Legal — Acceptable Use

Acceptable Use & Anti-Spam Policy

Bright Ears gives you powerful outbound tooling. This policy sets out how you must use it. You are the legal sender of every message; these are the rules that keep that lawful, and breaking them can get you suspended.

Draft — pending legal review

This document is a working draft and is not yet effective. It has not been reviewed or approved by a lawyer and does not yet govern your use of Bright Ears.

Last updated: June 14, 2026

The core principle

You are the sender and the responsible party

For every message generated or sent through Bright Ears — whether via our Postmark infrastructure (mail.brightears.io) or from your own connected Google mailbox — you are the legal sender and initiator. You decide who is contacted and what is said. You are solely responsible for compliance with the laws below, and you indemnify Bright Ears for messages you send, as set out in the Terms of Service. Bright Ears applies a jurisdiction rules engine and automation hard-stops to help you stay compliant, but the legal duty is yours.

By jurisdiction

Your anti-spam duties, country by country

The rules that apply turn on where your recipient is, not where you are. In summary:

  • United States — CAN-SPAM. Use truthful, non-deceptive headers and subject lines, identify the message as a solicitation where relevant, include a valid physical postal address, and provide a clear opt-out that you honour within 10 business days.
  • Canada — CASL. Commercial email generally requires consent — including for B2B; implied consent for published business addresses is narrow and risky. Every message must identify the sender and carry a working unsubscribe. Bright Ears does not auto-send to Canadian recipients: it drafts, and you copy and send personally, owning the judgment call.
  • United Kingdom — PECR / UK GDPR. Email to a corporate subscriber (a company / corporate body) is opt-out based and lawful with sender identification and a working opt-out. Sole traders and individuals are treated as individual subscribers and generally require consent. Identify yourself in every message.
  • Australia — Spam Act 2003.Inferred consent can apply to a conspicuously published business address relevant to the message. Keep the message strictly relevant to the recipient’s business, identify yourself, and include a functional unsubscribe.
  • EU — GDPR / ePrivacy. You need a lawful basis to process the contact data and to send (legitimate interests for relevant B2B outreach, where it holds; consent where required). Practise data minimisation on scraped contacts and honour objections immediately. Some member states (e.g. Germany, Austria) require prior consent even for B2B — Bright Ears will not auto-send to those and you must send personally if at all.
  • Anywhere else.Bright Ears fails closed: if we have not researched a country’s cold-email rules, the agent will not auto-send there — it drafts only, and you decide whether to send.

Always

Operational duties that apply everywhere

  • Maintain and honour the suppression list. Anyone who opts out, asks to stop, or sends a cease-and-desist goes on your suppression list and must never be contacted again. Do not re-import or work around suppressed contacts.
  • Never disable identification or opt-out. Every message must identify you and offer a way to stop. You may not strip, hide or disable the sender-identification or opt-out elements that Bright Ears appends.
  • Respect the automation hard-stops. An opt-out, a reply from the recipient, or a status of BOOKED or DEAD immediately stops any sequence to that contact. You may not re-trigger a stopped sequence to circumvent this.
  • Send only relevant, honest, B2B outreach. No deceptive content, no harvesting beyond what the tool gathers, no high-volume blasting. Keep within the daily caps the product enforces.

Platform rules

Lead-source and platform bans

  • The Knot / WeddingWire. Never script, automate or scrape their vendor inboxes or messaging systems. (Parsing their notification emails that arrive in your own inbox is fine — that is your own mail.)
  • GigSalad. Draft and deep-link only — Bright Ears prepares the message and links you into GigSalad to send it yourself. Never auto-send into GigSalad.
  • Respect every platform’s terms. Do not use Bright Ears to breach the terms of any third-party platform or to automate against a platform that prohibits it.

Enforcement

What happens if you break these rules

Breach of this policy is a breach of the Terms of Service. We may pause sending, suspend features, or terminate your account, and you remain responsible (and indemnify us) for any messages you sent in breach. Questions, or to report misuse, email info@brightears.io.