Compliance is not a policy document we consult after the fact. It is code that runs before every message: a call only dials if that person asked, in writing, to be called, AI calls only go to people who explicitly asked for one, and an opt-out from any channel stops every channel, permanently.
Every call carries its own permission: the person asked to be called, in writing, before the phone ever rang. We place calls only to leads who gave that written consent, which is the strongest basis the telephone rules recognize, and our systems refuse to dial a number that has not passed the consent check, the same way they refuse to call an opted-out number.
Our calling assistant only dials a lead who replied YES to a written ask that named the assistant as an AI. No yes, no call. The consent record carries the exact wording the lead agreed to, with a timestamp, and it expires.
The assistant identifies itself as an AI assistant at the start of every call, states the team it is calling on behalf of, and never claims or implies it is a person.
Calls and texts are placed between 8 a.m. and 8 p.m. in the time zone we have on record for the lead, resolved from what the lead has told us, the client's records, and the phone number itself. When those sources disagree or say nothing, we call in the narrower window that is safe in every mainland time zone. Our consent messages tell leads that scheduling follows their number's area code and how to tell us they have moved.
STOP by text, a verbal request during a call, an email reply, or an unsubscribe click: any of these suppresses the lead across every channel and every future campaign. Opt-out records are kept for at least five years.
About twenty states require telemarketer registration before their residents can be called. We do not call leads in those states unless we hold our own active registration there; email and text outreach continue normally either way. A client's own registration does not unlock anything on our side.
Every campaign runs under our compliance position: the consent records, the opt-out handling, and the calling rules are our responsibility, not something delegated back to the client. Every email carries a working unsubscribe and our physical postal address.
Consent and opt-out records are retained for at least five years in tamper-evident storage: any edit or deletion after the fact is detectable. Call recordings and transcripts are kept for two years.
Lead lists clients export to us are used solely for that client's campaigns, checked as described above, and returned or deleted when the engagement ends. We never sell, rent, or share lead data. Details are in our privacy policy.
If you are a client, a regulator, or a lead with a question about any of this: Matt@hayessystems.com. We can produce the compliance records for any campaign on request.
← Back to hayessystems.com