Anti-spam (CASL)

What Kaza does on every message

• Consent is recorded, per basis, with a date. Not a single on/off flag. The reason we are allowed to email a person is stored, so it can be shown later. CASL asks you to be able to prove consent, and a claim you cannot evidence is not a defence.
• Unsubscribe is on every message. Including the ones that do not legally need consent. Being exempt from consent is never an exemption from identification or from a way out.
• One-click unsubscribe. Messages carry the headers that make a mailbox provider render its own unsubscribe button, so a person can leave without opening anything.
• Unsubscribing is honoured immediately, not within the ten business days the law allows. It withdraws every basis we hold for that person, and the address goes on a suppression list so a later import cannot quietly resurrect them.
• The unsubscribe link resolves on a real public address, your own host where you have one. A link that only works inside our app is not a working unsubscribe.
• We never send from a domain we cannot prove we own. Until your domain is verified, mail goes out as Your Company (via Kaza) with replies routed to you.

Transactional versus commercial

A decision on an application somebody submitted, a receipt, a repair update, a lease to sign: these answer something the person started, and CASL treats that differently from marketing. Kaza still identifies the sender and still offers a way out on them.

A message about homes somebody has not asked about is marketing, and it needs consent before it is sent. Kaza will not send that to anyone who has unsubscribed, even where a different basis might technically permit it.

What stays your responsibility

The messages go out under your company’s name, so the law looks at you. Two things in particular are yours:

• A physical mailing address. CASL requires every commercial electronic message to carry the sender’s mailing address, and that address is yours, not ours. Every message Kaza sends today carries your company’s name, Kaza’s own identification below, and a one-click way out. It does not carry your company’s mailing address, which is why nothing here should be used to send marketing.
• Consent you brought with you. If you import a list, you are asserting you have a basis for everyone on it. Implied consent expires: commonly two years after a purchase or enquiry, and an old spreadsheet is where most CASL trouble starts.

Kaza's own email to you

Mail we send you about your account (billing, a security notice) is about the service you bought. Kaza sends you no marketing mail, so there is nothing of that kind to refuse.

To be straight about it: Kaza is made by 3D3D and we do very little outbound marketing. What the law requires us to identify ourselves with, on any commercial message we send: