Messaging Policy

Messaging Traffic

Kyvora treats all messages transmitted through its platform as application-to-person (A2P) messages. Customers may use Kyvora's messaging services only for legitimate recruiting and employment coordination purposes, including candidate outreach, screening conversations, appointment reminders, interview scheduling, and related workflow notifications.

Person-to-person (P2P) messaging — defined as direct human-to-human conversation outside a structured recruiting workflow — is not the intended use of Kyvora. Messages sent through Kyvora are AI-assisted and structured for recruiting purposes.

Consent Requirements

Minimum Requirements

Before sending any message through Kyvora, Customers must obtain prior express consent from each recipient in accordance with all applicable laws and regulations, including the TCPA, CAN-SPAM, and any applicable state requirements. Consent must be:

• Freely given — not required as a condition of employment, applying for a job, or using any service
• Informed — the recipient must know who is contacting them and what types of messages they will receive
• Specific to the program or campaign for which it is collected
• Documented — Customers must retain proof of consent for the duration of their relationship with the recipient and for at least three years thereafter

Consent for Recruiting Outreach

Sending recruiting and candidate screening messages requires prior express written consent. Consent must be obtained through an active affirmative action (e.g., an unchecked checkbox that the candidate checks), not through pre-selected checkboxes, bundled terms, or assumed agreement.

Proof of Consent

Customers are required to retain proof of all consents. Upon written request from Kyvora, Customers must provide proof of a recipient's consent, the date it was obtained, and the method through which it was obtained. Kyvora may suspend messaging access for any Customer unable to demonstrate compliant consent upon request.

Consent Limitations

Consent obtained for one recruiting program does not extend to unrelated programs. Customers may not sell, rent, or transfer consent records to any third party. Blanket or third-party consents are not acceptable.

Sender Identification

Every message sent through Kyvora must clearly identify the Customer (the recruiting organization) as the sender. Kyvora coordinates message delivery on behalf of Customers; Customers remain the responsible sender. Messages must not misrepresent the identity of the sender or the origin of the communication.

Opt-Out and STOP Handling

Kyvora enforces STOP handling at the platform level. When a recipient replies STOP (or any standard opt-out keyword: STOPALL, UNSUBSCRIBE, OPTOUT, CANCEL, END, QUIT), Kyvora immediately records the opt-out and suppresses all further outbound messages to that number from that Customer.

Customers must not:

• Re-add opted-out recipients without obtaining new, documented consent
• Attempt to work around opt-outs by using different phone numbers, campaigns, or message types
• Send any message to a recipient after they have opted out, except a single confirmation of the opt-out

Opt-out records are retained indefinitely in Kyvora's suppression system and are honored across all campaigns run by that Customer organization.

Quiet Hours

Kyvora enforces quiet hours on all outbound automated messages. No messages are delivered before 8:00 AM or after 9:00 PM in the recipient's local timezone, in accordance with TCPA and FCC requirements. Individual Customer organizations may configure stricter quiet hours through their account settings.

Prohibited Content and Use Cases

Customers may not use Kyvora messaging services to transmit:

• Unsolicited or unwanted messages in bulk (spam)
• Messages to recipients who have not given prior express consent
• Marketing or promotional content unrelated to the recruiting workflow for which consent was obtained
• Content that is false, deceptive, or misleading
• Content that violates any applicable law, including anti-discrimination, consumer protection, or data privacy laws
• Content that could be construed as harassment or threatening
• Adult content, hate speech, or illegal content of any kind
• Messages on behalf of a third party without that party's authorization

Prohibited List Practices

Customers may not upload or use contact lists that were:

• Purchased, rented, or obtained from a third-party data provider
• Scraped from websites or public directories
• Obtained without specific consent for recruiting outreach
• Previously opted out of communications from the Customer

Prohibited Actions

Customers are prohibited from:

• Intentionally misspelling words or using non-standard phrases to evade detection mechanisms
• Spreading similar or identical messages across multiple numbers to evade carrier filtering (snowshoeing)
• Any action designed to bypass Kyvora's opt-out, suppression, or quiet-hour controls
• Making fully automated employment decisions without human review of AI-generated outputs

Customer Responsibility

Kyvora provides the technology platform. Customers are solely responsible for:

• Obtaining and maintaining legally required recipient consent
• The content of their recruiting messages and campaigns
• Compliance with all applicable laws in the jurisdictions where they send messages
• Maintaining their own consent records and proof of compliance
• Their authorized users' compliance with this policy

Kyvora does not originate recruiting outreach and is not responsible for Customer violations of applicable law.

Enforcement

Kyvora may suspend or terminate a Customer's messaging access for violations of this policy, including but not limited to: credible complaints from recipients, carrier-level complaints, evidence of non-consensual messaging, or failure to produce consent records upon request. Enforcement is progressive and proportionate to the severity of the violation:

• Warning — notification and required remediation for documented violations
• Messaging suspension — temporary suspension of outbound messaging pending investigation or remediation
• Account suspension — suspension of platform access for serious or repeated violations
• Account termination — permanent termination for egregious or intentional violations

Policy Updates

Kyvora may update this Messaging Policy from time to time. Material changes will be communicated to Customers via the platform or email. Continued use of Kyvora messaging services after the effective date of an update constitutes acceptance of the revised policy.

Related Policies

• Acceptable Use Policy
• Customer SMS Compliance Guide
• SMS & TCPA Disclosure
• Sample SMS Consent
• Privacy Policy
• Terms of Service