Acceptable Use Policy

All messaging through the Service must be sent to recipients with whom you have a prior business relationship or who have given prior, demonstrable consent appropriate to the channel. "Implicit" or "inferred" consent based on someone's job role, public listing, or membership in a list is not sufficient.

You must honor unsubscribe requests on the same day you receive them, and never re-onboard a previously suppressed contact without a fresh, documented consent event. Yapii enforces a unified suppression list across email and SMS - see Suppression.

You may not import contacts that were purchased from a third party, scraped from public websites, harvested from MLS or directory data without a lawful basis to message, or appended via cold-email vendors. We use heuristics (high bounce rates, spam-trap hits, inconsistent age signals) to detect list-broker patterns, and we may suspend an account that crosses our thresholds while we investigate.

Repeated importation of broker lists is grounds for termination. Reinstatement after a termination of this kind is at Yapii's sole discretion and may require a third-party deliverability audit at your expense.

You may not use the Service for fraud, phishing, credential harvesting, harassment, defamation, or any activity that violates applicable law. This includes, without limitation, the Telephone Consumer Protection Act (TCPA), CAN-SPAM, the FTC Telemarketing Sales Rule, the Fair Debt Collection Practices Act (FDCPA), and the equivalent laws in any jurisdiction where you send (e.g. Canada's CASL, the EU ePrivacy Directive).

You also may not use the Service to circumvent our technical safeguards, including rate limits, suppression enforcement, or abuse heuristics, or to test or probe the Service in any way that resembles malicious activity, except under an authorized engagement (see Prohibited Activities).

Even within the bounds of law, some categories of content are not appropriate for a real-estate-focused customer engagement platform and are not permitted on Yapii:

• Adult or sexually explicit content; sexual services; escort or massage parlor solicitation.
• Firearms, weapons, explosives, and ammunition sales.
• Tobacco, vaping, cannabis (including hemp/CBD), and prescription pharmaceuticals.
• Gambling, sports betting, casinos, and lottery promotions.
• Multi-level marketing (MLM), pyramid schemes, get-rich-quick offers, and "work from home" recruitment.
• Payday loans, debt-elimination, debt-consolidation, and credit-repair offers.
• Cryptocurrency or NFT promotions (other than legitimate real-estate-tokenization disclosures with appropriate consent).
• Political campaign or issue advocacy, except where the recipient has explicitly opted in to that political communication.
• Hate speech, content that incites violence, or content that targets a person or group on the basis of a protected characteristic.
• Misleading real-estate practices, including bait-and-switch listings, undisclosed dual representation, or phantom-buyer scripts.
• AI-generated impersonation of a real person, agent, brokerage, or brand without that person or entity's documented consent.

• Network abuse, including denial-of-service attacks, port scanning, or any attempt to disrupt the Service or other customers.
• Security testing, vulnerability research, or penetration testing of the Service except under our published responsible-disclosure or bug-bounty program.
• Reverse engineering, decompiling, or attempting to extract model weights or training data from any Yapii AI feature.
• Bypassing authentication, rate limits, suppression enforcement, or any other access control.
• Sharing login credentials between users; using a single seat to operate multiple businesses or workspaces (each Authorized User must have their own seat).
• Use of automation, scraping, or scripts that materially exceed normal interactive usage of the product without prior written consent.
• Creation of accounts for the purpose of evading a prior suspension or termination.

Deliverability is a shared responsibility. Yapii operates on a strict sending-reputation model: domains and accounts that generate elevated complaint rates, hard-bounce rates, or spam-trap hits will be throttled or suspended automatically, regardless of intent.

• Every custom sending domain must have valid SPF, DKIM, and DMARC records before it can be used to send through the Service.
• From-address impersonation of major free providers (e.g. gmail.com, yahoo.com) is not permitted; use a domain you own.
• Bulk sends from new domains are warmed up gradually; sending caps apply during the warm-up period.
• Spam-complaint rate sustained above 0.3% over a rolling 7-day window will trigger throttling; sustained above 0.5% will trigger suspension and a required review.
• Hard-bounce rate sustained above 5% will trigger throttling; sustained above 10% will trigger suspension.

Email (CAN-SPAM, CASL, ePrivacy)

Email requires either (a) an existing business relationship the recipient would reasonably expect, or (b) demonstrable opt-in. Every email must include a clear unsubscribe mechanism that takes effect within 10 business days (CAN-SPAM) - Yapii enforces same-day suppression. CASL (Canada) requires express consent for most commercial email; you are responsible for evidencing that consent.

SMS / MMS (TCPA, CTIA)

SMS requires prior express written consent for marketing messages, and prior express consent for transactional messages. Consent must be specific to SMS, not bundled with general terms. Every message campaign must respect the recipient's time zone and the TCPA quiet-hours window (8am-9pm local time). Every message must include a clear opt-out ("Reply STOP to unsubscribe"); Yapii enforces STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT across the unified suppression list. SMS short codes and 10DLC long codes require campaign registration with The Campaign Registry.

Voice (TCPA, TSR)

Outbound voice using automated dialing technology requires prior express written consent and must respect the National Do Not Call Registry, internal do-not-call lists, and applicable state restrictions. Pre-recorded messages have additional requirements; consult counsel.

• Sender identity: messages must clearly identify the actual sender - your real estate brand or agent name - not a misleading affiliate.
• Subject lines: must accurately describe the content of the email; no deceptive lures.
• Physical address: every commercial email must include a valid postal address (CAN-SPAM Section 5).
• Working unsubscribe: link must remain functional for at least 30 days after the message is sent.
• No misrepresentation of the recipient relationship ("Re:", "Fwd:", "as we discussed") unless that relationship actually exists.
• Disclose material terms - for example, listing offer conditions or referral incentives - within the message itself, not behind a click.

Beyond the consent and deliverability rules above, basic hygiene protects everyone:

• Re-engagement: contacts with no engagement for 12 months should be moved to a sunset workflow before the next broadcast.
• Bounce handling: Yapii automatically suppresses hard bounces; do not attempt to re-mail a hard-bounced address.
• Frequency caps: respect the per-contact frequency cap configured in your workspace.
• Quiet hours: schedule respect quiet hours by recipient time zone for both SMS and voice.

Yapii maintains a unified suppression list across email, SMS, and voice. When a contact opts out of any channel, they are suppressed from that channel immediately and globally across the workspace. You may not bypass suppression by re-importing the same contact, by re-uploading them to a new workspace, or by routing around the platform.

Hashed suppression records may be retained indefinitely for the sole purpose of preventing re-messaging, even after the underlying contact record is deleted. This is documented in the Privacy Policy and the DPA.

If you have received an unwanted message you believe was sent through the Service, please report it to abuse@yapii.com. Include the original message with full headers (or a forwarded copy with the date, time, sender, and your address). We investigate every report and act on confirmed violations.

Security vulnerabilities should be reported to security@yapii.com under our responsible-disclosure program; do not include exploit details in unencrypted email.

We enforce this AUP using a graduated approach calibrated to the severity and pattern of the conduct:

• Warning - for first-time, low-severity issues; we contact the workspace owner with the specific issue and the corrective action required.
• Throttle - for elevated complaint, bounce, or spam-trap signals; sending volumes are reduced automatically while the cause is addressed.
• Suspend - for material violations, sustained deliverability issues, or unresolved warnings; sending is paused and the account requires review before resumption.
• Terminate - for severe or repeated violations, unlawful use, or attempts to circumvent enforcement; account is closed and all sending stops immediately.

We may skip steps for severe conduct (illegal content, fraud, security threats) and act immediately. Termination is also subject to the procedures in the Terms of Service.

If your account has been suspended, you may request reinstatement by emailing trust@yapii.com with: (1) a written explanation of the conduct that triggered the action, (2) the corrective measures you have taken, and (3) any evidence (e.g. updated consent procedures, refreshed list hygiene). Reinstatement is not automatic.

Termination is generally final. In rare cases - typically where the violation was caused by a third-party integration or compromised account that has since been remediated - Yapii may agree to reinstatement, conditioned on additional monitoring, lower sending caps, or a third-party deliverability audit at your expense.