AI automation
Messaging compliance & anti-spam policy
Automation should bring customers closer, not annoy them. These rules apply to every automation we build, for every client.
1. Consent first
- We only send automated SMS, WhatsApp or calls to people who contacted the business first or gave clear opt-in consent (form checkbox, keyword, written request).
- Consent is recorded with date, source and wording, and kept for as long as messages are sent.
- We never use bought, rented or scraped phone lists.
2. Easy opt-out, always
- Every marketing message explains how to stop (e.g. reply STOP).
- Opt-outs are applied immediately across all channels and never contacted again for marketing.
3. WhatsApp rules
- We use the official WhatsApp Business Platform only (no unofficial tools or bulk-sending hacks).
- Business-initiated messages use Meta-approved templates and only go to opted-in customers, in line with Meta’s WhatsApp Business and Commerce policies.
4. SMS and calls by market
- Marketing texts are sent only with prior consent, at reasonable local hours (9:00-20:00).
- United States: SMS programmes are registered (A2P 10DLC) and follow the TCPA. Canada: CASL. European Union/UK: GDPR and ePrivacy rules. Gulf countries: local telecom rules and opt-in requirements.
- AI voice calls are inbound or to people who asked to be called back; the AI identifies itself as an assistant.
5. Cold outreach = B2B email only
- Cold prospecting is limited to business email addresses, with relevant offers, a clear sender identity, a contact address and a one-click unsubscribe (CAN-SPAM, GDPR legitimate interest where applicable).
- No cold SMS, WhatsApp or automated calls to people who never opted in.
6. Morocco
- Personal data is processed in line with Law 09-08 on the protection of personal data. Each client business is responsible for its declaration/authorisation with the CNDP when required; we help prepare the information.
7. Data protection
- Data is used only to provide the automation for the client business, never sold or reused.
- Access is limited to the people who need it; data is exported and deleted when the service ends. A data processing agreement (GDPR art. 28) is available for EU clients.
8. AI honesty
- The assistant only answers from information approved by the business, says it is an AI assistant when asked, and hands the conversation to a human when it is unsure.
- We never write fake reviews or impersonate customers. Review requests go only to real customers and never reward 5-star ratings.
Report a problem
Received a message you didn’t agree to from a business using our automations? Email hello@bestmarque.com: we stop it within 24 hours.
This policy is a summary of good practice, not legal advice. Last updated: October 9, 2026. Service agreement