SMS Opt-In & Consent Policy

SMS opt-in is the process by which an individual gives explicit, informed consent to receive text messages from your business. Under the Telephone Consumer Protection Act (TCPA) and CTIA Messaging Principles and Best Practices, consent must be:

• Clearly and conspicuously disclosed — the recipient must know they are agreeing to receive SMS messages from your specific business.
• Voluntary and affirmative — the individual must take a deliberate action (e.g., checking an unchecked box, texting a keyword, or signing a form). Silence, inaction, or pre-checked boxes do not constitute valid consent.
• Separate from other agreements — consent to receive marketing SMS must not be bundled with terms of service or purchase agreements without clear, separate disclosure.
• Documented and retained — businesses must keep records of when, how, and from whom consent was obtained.

SaaSySMS enforces these requirements at the platform level. Workspaces are required to configure a compliant opt-in method before sending any outbound messages to contacts.

SaaSySMS supports the following CTIA-approved opt-in methods. Each method requires specific disclosures at the point of consent:

Regardless of opt-in method, the following disclosures must be present at the exact point where the consumer provides consent. These are non-negotiable under CTIA guidelines and are enforced by carriers:

SaaSySMS automatically processes opt-out requests in real time. When a contact replies with any of the following keywords, their number is immediately added to the suppression list and no further messages are sent:

Upon receiving an opt-out keyword, SaaSySMS automatically sends a confirmation message:

You have been unsubscribed from [Business Name] messages. No further messages will be sent. Reply START to resubscribe.

Opt-outs are permanent and immediate. Businesses using SaaSySMS cannot override, delay, or ignore an opt-out request. Attempting to send messages to an opted-out number is blocked at the platform level. This protection cannot be disabled.

Opt-out status is recorded in the contact's consent history with a timestamp and the inbound keyword that triggered it. This record is retained for compliance purposes.

A contact who has opted out may re-subscribe at any time by texting START, YES, or UNSTOP to the same number. SaaSySMS will:

• Remove the contact from the suppression list
• Update their opt status to opted in
• Log the re-subscription event in the consent history
• Send a confirmation message confirming re-enrollment

Re-subscription does not require the business to take any action — it is handled automatically by the platform.

When a contact replies HELP to any number managed by SaaSySMS, they automatically receive a response containing:

• Your business name
• A support contact (phone number or email)
• A reminder that replying STOP will end messages
• A note that message and data rates may apply

Example HELP response:

[Business Name]: For help, contact us at [email protected] or call (555) 000-0000. Reply STOP to cancel. Msg & data rates may apply.

The following practices are strictly prohibited on the SaaSySMS platform and violate TCPA, CTIA guidelines, and carrier acceptable use policies:

• Purchased or rented contact lists — sending to numbers obtained from third-party list brokers without individual express consent is prohibited.
• Harvested numbers — scraping phone numbers from websites, directories, or social media without consent is prohibited.
• Pre-checked consent boxes — opt-in checkboxes must be unchecked by default.
• Bundled consent — consent to receive SMS cannot be a condition of purchase or service without a separate, clearly labeled opt-in.
• Misleading sender identity — messages must clearly identify your business. Spoofing or misrepresenting the sender is prohibited.
• Ignoring opt-outs — continuing to send messages after a STOP request is a TCPA violation and is blocked at the platform level.
• Sending after 9 PM or before 8 AM — messages must respect the recipient's local time zone. Quiet hours (9 PM–8 AM local time) must be observed.
• Prohibited content — SHAFT content (Sex, Hate, Alcohol, Firearms, Tobacco) is prohibited unless the campaign is registered and age-gated per carrier requirements.

All businesses sending Application-to-Person (A2P) SMS in the United States via 10-digit long codes (10DLC) are required to register their brand and campaigns with The Campaign Registry (TCR). SaaSySMS provides a guided TCR registration workflow within the platform.

What must be registered:

• Brand registration — your legal business name, EIN/tax ID, business type, and contact information.
• Campaign registration — the use case (e.g., marketing, customer care, 2FA), sample messages, opt-in method, and opt-in message.

Unregistered traffic consequences:

• Carriers will filter or block unregistered A2P traffic.
• Throughput is severely limited (typically 1 message per second vs. 4,500 for registered campaigns).
• Accounts sending unregistered traffic may be suspended by carriers.

SaaSySMS blocks outbound sending on unregistered 10DLC numbers until TCR registration is complete and approved. This protects your business and your recipients.

Under TCPA and FCC rules, businesses must retain records of consent for a minimum of 4 years from the date of the last message sent to a contact. SaaSySMS maintains the following records automatically:

• Opt-in timestamp and method (keyword, web form, manual)
• Opt-out timestamp and triggering keyword
• Re-subscription timestamp and keyword
• All inbound STOP/START/HELP keyword events
• Manual opt-in/opt-out actions taken by workspace members

These records are accessible in the contact's consent history within the SaaSySMS platform and are retained for the life of your account plus 4 years.

If you have received an SMS from a business using SaaSySMS and wish to stop receiving messages, you have the following rights:

• Right to opt out at any time — reply STOP to any message to immediately end all messages from that business.
• Right to confirmation — you will receive a single confirmation SMS acknowledging your opt-out. No further messages will follow.
• Right to information — reply HELP to receive the business's contact information and a reminder of how to opt out.
• Right to re-subscribe — reply START at any time to resume receiving messages if you change your mind.

If you believe a business is violating your opt-out request or sending messages without your consent, you may file a complaint with:

• The FCC at consumercomplaints.fcc.gov
• The FTC at reportfraud.ftc.gov
• Your state attorney general's office

If you have questions about how SaaSySMS handles SMS consent and compliance, or if you are a business customer with questions about configuring compliant opt-in flows, please contact us:

• Email: [email protected]
• Support: Contact form

For platform-level compliance documentation, TCR registration guidance, and carrier policy references, see our Terms of Service and Privacy Policy.