TCPA Compliance

In general terms, the TCPA prohibits sending marketing SMS to a US recipient without their prior express written consent. Consent must be (a) specific to SMS marketing from your business, (b) freely given (not bundled with a purchase requirement), and (c) clearly disclosed at the point of opt-in.

Transactional and informational messages (order confirmations, appointment reminders, account alerts) generally do not require prior express written consent but still require some form of consent. The line between marketing and transactional is not always crisp. When in doubt, treat the message as marketing.

The platform includes the following compliance features by default:

• STOP, UNSUBSCRIBE, CANCEL, END, QUIT replies opt the contact out of all messaging from your organization immediately. We process these synchronously. No human review needed. • HELP replies trigger an automatic on-brand response that includes your business name and contact information. • Required STOP language is appended to your first message to any contact, automatically. • Quiet-hours enforcement is on by default (8am-9pm in the contact's local time zone). • Pre-send AI compliance review catches SHAFT content and missing required disclosures before they leave the platform. • 10DLC brand and campaign registration is provisioned for every account, with AI-assisted submission to maximize first-try approval.

Despite the platform's automated protections, you remain solely responsible for:

• Obtaining valid prior express written consent from each contact you message for marketing purposes. • Maintaining documentation of consent (timestamp, source, IP, opt-in text shown). • Honoring any state-specific requirements that go beyond the TCPA (e.g., Florida Telephone Solicitation Act, Washington's revised CEMA). • Ensuring your 10DLC brand registration accurately describes your business and use case. • Not attempting to evade STOP / opt-out signals by re-acquiring numbers through alternate means.

If a TCPA complaint is filed against your account, the first question regulators ask is "show us the consent record for this number." Keep records of the opt-in source (web form, in-store kiosk, paper sign-up), the timestamp, and the exact language the contact agreed to. RocketText stores opt-in attestations you import via CSV but cannot generate consent for contacts you imported without it.

Our 4-tier strike system (warning → 24-hr pause → 7-day suspension → permanent ban) is designed to catch and correct problematic patterns before regulators get involved. Repeat hard violations result in permanent account termination and may be reported to the relevant carrier's Campaign Registry.

TCPA-specific questions can be sent to compliance@rockettext.co. We can't provide legal advice, but we can describe how the platform behaves and point you to your records.