Skip to main content

Compliance and Privacy

Not legal advice. This page explains common obligations and the tools the platform provides. Confirm your specific requirements with your own legal/compliance team.

In short

Sending commercial or bulk messages is permission-based and regulated. You are responsible for having the right to contact each subscriber and for honoring their choices; the platform gives you the tools (unsubscribe handling, suppression, required footers, authentication, and data controls) to do it correctly.

The regulations you'll most often meet

RegulationApplies toKey obligations
CAN-SPAM (US)Commercial email to US recipientsAccurate From/subject, a valid physical postal address, a clear unsubscribe, honor opt-outs promptly
CASL (Canada)Email/SMS to Canadian recipientsExpress or implied consent, sender identification, working unsubscribe
GDPR (EU/UK)Personal data of EU/UK individualsLawful basis (often consent), data-subject rights (access, deletion), records of consent
CCPA/CPRA (California)Personal data of CA residentsNotice, opt-out of "sale/sharing", access & deletion rights

How the platform helps

Your responsibilities vs. the platform's

  • You: obtain and document consent, keep your postal address current, honor local laws, respond to data-subject requests.
  • The platform: enforce unsubscribes/suppression, provide the required footer and authentication tooling, and give you the data controls to fulfill requests.

Handling data-subject requests (access / deletion)

Scaffold — add the product-specific steps and your SLA. When a subscriber requests access to or deletion of their data (GDPR/CCPA), locate the subscriber, export or delete their record, and confirm within the statutory deadline. (This should graduate into its own how-to.)


Canonical terms: Author, Edition, Folder (Project Folder), Broadcast. See the Glossary.