Anti-spam (CASL)

What Kaza does on every message

• Consent is recorded, per basis, with a date. Not a single on/off flag. The reason we are allowed to email a person is stored, so it can be shown later. CASL asks you to be able to prove consent, and a claim you cannot evidence is not a defence.
• Unsubscribe is on every message. Including the ones that do not legally need consent. Being exempt from consent is never an exemption from identification or from a way out.
• One-click unsubscribe. Messages carry the headers that make a mailbox provider render its own unsubscribe button, so a person can leave without opening anything.
• Unsubscribing is honoured immediately, not within the ten business days the law allows. It withdraws every basis we hold for that person, and the address goes on a suppression list so a later import cannot quietly resurrect them.
• The unsubscribe link resolves on a real public address, your own host where you have one. A link that only works inside our app is not a working unsubscribe.
• We never send from a domain we cannot prove we own. Until your domain is verified, mail goes out as Your Company (via Kaza) with replies routed to you.

Transactional versus commercial

A decision on an application somebody submitted, a receipt, a repair update, a lease to sign: these answer something the person started, and CASL treats that differently from marketing. Kaza still identifies the sender and still offers a way out on them.

A message about homes somebody has not asked about is marketing, and it needs consent before it is sent. Kaza will not send that to anyone who has unsubscribed, even where a different basis might technically permit it.

What stays your responsibility

The messages go out under your company’s name, so the law looks at you. Two things in particular are yours:

• A physical mailing address.CASL requires every commercial electronic message to carry the sender’s mailing address. That address is yours, not ours: put your company’s in your settings and keep it current.
• Consent you brought with you. If you import a list, you are asserting you have a basis for everyone on it. Implied consent expires: commonly two years after a purchase or enquiry, and an old spreadsheet is where most CASL trouble starts.

Kaza's own email to you

Mail we send you about your account (billing, a change to these terms, a security notice) is about the service you bought. Marketing mail from Kaza itself is a separate thing and you can refuse it without losing the account notices.

To be straight about it: Kaza is made by 3D3D and we do very little outbound marketing. What the law requires us to identify ourselves with, on any commercial message we send: