The Rule
You may send a campaign to a contact when that contact has a relationship with you and gave you their address for this purpose: they signed up on your site, created an account, bought from you, or asked to be kept informed. You should be able to show, for every contact, when and how they opted in. The rule is about the relationship with the recipient, not about the email. A friendly tone, a plain design or an unsubscribe link does not turn a list of strangers into subscribers, and the review judges the list, not the wording. Transactional email to your own users, such as password resets, receipts and notifications, is never affected by this page.What Is Fine
- Newsletter subscribers who filled in your sign-up form.
- Users of your product or service, and customers who bought from you, as long as they can opt out.
- People who gave you a business card or ticked a box at your stand or event and agreed to hear from you.
- Leads who replied to you, booked a demo or asked for a quote.
- A list you bring over from another email provider, when the contacts on it opted in with you there.
What Is Not Fine
- Purchased, rented or borrowed lists, whoever sold them and whatever they promise about consent.
- Addresses collected from websites, directories, trade registers, public registries or LinkedIn, or scraped by a tool.
- Lead databases, data enrichment exports and “verified B2B contacts”.
- Co-registration: people who signed up for something else and were passed on to you.
- Role addresses such as
info@,sales@orlegal@of companies you have no relationship with, and registered-mail addresses that companies must publish by law. - Anyone who unsubscribed, complained or asked you to stop.
What Happens at Review
Before a campaign goes out, AhaSend checks new and changed lists: a sample of the addresses is validated, and the content is checked for spam, phishing and cold outreach. A list that fails is paused with the reason on the campaign page; a borderline list waits for a person to look at it, usually within 1 to 2 business days. Proof of consent can be requested for any list. The full rules are on testing, review and sending. A validation that passes is not permission. A list of real, deliverable addresses that never opted in is still cold outreach.Prospecting: What To Do Instead
Reaching companies you have no relationship with yet is sales, and email campaigns are the wrong tool for it. What works, and keeps your sending reputation intact:- LinkedIn and personal outreach. One-to-one messages from a person, written for the recipient.
- Outreach tools built for it. Cold-email tools send from mailboxes made for that purpose, with their own warm-up and reputation, separate from the platform your customers’ email runs on.
- Ads and content. Let the people who are interested come to you.
- Events and partnerships. Collect addresses from people who talk to you.
Double Opt-In
Double opt-in means a new subscriber confirms their address before they receive anything: they sign up, you send one confirmation email, and they are subscribed when they click the link in it. It keeps typos and other people’s addresses off your list, it gives you a timestamped record of consent, and in several European countries it is what the regulator expects. AhaSend lists are single opt-in by default, and each list membership has asubscription_status that makes double opt-in simple to build:
- When someone signs up, add them to the list with
subscription_status: "unconfirmed". An unconfirmed contact is on the list but does not receive campaigns. - Send a confirmation email through the API or SMTP with a link to your own site. Make the link unique per contact.
- When the link is clicked, set the membership to
confirmedwith Add or Update a List Contact. AhaSend recordssubscribed_at, which is your proof of consent.

