Outbound Compliance Policy
Last Updated: June 1, 2026
1. Customer Owns Outbound Compliance
Customer is the sender, advertiser, campaign owner, and controller for outbound communications run through OXYGEN. This includes email, LinkedIn, direct messages, phone-related workflows, sequence enrollment, CRM sync, and done-for-you operations. This policy describes product safeguards and customer obligations; it is not legal advice.
Customer must determine and document whether each campaign is lawful before OXYGEN software or personnel execute live outbound. OXYGEN may enforce preflight requirements and blocks, but those checks do not shift legal responsibility from Customer to OXYGEN.
2. Required Preflight
Before live outbound, Customer must provide or approve:
- campaign owner and approving user;
- row scope, recipient type, target jurisdictions, and source of contact data;
- lawful basis, consent source, consent timestamp, or applicable soft-opt-in evidence;
- message copy, offer claims, subject line, sender identity, and sender account;
- unsubscribe/refusal mechanism and suppression-list handling;
- spend, credit, provider, and external-action limits;
- go-live approval for the exact campaign scope.
3. Region Rules
EU/EEA/UK: OXYGEN requires documented consent, applicable existing-customer soft opt-in, or another counsel-approved B2B basis for the specific country and recipient type before live email or similar electronic marketing.
China: OXYGEN blocks live cold outbound by default. Customer must provide documented recipient consent or request evidence accepted by OXYGEN for the campaign before any live send.
United States and other regions: Customer must comply with applicable anti-spam, advertising, privacy, telemarketing, and platform rules, including truthful identification and effective opt-out handling.
4. Suppression & Opt-Outs
Customer must maintain accurate suppression lists and honor unsubscribe, refusal, bounce, complaint, do-not-contact, and platform opt-out signals. Customer must not re-import suppressed recipients, rotate domains to bypass suppressions, or use OXYGEN to evade recipient choices.
5. Content & Sender Identity
Customer must ensure every message is truthful, non-deceptive, accurately identifies the sender, contains required contact and opt-out information, avoids misleading headers or subject lines, and substantiates all claims. Customer is responsible for AI-generated copy and done-for-you copy approved by Customer.
6. OXYGEN Enforcement Rights
OXYGEN may block countries, rows, domains, providers, accounts, or campaigns; require legal-basis evidence; demand manual approval; throttle sends; or suspend access where risk is unacceptable. These controls are product safeguards and do not create a compliance warranty.
7. Contact
Compliance questions and notices: philipp@oxygen-agent.com.