Terms of Service

By accessing Dialplane (“we”, “us”, “Service”), the entity you represent (“Customer”, “you”) agrees to these Terms of Service. If you are agreeing on behalf of a company, you represent that you have authority to bind that company.

Dialplane is a multi-tenant API platform that relays BroadWorks OCI-P commands between your authorized applications (including MCP clients and REST integrations) and the BroadWorks Application Server(s) you designate during onboarding. Dialplane does not own, operate, or host your BroadWorks environment.

• Onboarding. You supply the BroadWorks Application Server hostname, the administrator BroadWorks credentials Dialplane should use for relay, and billing information.
• Your responsibility. You remain responsible for the BroadWorks user credentials you provide. You warrant those credentials are authorized to perform the BW operations you invoke through Dialplane.
• API keys. API keys issued by Dialplane (format bwb_sk_…) are bearer tokens. Keep them secret, rotate on compromise, and revoke keys for departing admins.
• OAuth. Browser-based MCP login via OAuth 2.1 is subject to the same obligations as API keys.

You agree not to:

• Use Dialplane to access BroadWorks environments you are not authorized to operate.
• Attempt to access other tenants' data, sessions, or API keys.
• Exceed published rate limits or engineer load that constitutes a denial-of-service.
• Reverse-engineer the Service except where expressly permitted by law.
• Use Dialplane to perform operations that violate applicable telecommunications law, including CALEA, CPNI, E911, TRACED Act / STIR-SHAKEN, and equivalent local regulations.
• Use Dialplane to send spam, commit fraud, or facilitate unlawful robocalling.

• Ownership. You retain ownership of all data transmitted through Dialplane, including BroadWorks configuration and subscriber metadata.
• Permitted use. Dialplane processes your data only to provide, maintain, secure, debug, and bill for the Service.
• No plaintext credentials. Dialplane encrypts BroadWorks user credentials at rest using AES-256-GCM. Plaintext credentials are never written to logs, audit records, or error responses.

• Pricing. Customers pay for Dialplane Base by 5k billable-user blocks at the rates set out in the Customer's order form or shown at checkout at the time of subscription. Backup and restore, SurgeMail, CDR analytics, and other add-on tiers are billed separately when enabled.
• Billable-user measurement. Billable users are active provisioned BroadWorks users, mailboxes, and service identities active during the billing period. Monthly plans bill using the 95th-percentile of daily billable-user samples taken during the billing period. Annual prepaid plans lock the billable-user count at signing and re-anchor at each anniversary.
• Cadence. Monthly plans are metered and billed at period close based on the 95th-percentile billable-user block count during that period. Annual prepaid plans bill the full year up front at the locked billable-user block count.
• Free trial. A 14-day free trial with full access is provided to new accounts. No credit card required at signup. At the end of the trial you pick a plan or your account enters read-only mode for 30 days before being deactivated.
• Non-payment. Unpaid invoices past the due date move the account to read-only mode until payment is received. Dialplane may suspend or terminate after 30 days of non-payment.
• Taxes. Prices exclude taxes; you are responsible for all applicable taxes other than Dialplane's income tax.
• Changes. For monthly plans, Dialplane may change pricing with 30 days' notice; changes take effect at the next billing period. For annual plans, rates are locked for the full 12-month term; any rate change applies at the next anniversary renewal, not during the active term. The growth-review clause in Section 07 is the exclusive mid-term mechanism for subscriber-count adjustments on annual plans.

Annual plans lock subscriber count at the time of signing. If the trailing-90-day 95th-percentile of your daily subscriber samples exceeds the count recorded at signing (or the most recent anniversary anchor) by more than 50%, either party may initiate a pricing review by written notice to the other party. The 95th-percentile measurement reflects sustained growth rather than momentary spikes.

Upon a valid review request, the parties will negotiate in good faith a revised subscriber count and corresponding annual fee adjustment, effective no sooner than 30 days from the notice date. Dialplane will not increase the per-subscriber rate as part of a growth review. Only the subscriber count is subject to adjustment.

If the parties cannot agree within 30 days, either party may elect to convert the subscription to monthly billing at the then-current monthly rate with no early termination penalty. Any prepaid annual amounts for the unconsumed months will be credited toward the converted monthly subscription.

• Term. These Terms apply from signup until terminated.
• Customer termination. Monthly plans can be canceled at any time in the account dashboard; the subscription remains active through the end of the current billing period and metered subscriber usage for that period is billed in arrears at period close. Annual plans auto-renew and require written non-renewal notice at least 30 days before the anniversary; annual amounts paid for unused time are non-refundable except where required by law or as provided in the growth-review clause in Section 07.
• Dialplane termination. Dialplane may terminate for material breach with reasonable notice and cure opportunity, or immediately for security violations or non-payment beyond 30 days.
• Effect. All API keys and OAuth sessions are revoked. Stored data is deleted within 30 days except where retention is required by law.

Dialplane maintains technical and organizational measures appropriate to the sensitivity of the data: encryption at rest (AES-256-GCM for credentials), encryption in transit (TLS 1.2 or higher between Customers and Dialplane, and by default between Dialplane and BroadWorks), short-lived session tokens, rotating refresh tokens with reuse detection, per-tenant rate limiting, and multi-tenant isolation at the API and storage layers. Dialplane will notify affected Customers without undue delay after becoming aware of a personal-data breach, consistent with applicable law.

Each party represents it has authority to enter into these Terms. Except as expressly stated, the Service is provided “AS IS” and “AS AVAILABLE”. Dialplane does not warrant that the Service will be uninterrupted or error-free.

To the maximum extent permitted by law, Dialplane's aggregate liability arising out of or related to these Terms or the Service will not exceed the fees paid by Customer to Dialplane in the twelve months immediately preceding the event giving rise to the claim. In no event will Dialplane be liable for lost profits, lost revenue, business interruption, or indirect, special, consequential, or punitive damages, even if advised of their possibility.

You will defend and indemnify Dialplane against claims arising from: (a) your use of the Service in violation of Section 4; (b) your transmission of Customer Data that infringes a third party's rights; (c) misconfiguration of the BroadWorks environment you authorize Dialplane to access.

Each party agrees to protect the other's non-public business and technical information with the same care it uses for its own confidential information, and not less than reasonable care. This obligation survives termination.

Dialplane may update these Terms. Material changes will be notified at least 30 days before they take effect via email to the account owner or a dashboard notice. Continued use after the effective date constitutes acceptance.

These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws rules. Disputes will be resolved in the state or federal courts located in New Castle County, Delaware, and each party consents to personal jurisdiction there.