Permissions
Exactly what Spillway can—and cannot—do.
Every capability is tenant-specific. Documentation, authentication, and provider availability are evidence inputs, never automatic authority.
Version permissions-surface-2026-08-v5. This surface describes the implemented product boundary.
What Spillway can read
Before payment, Spillway may perform only the smallest harmless tenant-bound reads needed to certify the connected account, selected business number, completed-call and content access, messaging readiness, and event-route readiness. It does not run a historical recovery scan or AI analysis during free certification. Only after the signed $299 activation may Spillway import available recent call history and process authorized transcripts or recordings for recovery.
What Spillway can write
Spillway may store the bounded recovery state, prepared follow-ups, provider delivery evidence, homeowner replies, office time options, and inspection confirmation needed to operate the service. It does not write appointments, customer records, or jobs into another business system or company calendar.
What Spillway can communicate
After tenant-specific messaging capabilities, registration compatibility, and every policy gate are verified, Spillway may send the approved continuation through the contractor's selected messaging provider. A separate provider may be connected when the call system does not supply messaging. Consent, contactability, quiet hours, suppression, STOP, START, HELP, terminal-state, and duplicate protections still apply to every message.
Billing authority
Provider connection and certification are free. Only a GREEN certification may expose Stripe's $299 activation payment. The first authoritative qualifying recovered confirmed inspection creates no additional charge and establishes the recurring anchor. The next $299 is due exactly 30 days after that recovery, then every 30 days. If no qualifying recovery occurs, no second $299 is due regardless of elapsed time. Ten days is a keep-working promise, not a billing or refund trigger. Stripe executes payment but cannot manufacture certification, confirmation, or delivery evidence.
What Spillway cannot do
Spillway cannot port or reroute the contractor's phone system, invent call content, eligibility, office availability, or homeowner confirmation, place an appointment on the company schedule, use one contractor's sender or credentials for another, bypass suppression, or turn documented provider capability into verified tenant authority.
Authorization and revocation
The contractor confirms consequential business facts, accepts versioned commercial and communications terms, and authorizes each provider connection. Existing-number access, messaging scopes, registration use case, and staff visibility are verified independently. Connections can be revoked and messaging paused. Disconnecting Spillway from a contractor-owned provider does not destroy the contractor's number or inbox; bounded offboarding preserves required recovery and financial records.