Compliance

Our Commitment to Compliance

DualBlaster is committed to helping our users send compliant SMS and email marketing messages. Our platform is designed with built-in features that help you comply with federal, state, and international regulations governing electronic communications.

TCPA Compliance (SMS)

The Telephone Consumer Protection Act (TCPA) regulates SMS marketing in the United States. DualBlaster provides the following features to help you comply:

• Automatic STOP Keyword Handling - When recipients reply with STOP, UNSUBSCRIBE, CANCEL, END, QUIT, or similar keywords, they are automatically unsubscribed and will not receive further messages.
• START Keyword Resubscription - Recipients can text START to opt back in if they previously unsubscribed.
• Time-of-Day Restrictions - Our platform warns you when scheduling SMS messages outside of 8:00 AM - 9:00 PM in the recipient's time zone, and can automatically pause and resume campaigns to stay within these hours.
• Consent Tracking - We track when and how each contact opted in to receive SMS messages, providing an audit trail for compliance.
• Opt-Out Confirmations - When someone unsubscribes, they receive an automatic confirmation message.

CAN-SPAM Compliance (Email)

The CAN-SPAM Act establishes requirements for commercial email messages. DualBlaster automatically includes the following in every email:

• Physical Mailing Address - Every email includes your physical mailing address as required by law. You can configure this per sender identity.
• One-Click Unsubscribe - Every email includes a clear unsubscribe link that works without requiring the recipient to log in or pay a fee.
• Preference Center - Recipients can manage their subscription preferences, choosing which lists to remain on rather than unsubscribing from everything.
• Immediate Opt-Out Processing - Unsubscribe requests are processed immediately, well within the 10-business-day requirement.
• Suppression List - Unsubscribed contacts are maintained on a suppression list to prevent accidental re-subscription.

Data Privacy Regulations

DualBlaster helps you comply with various data privacy regulations by providing data portability and transparency features:

GDPR (European Union)

The General Data Protection Regulation grants EU residents rights over their personal data. We support GDPR compliance through:

• Data export functionality - users can download all their data
• Right to erasure - account deletion removes all associated data
• Consent tracking for contacts
• Data encryption at rest and in transit

CCPA (California)

The California Consumer Privacy Act provides California residents with rights regarding their personal information. We support CCPA compliance through:

• Right to know - users can export all their data
• Right to delete - account deletion functionality
• Right to opt-out of sale - we do not sell personal information

Other State Privacy Laws

Our platform also supports compliance with other state privacy laws including:

• CPA - Colorado Privacy Act
• VCDPA - Virginia Consumer Data Protection Act
• CTDPA - Connecticut Data Privacy Act
• UCPA - Utah Consumer Privacy Act

Security Measures

We implement robust security measures to protect your data and your contacts' data:

• Encryption - API credentials (Twilio, SendGrid) are encrypted using AES-256-GCM encryption before storage.
• Secure Authentication - Passwords are hashed using bcrypt. Sessions are managed with secure, httpOnly cookies.
• CSRF Protection - All state-changing requests require valid CSRF tokens.
• Rate Limiting - Login attempts and other sensitive operations are rate-limited to prevent abuse.
• Webhook Verification - Incoming webhooks (like Twilio SMS) are verified using cryptographic signatures.
• HTTPS Only - All communications are encrypted in transit using TLS.

Your Responsibilities

While DualBlaster provides tools for compliance, you are ultimately responsible for:

• Obtaining proper consent before sending marketing messages
• Maintaining accurate records of consent
• Honoring opt-out requests promptly
• Ensuring your message content is truthful and not deceptive
• Including required disclosures in your messages
• Complying with all applicable laws in your jurisdiction

Prohibited Content

Carriers and messaging providers prohibit certain content categories, commonly known as SHAFT (Sex, Hate, Alcohol, Firearms, Tobacco). DualBlaster enforces these restrictions to protect your deliverability and comply with our Terms of Service.

Prohibited Categories (SMS)

The following content is blocked for SMS and will not be sent:

• Sex / Adult Content - Pornography, escort services, explicit material
• Hate Speech - Harassment, threats, discriminatory content
• Firearms / Weapons - Gun sales, ammunition, weapon promotion
• Tobacco / Vape - Cigarettes, e-cigarettes, vaping products
• Cannabis / CBD - Marijuana, THC, CBD products, dispensaries
• Illegal Substances - Drugs, controlled substances, paraphernalia
• Gambling - Casinos, sports betting, lottery promotion
• Prescription Drugs - Pharmaceutical sales, medication promotion
• Phishing / Fraud - Deceptive requests for credentials or payments

Restricted Categories

The following content triggers a warning but may be sent after acknowledgment:

• Alcohol - Beer, wine, spirits (requires age-gating in some jurisdictions)
• High-Risk Financial - Cryptocurrency, forex, investment opportunities
• Spam Patterns - Excessive caps, urgency phrases, multiple links

Email Content

Email is more permissive than SMS. Most categories above trigger a warning rather than a block, allowing you to proceed at your own risk. However, Sex, Hate, Illegal Substances, and Phishing are blocked on all channels.

Platform Monitoring

To maintain a trusted messaging ecosystem, DualBlaster monitors for abuse patterns:

• Outgoing messages are logged for abuse prevention
• Content that triggers warnings is flagged for review
• Accounts with repeated violations may be suspended
• We cooperate with provider abuse teams (Twilio, SendGrid, AWS) when required

Questions?

If you have questions about compliance or need assistance configuring your account for compliance, please contact us at [email protected].