Overview and Commitment

Stellarys Resonance LLC, operating the Agenarys platform at agenarys.com, is committed to operating in full compliance with all applicable federal, state, and international laws governing artificial intelligence, digital communications, data privacy, consumer protection, and electronic commerce.

This Compliance Statement serves as a declaration of our standards, obligations, and practices. It applies to Agenarys directly and informs the compliance responsibilities of our business clients who deploy Agenarys AI services to their customers.

Compliance is not a checkbox for us - it is a core operating principle. Every system, workflow, agent, and communication we build is designed with legal and ethical boundaries as foundational constraints.

United States Federal Compliance

2.1 Telephone Consumer Protection Act (TCPA)

The Telephone Consumer Protection Act, 47 U.S.C. § 227, governs automated telephone calls and text messages to consumers. Agenarys and its clients are required to comply with the TCPA in all voice and SMS communications. Our compliance framework includes:

• AI voice agents deployed on client business phone numbers are inbound-call systems - they answer calls placed by customers, not initiate unsolicited automated calls to consumers
• Outbound SMS communications are sent only to contacts who have provided express written consent or with whom the client has an established business relationship
• All SMS outreach includes an opt-out mechanism (STOP to unsubscribe) that immediately adds the recipient to our suppression list
• Twilio A2P 10DLC registration is required before any commercial SMS outreach is activated
• Call recording is conducted only where legally permitted. In two-party consent states, AI agents disclose that the call may be recorded

Business clients using Agenarys for outbound communications are independently responsible for obtaining all required consumer consents before initiating contact.

2.2 CAN-SPAM Act

All email communications sent through the Agenarys platform comply with CAN-SPAM requirements (15 U.S.C. §§ 7701-7713):

• Every commercial email clearly identifies the sender and includes the physical or electronic address of the sending entity
• Subject lines accurately reflect the content of the email and do not use deceptive headers
• Every commercial email includes a clear, conspicuous, and functional opt-out mechanism
• Opt-out requests are honored within 10 business days and the recipient is immediately added to our suppression list
• We never use harvested, purchased, or scraped email lists without verifying consent compliance

2.3 Federal Trade Commission (FTC) Regulations

• FTC Act Section 5 - We do not make false, misleading, or unsubstantiated claims about the capabilities of our AI agents
• FTC Endorsement Guides - Any testimonials or performance results reflect genuine client experiences
• FTC AI Guidance - We disclose the AI nature of our agents in accordance with FTC guidance
• FTC Identity Theft Red Flags Rule - We implement appropriate security controls to detect and prevent identity fraud

2.4 Americans with Disabilities Act (ADA)

Agenarys is committed to ensuring our digital services are accessible to individuals with disabilities. Our website agenarys.com strives to conform to WCAG 2.1 Level AA standards. We continuously monitor and improve accessibility.

State-Level Compliance - United States

3.1 Florida - State of Registration

Agenarys is registered and headquartered in the State of Florida. We comply with all applicable Florida statutes including:

• Florida Telephone Solicitation Act (FTSA), Fla. Stat. § 501.059 - governing automated telephone solicitation
• Florida Computer Crimes Act - prohibiting unauthorized access to computer systems
• Florida Deceptive and Unfair Trade Practices Act (FDUTPA) - governing consumer protection
• Florida Digital Bill of Rights (FDBR) - data privacy rights for Florida consumers effective July 1, 2024

3.2 California

• California Consumer Privacy Act (CCPA/CPRA) - We do not sell personal information. California residents have the right to know, delete, correct, and opt out. We honor verifiable consumer requests within 45 days.
• California SB 1001 (BOT Disclosure Law) - AI agents deployed through our platform disclose their non-human nature when directly and sincerely asked.
• California ADAD regulations - AI voice agents comply with California’s specific requirements for automated calling systems
• California AB 2013 - AI transparency requirements for generative AI systems

3.3 Texas, New York, Illinois, and Other Key States

Agenarys monitors and complies with AI and privacy legislation across all 50 states, including the Texas Data Privacy and Security Act, New York SHIELD Act, Illinois Biometric Information Privacy Act, and Virginia Consumer Data Protection Act.

International Compliance

4.1 European Union - GDPR

The GDPR (Regulation (EU) 2016/679) applies to the processing of personal data of individuals in the European Union. Our GDPR compliance framework includes:

• Lawful basis for processing - contract performance, legal obligation, legitimate interests, or explicit consent
• Data minimization - we collect only the data necessary for the stated purpose
• Data subject rights - we honor access, rectification, erasure, portability, restriction, and objection requests within 30 days
• Data breach notification - material breaches reported to supervisory authorities within 72 hours
• Data Processing Agreements (DPAs) - available upon request for EU/UK business clients
• Standard Contractual Clauses (SCCs) - used for lawful data transfers from the EU/UK to the United States
• Privacy by Design - data protection built as a foundational principle

4.2 United Kingdom - UK GDPR

Following Brexit, the United Kingdom maintains its own data protection framework through the UK GDPR and Data Protection Act 2018. Our GDPR compliance framework applies equally to UK data subjects. We are prepared to appoint a UK Representative if required by applicable law.

4.3 Mexico - LFPDPPP

The Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) governs the protection of personal data in Mexico. We comply with:

• ARCO rights (Acceso, Rectificación, Cancelación, Oposición) - exercisable by contacting us at hello@agenarys.com
• Aviso de Privacidad requirement - our Spanish privacy policy serves as the required privacy notice for Mexican data subjects
• Consent requirements - consent is obtained before processing personal data for marketing purposes
• Cross-border data transfer requirements - conducted with appropriate safeguards

4.4 Spain - LOPDGDD

Spain’s LOPDGDD supplements the GDPR with Spain-specific requirements. Our Spain-facing communications comply with enhanced consent requirements under Spain’s LSSI, specific commercial electronic communication requirements, and GDPR rights exercisable before the Spanish Data Protection Agency (AEPD).

4.5 Colombia, Argentina, and Other Latin American Countries

Artificial Intelligence Compliance

5.1 AI System Transparency

• AI agent identification - all AI agents identify themselves as artificial intelligence when sincerely and directly asked by a user
• Capability disclosure - we do not overstate the capabilities of our AI agents in marketing materials
• Limitation acknowledgment - we clearly communicate that AI agents may produce errors and that human oversight is the client’s responsibility
• Model disclosure - our platform uses Claude (Anthropic) as the primary AI language model, ElevenLabs for voice synthesis, and Deepgram for speech recognition

5.2 AI Ethics and Responsible Use

Agenarys prohibits the use of our AI agents for:

• Deceptive communications - AI agents may not be used to deceive consumers about the nature of the entity they are communicating with
• Discriminatory practices - AI agents may not discriminate on the basis of any protected characteristic
• Manipulative communications - AI agents may not use dark patterns, psychological manipulation, or coercive techniques
• Misinformation - AI agents may not be configured to spread false or misleading information
• Unauthorized data collection - AI agents may not collect personal data beyond what is disclosed and consented to

5.3 AI Governance

• Regular review of AI agent outputs for accuracy, appropriateness, and compliance
• Human escalation pathways - all AI deployments include a mechanism for customers to reach a human representative
• Ongoing monitoring of AI regulatory developments in all jurisdictions where we operate
• Client notification of material changes to AI systems that may affect compliance obligations

5.4 Commanding the Grid, Affiliate, and Family Command Boundaries

Commanding the Grid is an Agenarys media and marketplace channel. Product recommendations, show notes, product lists, and marketplace links may include affiliate links, including Amazon Associate links. Affiliate disclosures must be clear, visible, and placed near purchase-driving links when practical.

Agenarys Family Command is a consumer household coordination service, not a medical, legal, financial, emergency, therapy, custody, or professional-advice service. Medication reminders, blood pressure logs, blood sugar check-ins, image uploads, guardian dashboards, child schedules, spending approvals, and shared-custody workflows require onboarding consent or authorization and must remain organizational support only.

Aria, Angela, and related assistants may remind, organize, summarize, and route household information, but they must not diagnose, prescribe, interpret symptoms, change medication instructions, recommend treatment, determine emergencies, make custody decisions, or approve legal or financial actions.

Email and Digital Outreach Compliance

6.1 Commercial Email Outreach

Agenarys operates a large-scale email outreach system using 469 dedicated @agenarys.com email accounts, designed and operated in strict compliance with applicable email laws:

• All outreach emails identify Agenarys and the sending business type in the email header and body
• Every outreach email contains a functional opt-out mechanism
• Opt-out requests are processed within 10 business days and recipients are added to a permanent suppression list
• Bounce rates are monitored daily - any inbox with a bounce rate above 3% is automatically paused
• Email sending volumes are ramped gradually to maintain sender reputation and comply with carrier guidelines

6.2 WhatsApp Business Compliance

• Permission-first messaging - the first WhatsApp message always requests permission before sending any content or links
• WhatsApp Business Policy compliance - all communications comply with Meta’s WhatsApp Business Terms of Service
• Opt-out honoring - any request to stop receiving messages is immediately honored
• No unsolicited links - links are never included in the first message to a new contact

Financial and Payment Compliance

All payment processing is handled through Stripe, a PCI-DSS Level 1 compliant payment processor. Agenarys does not store, transmit, or process credit card data on its own systems. Our financial compliance framework includes:

• PCI-DSS compliance through Stripe infrastructure
• Clear subscription terms, cancellation policies, and refund policies disclosed before purchase
• Transparent recurring billing with advance notice of any pricing changes
• Compliance with Electronic Funds Transfer Act (EFTA) requirements for recurring electronic payments
• Sales tax collection and remittance as required by applicable state law

Intellectual Property Compliance

• We respect all applicable intellectual property laws including the Digital Millennium Copyright Act (DMCA)
• AI-generated content produced by our platform does not knowingly incorporate copyrighted material without appropriate licenses
• Client content uploaded to our platform remains the property of the client
• We maintain a DMCA takedown process - to report a copyright concern contact hello@agenarys.com
• Our trademarks, including the Agenarys name and logo, are proprietary to Stellarys Resonance LLC

Prohibited Industries and Use Cases

• Healthcare, dental, medical, or any HIPAA-regulated industry
• Legal services - AI communications in legal contexts raise attorney-client privilege and unauthorized practice of law concerns
• Financial services requiring FINRA, SEC, or state insurance licensing for AI communications
• Adult entertainment or services
• Cannabis, controlled substances, or any federally illegal business
• Any business primarily engaged in illegal activity

Client Compliance Responsibilities

Agenarys provides a compliant platform and tools - but our clients retain independent legal responsibility for how they deploy our services. Business clients are responsible for:

• Obtaining all required consumer consents before deploying AI agents to communicate with their customers
• Complying with industry-specific regulations applicable to their business
• Ensuring their AI agents comply with applicable AI disclosure laws in their jurisdiction
• Maintaining their own privacy policies that disclose AI communication practices to their customers
• Complying with any professional licensing requirements governing automated communications in their industry

Agenarys provides compliance documentation, AI disclosure tools, and guidance to assist clients in meeting their obligations. However, Agenarys is not a law firm and nothing in this document constitutes legal advice. Clients are encouraged to consult qualified legal counsel regarding their specific compliance obligations.

Compliance Monitoring and Updates

• We monitor regulatory developments in all jurisdictions where we operate including federal agencies (FTC, FCC, CFPB), state legislatures, EU/UK regulators, and international data protection authorities
• This Compliance Statement is reviewed and updated at least quarterly and whenever material regulatory changes occur
• Clients are notified of material compliance updates that affect their obligations
• We engage qualified legal counsel to review our compliance framework on an ongoing basis

Compliance Contact

To report a compliance concern, request a Data Processing Agreement, exercise a data subject right, or ask a compliance-related question. We will respond to all compliance inquiries within 15 business days.

Legal Disclaimer

This Compliance Statement is provided for informational purposes only and represents our good-faith effort to describe our compliance practices. It does not constitute legal advice and does not create any warranty, guarantee, or legal obligation beyond what is stated in our Terms of Service and Privacy Policy.

Nothing in this document should be interpreted as a guarantee of regulatory compliance on behalf of our clients. Each client is solely responsible for ensuring their own compliance with all applicable laws in their jurisdiction and industry.