Executel LLC
Acceptable Use Policy (AUP)
Effective Date: October 2026

Purpose

This Acceptable Use Policy ("AUP") governs the use of voice, messaging, and telecommunications services provided by Executel LLC ("Executel"). This policy is intended to promote the secure, lawful, and responsible use of Executel's network and services.

Prohibited Activities

Customers may not use Executel's services to:

1. Illegal Activities

• Violate any applicable federal, state, local, or international law.
• Facilitate fraudulent or criminal activity.
• Engage in unlawful telecommunications practices.

2. Robocalling and Unlawful Calling Activity

• Originate or transmit illegal robocalls.
• Initiate calls that violate applicable telemarketing regulations.
• Deliver prerecorded messages without required consent.
• Engage in unlawful mass-calling campaigns.

3. Caller ID Spoofing

• Transmit misleading, false, or inaccurate caller identification information.
• Manipulate caller identification with the intent to defraud, harm, or wrongfully obtain anything of value.

4. Fraudulent or Abusive Traffic

• Traffic pumping schemes.
• Artificially generated traffic.
• Revenue-sharing abuse.
• Wangiri or one-ring scams.
• Toll fraud.
• Impersonation schemes.
• Any activity intended to circumvent carrier policies or regulatory requirements.

5. Network Abuse

• Interfere with the operation of Executel's network.
• Attempt unauthorized access to systems or services.
• Generate excessive traffic that may adversely affect service quality or network performance.

Customer Responsibilities

Customers are responsible for:

• Complying with all applicable telecommunications laws and regulations.
• Maintaining accurate account information.
• Promptly responding to requests regarding suspicious traffic.
• Ensuring that users of their services comply with this policy.

Monitoring and Investigation

Executel reserves the right to:

• Monitor network traffic for fraud, abuse, or illegal activity.
• Investigate suspected violations of this policy.
• Request information necessary to validate traffic sources and calling practices.
• Cooperate with law enforcement, regulatory agencies, industry traceback organizations, and underlying carriers.

Robocall Mitigation and Traceback Cooperation

Executel maintains robocall mitigation procedures and supports industry efforts to combat illegal calling activity.

Executel may:

• Investigate suspicious call patterns.
• Block illegal or unlawful traffic.
• Respond to traceback requests.
• Share information as permitted by law to assist with fraud prevention, traceback investigations, and regulatory compliance.

Enforcement

If Executel determines that a customer has violated this policy, Executel may, at its sole discretion:

• Issue a warning.
• Restrict services.
• Block specific traffic.
• Suspend services.
• Terminate services immediately.
• Report unlawful activity to appropriate authorities.

Policy Updates

Executel reserves the right to modify this policy at any time. Updated versions will be posted on the company's website and become effective upon publication.

Contact Information

Questions regarding this policy may be directed to:

Executel LLC
Email: compliance@executel.com
Phone: [Your Compliance Number]

Effective date: September 28, 2026

This Privacy Policy explains how Executel Inc. ("ExecuTel," "we," "us," or "our") collects, uses, stores, and shares information when you use the ExecuTel Connect mobile application (the "App") and related calling, messaging, contact, notification, and support services (collectively, the "Services").

1. Who the App Is For

ExecuTel Connect is a business communications application for ExecuTel customers and users authorized by an organization that uses our Services. Accounts are generally issued or managed by ExecuTel, a customer, or the customer's administrator. The App is not intended for children under 18.

2. Information We Collect and Process

Account and authentication information

We process information needed to authenticate and provide the Services, such as your SIP extension or username, SIP domain, display name, organization identifier, email address or username used for messaging, authentication credentials, access and refresh tokens, and account or role information returned by our systems. The App may retain account settings and credentials on your device so that it can remain registered and receive communications.

Calling information

When you make or receive calls, we process call-related information such as the calling and called identifiers or telephone numbers, SIP addresses, call identifiers, call direction, timestamps, duration, disposition, and technical routing or connection information. Voice audio is transmitted as needed to connect and carry a VoIP call through the applicable business phone system, network, carriers, and service providers. The App does not itself create a local recording of calls. An organization's phone-system administrator may separately enable server-side call recording under that organization's policies and applicable law.

Messaging information

If you use the messaging features, we process message content, sender and recipient identifiers, contact identifiers, timestamps, delivery information, read state, and related conversation metadata so that messages can be sent, received, synchronized, and displayed.

Contacts

With your permission, the App can read names and telephone numbers from your device contacts so you can browse contacts and initiate a call. This permission is optional. The App does not upload your complete device address book to ExecuTel. When you choose to call or message a contact, the selected destination is transmitted as necessary to provide that communication.

The App may also synchronize business or shared contacts made available by your organization through ExecuTel services. Shared-contact data can include names, telephone numbers, email addresses, organization information, and service-specific contact identifiers.

Device, application, and push-notification information

We process device and application information such as an app-generated device identifier, application identifier, app version, operating system and platform, Firebase or Apple push tokens, notification-delivery information, IP address, and network or connection information. We use this information to register the device, deliver incoming-call and messaging notifications, maintain service reliability, prevent abuse, and troubleshoot problems.

Diagnostics, analytics, and performance information

The App uses services such as Google Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging, and Apple notification services. Depending on platform and configuration, these services may process app interactions, Firebase installation identifiers, advertising or device identifiers, crash logs, diagnostics, performance information, app version, device information, and technical events related to registration, calls, messages, and notifications. We use this information for analytics, security, troubleshooting, and service improvement, not for third-party behavioral advertising.

Permissions and device capabilities

The App may request access to:

• Microphone: to transmit your voice during calls.
• Contacts: to display device contacts and let you initiate communications.
• Notifications: to alert you to incoming calls, messages, and service events.
• Full-screen incoming-call presentation and wake capabilities: to present time-sensitive incoming VoIP calls, including while the device is locked or the App is in the background.
• Network and audio capabilities: to connect calls, route audio, support compatible headsets, and maintain service reliability.

You can manage these permissions in your device settings. Disabling a permission may prevent the corresponding feature from working.

3. How We Use Information

We use information to:

• authenticate users and register SIP and messaging sessions;
• provide incoming and outgoing calling, messaging, contacts, and call history;
• deliver push notifications and restore service after background or terminated states;
• operate, secure, maintain, and troubleshoot the App and Services;
• measure reliability and improve performance and user experience;
• provide customer support and respond to requests;
• prevent fraud, abuse, unauthorized access, and security incidents; and
• comply with contractual, regulatory, and legal obligations.

4. How We Share Information

We do not sell personal information and do not share personal information for third-party behavioral advertising. We may disclose information as needed to provide and protect the Services, including to:

• the customer organization or administrator responsible for your business communications account;
• telecommunications carriers, SIP/PBX providers, messaging providers, and network operators involved in delivering calls or messages;
• cloud hosting, security, support, analytics, crash-reporting, and push-notification providers, including Google and Apple;
• professional advisers, auditors, or transaction counterparties subject to appropriate obligations; and
• government authorities or other parties when required by law or necessary to protect rights, safety, and security.

Service providers are permitted to process information only for the services they provide to us and subject to applicable contractual and legal requirements.

5. Data Storage, Retention, and Deletion

Some information is stored locally on your device, including account settings, session data, push-registration information, and app-observed recent-call information. Logging out, clearing app data, or uninstalling the App may remove locally stored information, but it does not necessarily delete records held by the business communications service or your organization.

Server-side account, call, message, contact, security, diagnostic, and support records are retained for as long as reasonably necessary to provide the Services, meet the customer's configuration and contractual requirements, maintain security and business records, resolve disputes, and comply with applicable law. Retention periods may vary by data type, customer configuration, legal obligation, and service provider.

To request access, correction, or deletion of personal information associated with the App, email support@executel.com with the subject ExecuTel Connect Data Request. Please identify your organization and account username or extension, but do not send your password. We may need to verify your identity and coordinate with your organization's administrator. Some information may be retained when required for security, fraud prevention, billing, dispute resolution, or legal compliance.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information. Supported application API traffic uses encrypted HTTPS connections. Telephony signaling and media protection can depend on the transport, network, PBX, carrier, and customer configuration used for a call. No security measure or transmission method can be guaranteed to be completely secure.

7. Your Choices and Rights

Depending on your location and relationship with ExecuTel, you may have the right to:

• request access to or a copy of your personal information;
• request correction or deletion of information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent; and
• submit a complaint to an applicable privacy authority.

You can also control App permissions through Android or iOS settings and can sign out of the optional messaging service within the App. Contact your organization's administrator for changes to an organization-managed communications account.

8. Third-Party Services

Third-party services used by the App maintain their own privacy terms. For more information, review the privacy materials provided by Google and Apple.

9. International Processing

Information may be processed in the United States and other locations where ExecuTel, its customers, carriers, or service providers operate. Those locations may have different data protection laws from your location.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes to the App, Services, providers, or legal requirements. We will post the updated policy at this URL and revise the effective date.

11. Contact Us

Executel Inc.
15 Beaver Pond Court
Stony Point, NY 10980
United States

Email: support@executel.com
Phone: +1 347-614-5400

Effective Date: October 2026

At Executel, we take the security of our clients' systems, communications, and data seriously. We implement commercially reasonable safeguards and provide services designed to help reduce security risks. However, no technology, telecommunications, cybersecurity, cloud, outsourcing, or IT service can completely eliminate the risk of cyber threats or security incidents.

Security Limitations

While Executel provides services according to the scope of each client's agreement, we cannot guarantee the prevention of all cybersecurity incidents, including:

• Unauthorized access
• Data breaches
• Malware or ransomware attacks
• Phishing or social engineering attacks
• Service disruptions or outages
• Zero-day vulnerabilities
• Third-party system compromises

Clients acknowledge that cybersecurity threats continually evolve and that no service provider can guarantee complete protection against every threat.

Client Responsibility

Clients remain responsible for maintaining appropriate security practices within their organization, including:

• Protecting usernames, passwords, and access credentials
• Implementing internal security policies and procedures
• Training employees on security awareness and phishing prevention
• Promptly reporting suspected security incidents
• Maintaining compliance with applicable legal and regulatory requirements

Effective security requires shared responsibility between Executel and the client.

Telecommunications & Hosted PBX Services

For clients utilizing hosted voice, PBX, VoIP, UCaaS, or telecommunications services, service availability may be affected by factors outside Executel's control, including internet connectivity, power outages, carrier network issues, equipment failures, or third-party provider disruptions.

Clients are responsible for securing their networks, user credentials, and authorized access to telecommunications services.

Outsourcing & Staffing Services

For outsourcing, staffing, customer support, virtual assistant, and business process services, clients remain responsible for defining user permissions, approval workflows, operational controls, and security requirements applicable to their organization.

Executel is not responsible for security incidents, data exposure, or operational issues resulting from client-directed processes, client-managed systems, or unauthorized actions beyond Executel's reasonable control.

Incident Response

Where incident response, remediation, recovery, or related services are included within an applicable service agreement, Executel will perform those services according to the agreed scope of work. Services beyond the agreed scope may require additional authorization and fees.

Third-Party Services

Many services rely on third-party vendors, telecommunications carriers, cloud providers, software platforms, and infrastructure partners. Executel cannot guarantee the security, availability, or performance of third-party services and is not responsible for incidents arising from those providers.

Cyber Insurance

Executel recommends that all clients maintain appropriate cyber liability insurance and related coverage to protect against potential financial losses resulting from cyberattacks, data breaches, business interruption, fraud, or other security-related incidents.

Limitation of Liability

To the fullest extent permitted by applicable law, Executel shall not be liable for security incidents, cyberattacks, service interruptions, data loss, unauthorized access, or other security-related events except where such events are directly caused by Executel's negligence, willful misconduct, or failure to perform obligations expressly agreed upon in writing.