AI automation

Messaging compliance & anti-spam policy

Automation should bring customers closer, not annoy them. These rules apply to every automation we build, for every client.

1. Consent first

  • We only send automated SMS, WhatsApp or calls to people who contacted the business first or gave clear opt-in consent (form checkbox, keyword, written request).
  • Consent is recorded with date, source and wording, and kept for as long as messages are sent.
  • We never use bought, rented or scraped phone lists.

2. Easy opt-out, always

  • Every marketing message explains how to stop (e.g. reply STOP).
  • Opt-outs are applied immediately across all channels and never contacted again for marketing.

3. WhatsApp rules

  • We use the official WhatsApp Business Platform only (no unofficial tools or bulk-sending hacks).
  • Business-initiated messages use Meta-approved templates and only go to opted-in customers, in line with Meta’s WhatsApp Business and Commerce policies.

4. SMS and calls by market

  • Marketing texts are sent only with prior consent, at reasonable local hours (9:00-20:00).
  • United States: SMS programmes are registered (A2P 10DLC) and follow the TCPA. Canada: CASL. European Union/UK: GDPR and ePrivacy rules. Gulf countries: local telecom rules and opt-in requirements.
  • AI voice calls are inbound or to people who asked to be called back; the AI identifies itself as an assistant.

5. Cold outreach = B2B email only

  • Cold prospecting is limited to business email addresses, with relevant offers, a clear sender identity, a contact address and a one-click unsubscribe (CAN-SPAM, GDPR legitimate interest where applicable).
  • No cold SMS, WhatsApp or automated calls to people who never opted in.

6. Morocco

  • Personal data is processed in line with Law 09-08 on the protection of personal data. Each client business is responsible for its declaration/authorisation with the CNDP when required; we help prepare the information.

7. Data protection

  • Data is used only to provide the automation for the client business, never sold or reused.
  • Access is limited to the people who need it; data is exported and deleted when the service ends. A data processing agreement (GDPR art. 28) is available for EU clients.

8. AI honesty

  • The assistant only answers from information approved by the business, says it is an AI assistant when asked, and hands the conversation to a human when it is unsure.
  • We never write fake reviews or impersonate customers. Review requests go only to real customers and never reward 5-star ratings.

Report a problem

Received a message you didn’t agree to from a business using our automations? Email hello@bestmarque.com: we stop it within 24 hours.

This policy is a summary of good practice, not legal advice. Last updated: October 9, 2026. Service agreement