Compliance & Telecom Law

The compliance engine enforces rules from these jurisdictions out of the box:

• United States — federal TCPA, CAN-SPAM, the Telemarketing Sales Rule, and state mini-TCPA laws including Florida (FTSA), Oklahoma, Washington, Maryland, New York, Arizona, plus elevated enforcement awareness for New Jersey, Texas, Wyoming, and Louisiana.
• Canada — CASL (Canada's Anti-Spam Legislation) and the National Do Not Call List.
• Brazil — LGPD plus telecom rules.
• Mexico — REPEP (the public registry) plus telecom rules.
• Colombia, Argentina, Chile, Peru — country-specific consent, DNC, and calling-hour rules.
• EU/EEA — GDPR for personal data and consent.

New jurisdictions are added regularly. If your country isn't listed, contact us — we can usually add a jurisdiction quickly if there's demand.

Every send (SMS, email, voice, WhatsApp) passes through the Policy Routing Engine before it leaves the queue. The engine evaluates the message in two layers:

• Eligibility — does the recipient have valid consent? Are they on a Do Not Call list? Has their implied-consent window expired? Are they on your internal DNC list?
• Constraints — is it within calling hours for their jurisdiction? Has the frequency cap been hit? Does the message include the required sender ID and opt-out instructions?

If the message fails any check, it's blocked or held and the dashboard shows you exactly which rule fired and how to remediate. If it passes, it goes out and the full decision trace is logged for audit.

Calling hours are evaluated against the recipient's local time, not yours. Key windows:

• US federal — 8:00 AM to 9:00 PM.
• Florida, Oklahoma, Washington, Maryland — 8:00 AM to 8:00 PM.
• New York — 8:00 AM to 9:00 PM.
• Canada — Monday–Friday 9:00 AM to 9:30 PM, weekends 10:00 AM to 6:00 PM.
• Brazil — weekdays 8 AM to 8 PM, Saturdays 8 AM to 2 PM, Sundays and holidays prohibited.
• Mexico — Monday to Friday 8 AM to 7 PM.
• Colombia — weekdays 7 AM to 7 PM, Saturdays 8 AM to 3 PM, Sundays and holidays prohibited.
• Chile — Monday–Saturday 8 AM to 8 PM, Sundays prohibited.

Messages scheduled outside these windows are held and released when the window opens.

Frequency caps limit how many marketing contacts you can make to one recipient in a given window. The engine enforces:

• Florida — no more than 3 commercial telephone solicitation calls on the same subject in a 24-hour period.
• Oklahoma — 3 calls per 24 hours.
• Maryland — 3 calls per 24 hours.
• Colombia — 1 contact per week on the same obligation or marketing subject (counted across channels).

Other jurisdictions don't have explicit federal/national caps but our recommendations engine flags excessive frequency anyway to protect deliverability and reduce complaint rates.

10DLC (10-digit long code) is the US carrier registration system for sending business SMS from a standard phone number. Without 10DLC registration, carriers throttle or block business SMS. Respectly handles 10DLC registration for your dedicated phone number(s) automatically — we'll need your business name, EIN/tax ID, address, and the use case for the number. Registration takes a few business days. Shared-pool sending on Free and Standard does not require you to register because it goes through Respectly's pre-registered campaigns.

Informational (also called transactional) messages relate to an existing relationship — appointment confirmations, receipts, account alerts, shipping notifications. Marketing messages promote a product, service, or offer. The compliance rules are significantly stricter for marketing: most jurisdictions require express written opt-in for marketing SMS to a wireless number, where informational messages can often go out under implied consent.

The AI classifies every draft message automatically as informational or marketing, and the engine applies the appropriate consent threshold. You can override the classification on a per-message basis if needed.

Prerecorded or artificial-voice calls to wireless numbers require written express consent under US TCPA, and similar tiers apply in most other jurisdictions. Respectly's AI voice calls are treated as artificial-voice for compliance purposes, so the engine requires WRITTEN_EXPRESS_OPTIN for voice marketing in those jurisdictions. The voice AI itself can capture that consent on the call by reading the required disclosures and recording the verbal agreement, producing audio + transcript evidence.

Respectly supports the core GDPR rights for contacts you store: right of access (full contact export), right to rectification (edit any field), right to erasure (delete a contact and all messages, forms, and consent records, with a 24-hour grace period before permanent deletion), and right to data portability (CSV export). Consent capture stores the lawful basis, the disclosure shown at the time, and full timestamp/IP evidence so you can demonstrate valid consent on demand.

For your DPA (Data Processing Addendum) and Standard Contractual Clauses for international data transfer, contact legal@respectly.ai.

Every email send through Respectly automatically includes the elements required by CAN-SPAM: an accurate "From" identifying your business, a non-deceptive subject line, your physical postal address, and a clear unsubscribe mechanism (both a List-Unsubscribe header and a one-click unsubscribe link). Unsubscribes are honored immediately and permanently across all email campaigns.

SMS is supported to all countries our infrastructure providers reach. International SMS may be priced differently from domestic SMS — check Settings → Billing → Pricing or contact sales for rates in specific destinations. International calling-hour and consent rules are enforced where Respectly has jurisdiction support; for countries not yet in the engine, the system applies a conservative default.

Yes — for jurisdictions that maintain a registry (US National DNC, Canada DNCL, Mexico REPEP, Argentina No Llame, Chile No Molestar, Colombia, and others). Scrubs run on a 31-day cadence to meet the US TSR requirement. Your internal DNC list (contacts you've manually added or who've opted out) is enforced in real time on every send.