In short: email only people who asked to hear from you, tell them who you are, let them leave in one click, and never try to send without a person confirming.
1. Send only to people who agreed
Every contact you send to must have agreed to hear from you in a way the law accepts. You may not:
- Upload purchased, rented, borrowed, shared or scraped lists.
- Harvest addresses from websites, directories or other non-public sources.
- Email people who unsubscribed, bounced or complained, including by re-importing them.
- Use addresses collected for a different purpose, such as receipts only, without valid consent.
When you import a list, you declare where the consent came from. If you cannot show it, do not send.
2. Content you may not send
- Phishing, malware, or links that hide where they lead.
- Impersonation of another person, brand or organization, or misleading sender names and subject lines.
- Illegal goods or services, or content that infringes someone else’s rights.
- Deceptive health, financial or “get rich” claims, and investment schemes.
- Harassment, hate, threats, or sexually explicit content.
- Marketing of age-restricted products to people under the legal age.
3. Do not work around the safeguards
You may not:
- Remove, hide or alter the unsubscribe link, one-click unsubscribe header or postal address.
- Try to make the AI or any automated system confirm a send. Live sends must be confirmed by a person on the confirmation card.
- Split a workspace into several to get around sending limits or an automatic pause.
- Use test sends to reach anyone other than yourself.
- Probe, overload or reverse-engineer the service, or access another customer’s data.
4. Sending quality
Sending pauses automatically when a workspace reaches a bounce rate of 2% or a complaint rate of 0.1%. Repeated pauses, or a pattern of high complaints, may lead to suspension. Keep your list current and make it easy to unsubscribe.
5. Laws and rules your campaigns must follow
You are responsible for following the rules that apply to your recipients. This summary is not legal advice and does not cover every requirement.
| Rule | Applies to | What it requires |
|---|---|---|
| CAN-SPAM (United States) | Commercial email to US recipients | Identify the message as an ad, include a valid postal address, use accurate headers and subject lines, and honor opt-outs within 10 business days. |
| GDPR, UK GDPR, ePrivacy and PECR | Recipients in the EEA and the UK | Prior consent, or soft opt-in for existing customers buying similar products. An easy way to unsubscribe in every message. Records of consent. |
| CASL (Canada) | Recipients in Canada | Express or implied consent. Implied consent lasts 2 years after a purchase and 6 months after an inquiry. Opt-outs processed within 10 business days. |
| Gmail and Yahoo sender requirements | Mail to Gmail and Yahoo inboxes | SPF, DKIM and an aligned DMARC record. One-click unsubscribe. Complaint rate below 0.3%, ideally below 0.1%. |
| TCPA (United States, SMS when available) | Marketing texts to US numbers | Prior express written consent. Honor opt-out requests made by any reasonable means. Sending hours and STOP keywords respected. |
| WhatsApp Business policies (when available) | WhatsApp marketing messages | Opt-in before messaging, approved templates for marketing, and every opt-out honored. |
6. Enforcement and reporting
If we find a breach, we may pause sending, remove content, suspend or close the workspace, and report illegal activity to the authorities. Where we can, we will tell you what happened and how to fix it.
To report abuse, such as an email you never signed up for that was sent through Tellnod, write to support@tellnod.com [dedicated abuse address] and include the message headers if you can.