← Back to AuraLeads AI

CAN-SPAM & GDPR

Last updated: September 27, 2026

AuraLeads AI is a tool you use to send outreach (Instagram DMs, WhatsApp messages, and cold emails) to leads you've discovered or connected. Under CAN-SPAM, GDPR, and India's DPDP Act 2023, you are the data controller / sender of record for that outreach, not AuraLeads AI — the same way a mail-merge tool doesn't become the sender of the letters it formats. This page explains what that means in practice and what AuraLeads AI does and doesn't automate for you.

What you're responsible for

  • Truthful sender identification in every message you send.
  • Honoring opt-out/unsubscribe requests you receive, promptly.
  • Having a lawful basis to contact each lead (e.g. legitimate interest for B2B outreach under GDPR, or your jurisdiction's equivalent).
  • Not using AuraLeads AI to contact anyone who has already asked you to stop.

What AuraLeads AI does and doesn't automate

Being direct about this rather than implying more than is built: AuraLeads AI does not currently inject an automatic unsubscribe link or manage a suppression list across every channel for you. Gmail sends go through your own connected account via standard SMTP, so any unsubscribe handling is whatever you build into your own message templates. WhatsApp template messages sent through the official Meta Cloud API follow Meta's own opt-out/quality-rating enforcement on top of your legal obligations. If you need automated list-suppression across every channel, that isn't built yet — track requests yourself until it is.

EU/UK data subject rights (GDPR)

If you are an individual in the EU/UK whose data AuraLeads AI holds (as an account holder, or because a customer of ours added you as a lead), you can request access, correction, deletion, or export of that data by emailing contact@auraleads.online. We respond within 30 days.

India's DPDP Act 2023

As a business operating from India, we process personal data as a Data Fiduciary under the DPDP Act for our own account holders, and our customers act as Data Fiduciaries for the lead data they collect and message through the product. Data principal rights requests (access, correction, erasure) can be sent to contact@auraleads.online.

Contact

Questions about compliance on the platform: contact@auraleads.online.

This page explains how the product works and where responsibility sits between you and us — it isn't a substitute for your own legal advice on compliance obligations in your specific market.