Acceptable Use Policy

1. Introduction and Purpose

This Acceptable Use Policy ("AUP") governs the use of all services provided by Boxford Partners ("Boxford," "we," "us").

Our "Services" are broadly defined to include all:

• Consulting and Advisory Services: Strategic guidance, process optimization, compliance consulting, and other expert advice provided by the Boxford Partners team.
• SaaS Services: Access to and use of our proprietary Software-as-a-Service (SaaS) platforms, including our mortgage applications, client review tools, and all associated communication channels (e.g., SMS, MMS, email).

This Acceptable Use Policy is designed to:

• Ensure compliance with all applicable laws, regulations, and telecommunication carrier requirements.
• Protect the integrity, security, and reliability of our SaaS Services and infrastructure.
• Protect our clients and their end-users from illegal, harmful, or inappropriate activity.
• Define the standards of conduct for all Users of any Boxford Partners Service.

2. Scope and Applicability

This AUP applies to all clients, and their respective employees, contractors, and agents who access or use our Services (collectively, "Users," "you").

By accessing, receiving, or using our Services, you agree to be bound by the terms of this AUP, which is incorporated by reference into your main service agreement with Boxford Partners.

3. User Responsibilities

• Lawful and Ethical Use:You are responsible for ensuring that your use of our Services—whether acting on our consulting advice or operating our SaaS Services—complies with this AUP and all applicable laws.
• Account Security:You are responsible for maintaining the confidentiality and security of your SaaS Services account credentials. You must immediately notify Boxford Partners of any suspected unauthorized access or security breach.
• Sensitive Data Handling (GLBA/NPPI):You acknowledge that our Services are used across many industries and may involve Non-Public Personal Information (NPPI). You agree to handle all such data with the high standard of care required by law (e.g., the Gramm-Leach-Bliley Act (GLBA)) and to implement appropriate safeguards.

4.Testing

You may not use our Services to create, store, transmit, or display content, or engage in activities, that we, in our sole discretion, deem harmful or objectionable. Prohibited activities include, but are not limited to:

4.1 Illegal, Fraudulent, or Harmful Activity

• Any activity that violates any applicable local, state, federal, or international law or regulation.
• Using our SaaS platform, or acting on our consulting advice, to knowingly facilitate or engage in fraudulent, deceptive, or predatory practices.
• Impersonation of any person or entity or falsely stating or misrepresenting your affiliation with a person or entity.
• Phishing, "vishing," or similar schemes intended to deceive others and collect sensitive information.

4.2 Abusive or Offensive Content

• Transmitting content that is threatening, harassing, abusive, defamatory, obscene, invasive of privacy, or discriminatory.
• Distributing hate speech or content that incites violence or endangers minors.

4.3 SaaS Platform Security Violations

• Uploading or distributing malware, viruses, worms, or other harmful code to our SaaS platform.
• Attempting to gain unauthorized access to any part of our SaaS Services, systems, networks, or data.
• Probing, scanning, or testing the vulnerability of our SaaS Services or network without proper authorization.
• Interfering with or disrupting the Services, including through Denial of Service (DoS) attacks.
• Data harvesting or "scraping" information from our platform without express permission.

4.4 Intellectual Property Infringement

• Transmitting content that infringes upon the copyright, trademark, patent, trade secret, or other intellectual property rights of Boxford Partners or any third party.

5. Messaging and Communications Policy (SaaS Services)

This section applies specifically to the use of our SaaS-based messaging services (e.g., A2P 10DLC, SMS/MMS).

5.1. Consent ("Opt-In")

• You must obtain express prior written consent from any end-user before sending them any promotional or marketing messages, as defined by the Telephone Consumer Protection Act (TCPA).
• You must obtain express consent for transactional or informational messages (e.g., application updates, reminders).
• Proof of consent must be retained and provided to Boxford Partners upon request.

5.2 Opt-Out Mechanism

• All messages must include a clear, conspicuous, and free mechanism for end-users to opt-out (e.g., "Reply STOP to unsubscribe").
• All opt-out requests must be honored immediately and permanently.

5.3 Prohibited Messaging Practices

• Sending unsolicited messages ("spam") or messages to any recipient who has not provided the required level of consent.
• Transmitting content related to SHAFT (Sex, Hate, Alcohol, Firearms, Tobacco, including vape and CBD) without explicit carrier pre-approval and age-gating.
• Using deceptive practices, such as spoofing sender information or obscuring the purpose of the message.
• Failing to clearly identify yourself or your organization as the sender in the initial message.

6. Monitoring and Enforcement

Boxford Partners reserves the right, but does not assume the obligation, to monitor use of the Services to investigate violations of this AUP.

If we determine, in our sole discretion, that you have violated this AUP, we may take immediate action without prior notice. Consequences may include:

• Suspending or terminating your access to our SaaS Services.
• Terminating our consulting engagement.
• Removing or blocking the offending content from our platform.
• Reporting the activity to carriers, regulatory authorities, or law enforcement.
• Taking legal action to seek damages or injunctive relief.

7. Reporting Violations

To report a violation of this AUP, please contact us immediately at: legal@boxfordpartners.com

Please provide detailed information to assist in our investigation.

8. Policy Updates

Boxford Partners may update this AUP periodically to reflect changes in law, carrier regulations, or our business practices. We will post the revised policy on our website. Your continued use of our Services after such changes constitutes your acceptance of the new AUP.

Last Updated: November 15, 2025