours to lose.
Zero training
Your customers' data is never used to train AI models. We use zero-data-retention AI endpoints.
US-hosted
Customer data is stored in the United States.
Least privilege
Our ops team works inside the app with masked contact details, no exports, and every view logged.
Encryption
TLS in transit, AES-256 at rest; integration keys encrypted in the database.
Audit trail
Every send, approval, opt-out and data view is recorded in an append-only log.
Deletion
Audit data deleted within 30 days if you don't buy; customer data within 30 days of contract end.
See our privacy policy, SMS terms and sub-processor list.