CASL Compliance

1. Introduction

PVRPOSE AI ("we," "our," or "us") is committed to full compliance with Canada's Anti-Spam Legislation (CASL), one of the world's most stringent anti-spam laws. This page outlines our commitment to compliance, explains your rights under CASL, and details how we obtain and manage consent for Commercial Electronic Messages (CEMs).

CASL is designed to protect Canadians from unsolicited commercial emails, text messages, and other electronic messages while supporting legitimate business communications. We take this legislation seriously and have implemented robust systems to ensure compliance at every touchpoint.

2. What is CASL?

Canada's Anti-Spam Legislation (CASL) came into force on July 1, 2014. It is administered by the Canadian Radio-television and Telecommunications Commission (CRTC), the Competition Bureau, and the Office of the Privacy Commissioner of Canada.

2.1 Key Requirements

CASL requires that businesses:

• Obtain consent (express or implied) before sending Commercial Electronic Messages (CEMs)
• Provide clear identification information in all CEMs
• Include a functional unsubscribe mechanism in every CEM
• Maintain detailed records of consent for a minimum of 3 years
• Honor unsubscribe requests promptly (within 10 business days)

2.2 What is a Commercial Electronic Message (CEM)?

A CEM is any electronic message (email, SMS, social media message, etc.) that encourages participation in a commercial activity, including:

• Marketing emails: Promotional content, newsletters, product announcements
• Sales outreach: Follow-ups, offers, discovery call invitations
• Educational content with commercial intent: Webinar invitations, resource downloads that promote services
• Lead nurturing sequences: Automated email campaigns designed to move prospects toward a purchase

2.3 Messages NOT Covered by CASL

CASL does not apply to:

• Service confirmations: Assessment results, appointment confirmations, order confirmations
• Transactional messages: Invoices, receipts, contract documents
• Requested information: Responses to specific inquiries or information you've requested
• Messages between businesses with an existing relationship: Ongoing client communications related to active projects

3. Our Commitment to CASL Compliance

PVRPOSE AI is a Canadian-based business founded by a business lawyer specializing in digital compliance. CASL compliance is not just a legal obligation for us—it's a core principle of how we conduct business.

3.1 Our Compliance Practices

• Express Consent First: We never send marketing emails without clear, documented consent
• Transparent Opt-In: Our consent checkboxes are unchecked by default and clearly explain what you're agreeing to
• Detailed Record-Keeping: We maintain timestamped records of all consent, including IP addresses, form submissions, and consent language
• Easy Unsubscribe: Every marketing email includes a one-click unsubscribe link
• Prompt Processing: Unsubscribe requests are processed immediately (typically within seconds, always within 10 business days as required by CASL)
• Regular Audits: We conduct quarterly reviews of our email lists and consent records
• Staff Training: All team members are trained on CASL requirements and our compliance procedures

3.2 Zero Tolerance for Violations

We do not purchase email lists, scrape contact information from websites, or send unsolicited marketing messages. Any suspected violations of our CASL policies are investigated immediately and addressed with appropriate corrective action.

4. How We Obtain Consent

CASL recognizes two types of consent: express consent and implied consent. We rely primarily on express consent, which provides the strongest legal protection and best user experience.

4.1 Express Consent

Express consent is a clear, affirmative action indicating agreement to receive CEMs. This is our primary consent mechanism.

How we obtain express consent:

• AI Readiness Assessment: Opt-in checkbox (unchecked by default) stating: "Yes, I'd like to receive educational content and resources from PVRPOSE AI about AI automation and business optimization. I understand I can unsubscribe at any time."
• Resource Downloads: When downloading resources (e.g., "5 Signs Your Business Is Ready for AI"), you explicitly consent to receive related follow-up content
• Newsletter Signup: Clear opt-in forms on our website and exit popups with explicit consent language
• Discovery Call Scheduling: When scheduling via Calendly, you may opt in to receive preparation materials and follow-up resources
• Webinar/Event Registration: Registration forms include express consent for event-related communications and follow-up marketing (if you choose to opt in)

4.2 Implied Consent

Implied consent exists in specific situations defined by CASL and expires after a set period. We use implied consent only when permitted by law.

Existing Business Relationship (EBR):

• If you've purchased services from us within the past 2 years, we may send you marketing messages related to similar services
• If you've made an inquiry or application within the past 6 months, we may send follow-up messages related to that inquiry
• EBR-based implied consent expires 2 years after the last transaction or 6 months after an inquiry

Existing Non-Business Relationship (ENBR):

• If you've provided your email address as part of a professional activity (e.g., at a conference, via LinkedIn) without expressing objection to receiving CEMs
• ENBR-based implied consent expires 2 years from when we obtained the contact information

Important Note on Implied Consent:

Even when implied consent exists, we include unsubscribe links in all marketing messages and honor opt-out requests immediately. Whenever possible, we seek to convert implied consent to express consent through clear opt-in opportunities.

4.3 Consent Record-Keeping

For every consent we obtain, we record:

• Timestamp: Date and time of consent (in UTC and local time)
• Source: Where consent was obtained (e.g., "AI Readiness Assessment - Website Form")
• Consent Language: Exact text of the consent checkbox or opt-in mechanism
• IP Address: To verify geographic location (jurisdiction)
• Form Data: Email address, name, and any other information provided
• User Agent: Browser and device information for verification
• Opt-In Type: Express consent vs. implied consent (with basis noted)

These records are stored securely in our CRM (Airtable) and are retained for a minimum of 3 years as required by CASL, or longer if required by other legal obligations (e.g., PIPEDA, tax law).

5. Required Information in Our Emails

CASL requires that every Commercial Electronic Message clearly identify the sender and provide contact information. Our marketing emails include:

5.1 Sender Identification

• Business Name: PVRPOSE AI (clearly displayed in email header and footer)
• Sender Name: Juan Gonzalez (Principal) or designated team member
• Email Address: Sent from @pvrpose.ai domain (e.g., juan@pvrpose.ai)
• Logo: PVRPOSE AI branding for visual identification

5.2 Contact Information

Every marketing email includes our contact details:

• Email: juan@pvrpose.ai
• Website: pvrpose.ai
• Mailing Address: 124 Louis Riel, Dollard-des-Ormeaux, H9B 3B5, Quebec, Canada

5.3 Transparency & Attribution

If we send emails on behalf of a partner or client, we clearly identify both the party sending the message and the party on whose behalf it is sent, as required by CASL.

6. Unsubscribe Mechanisms

CASL requires that all Commercial Electronic Messages include a clear, simple, and cost-free way to unsubscribe. We exceed these requirements to make opting out as easy as possible.

6.1 Our Unsubscribe Process

• One-Click Unsubscribe: Every marketing email includes a prominent "Unsubscribe" link in the footer
• Immediate Processing: Clicking the unsubscribe link removes you from our marketing list instantly (no confirmation email required unless you request one)
• No Login Required: You do not need to log in or provide additional information to unsubscribe
• Free of Charge: Unsubscribing is completely free (no fees, no costs)
• Clear Visibility: Unsubscribe links are displayed in a readable font size and contrasting color
• Confirmation Page: After unsubscribing, you'll see a confirmation message confirming your opt-out

6.2 Multiple Ways to Unsubscribe

You can opt out of marketing emails by:

• Email Link: Click the "Unsubscribe" link in any marketing email
• Direct Email: Reply to any email with "UNSUBSCRIBE" in the subject line
• Contact Us: Email juan@pvrpose.ai with your request (please include the email address you want removed)

6.3 Timely Processing

CASL requires that unsubscribe requests be honored within 10 business days. We process them immediately:

• Instant Removal: Automated unsubscribe links remove you from our list in real-time
• Manual Requests: Email-based unsubscribe requests are processed within 1 business day (typically within hours)
• Grace Period: You may receive 1-2 emails already in our sending queue, but no new marketing messages will be sent after your unsubscribe is processed

6.4 What Happens After You Unsubscribe

• No More Marketing Emails: You will no longer receive promotional content, newsletters, or sales outreach
• Transactional Emails Still Allowed: If you're a client, you'll still receive essential service-related messages (invoices, project updates, appointment confirmations)
• Consent Record Updated: Your opt-out is recorded in our CRM with a timestamp
• Re-Consent Required: If you want to receive marketing emails again in the future, you'll need to opt in again through our website or by contacting us

6.5 Granular Preferences (Future Enhancement)

While we currently operate on an all-or-nothing unsubscribe basis (you're either subscribed to all marketing or none), we're exploring preference centers that would allow you to choose specific types of content (e.g., only case studies, only webinar invitations). This will be communicated if implemented.

7. Existing Business Relationship (EBR) Exemption

CASL provides an exemption for messages sent within the context of an Existing Business Relationship (EBR). This exemption allows us to send certain marketing messages without express consent, provided specific conditions are met.

7.1 What Qualifies as an EBR?

An EBR exists if, within the past 2 years, you have:

• Purchased Services: Engaged PVRPOSE AI for consulting, automation development, or other professional services
• Entered a Contract: Signed a Service Agreement or Statement of Work
• Accepted Terms: Agreed to our Terms of Service as a condition of receiving services

An EBR also exists if, within the past 6 months, you have:

• Made an Inquiry: Contacted us via email, phone, or contact form to ask about our services
• Applied for Services: Requested a quote, proposal, or discovery call

7.2 Limitations of the EBR Exemption

Even if an EBR exists, CASL still requires that:

• Messages Must Be Relevant: We can only send messages related to the business relationship (e.g., similar services, industry insights relevant to your inquiry)
• Unsubscribe Option Required: All CEMs must include a clear unsubscribe mechanism (same as with express consent)
• Time Limits Apply: The EBR expires 2 years after a purchase or 6 months after an inquiry (unless renewed by a new transaction or inquiry)
• User Can Opt Out: Even with an EBR, you have the right to unsubscribe at any time, and we must honor that request immediately

7.3 Our Approach to EBR

While CASL permits the use of EBR-based implied consent, we prefer to obtain express consent whenever possible because:

• It provides stronger legal protection
• It builds trust and transparency with prospects and clients
• It ensures recipients genuinely want to hear from us
• It reduces the risk of complaints or spam reports

If we do rely on EBR for initial outreach, we always include an opportunity to provide express consent for future marketing communications.

8. Implied vs. Express Consent

Understanding the difference between implied and express consent is crucial for CASL compliance. Here's a side-by-side comparison:

8.1 Best Practice: Convert Implied to Express Consent

Whenever we rely on implied consent for initial outreach, we include a clear call-to-action inviting you to opt in to ongoing marketing emails. This converts implied consent (which expires) to express consent (which does not expire unless you unsubscribe).

9. Penalties for Non-Compliance

CASL violations can result in severe penalties, which is why we take compliance so seriously.

9.1 Regulatory Penalties

• Individuals: Up to $1,000,000 CAD per violation
• Businesses: Up to $10,000,000 CAD per violation
• Multiple Violations: Penalties can apply per message sent, potentially resulting in astronomical fines

9.2 Private Right of Action

While the private right of action (allowing individuals to sue for CASL violations) has been delayed indefinitely, regulatory enforcement remains active. The CRTC, Competition Bureau, and Privacy Commissioner can investigate complaints and impose penalties.

9.3 Reputational Harm

Beyond legal penalties, CASL violations can result in:

• Loss of customer trust and brand reputation
• Email deliverability issues (spam filters, domain blacklisting)
• Negative media coverage and public scrutiny
• Difficulty attracting new clients in compliance-conscious industries

9.4 Why This Matters to PVRPOSE AI

As a business founded by a lawyer specializing in digital compliance, we understand that CASL compliance is not just about avoiding penalties—it's about demonstrating integrity, respecting recipient preferences, and building long-term relationships based on trust and consent. Our clients expect us to uphold the highest standards of legal and ethical conduct, and we deliver on that expectation every day.

10. How to Report CASL Violations

If you believe you have received a Commercial Electronic Message from PVRPOSE AI that violates CASL, we want to hear from you immediately so we can investigate and correct the issue.

10.1 Report to PVRPOSE AI

First Step: Contact Us Directly

Please include:

• A copy or screenshot of the email in question
• The email address that received the message
• Date and time the email was received
• A description of why you believe it violates CASL (e.g., no unsubscribe link, never gave consent, etc.)

Our Response: We will investigate within 1 business day and respond with our findings and corrective actions taken. If we made an error, we will:

• Immediately stop sending you marketing messages (if you haven't already unsubscribed)
• Apologize for the violation
• Explain what went wrong (e.g., database error, manual mistake, etc.)
• Describe the corrective measures taken to prevent future violations

10.2 Report to Government Authorities

If you are not satisfied with our response, or if you prefer to report the violation directly to regulators, you can file a complaint with:

10.3 Our Commitment to Transparency

We take all CASL complaints seriously and view them as opportunities to improve our compliance systems. If a complaint reveals a systematic issue (e.g., a technical error affecting multiple recipients), we will proactively audit our entire email list, notify affected individuals, and implement corrective measures to prevent recurrence.

11. Frequently Asked Questions (FAQ)

Q1: I completed the AI Readiness Assessment but didn't check the marketing consent box. Will you still email me?

Answer: You will receive a one-time email with your assessment results and any resources you requested (e.g., the "5 Signs" PDF). This is a transactional message, not a marketing email, so it's permitted even without marketing consent. You will NOT receive ongoing marketing emails unless you provided express consent by checking the opt-in box or unless an Existing Business Relationship (EBR) applies (e.g., if you made an inquiry within the past 6 months).

Q2: I unsubscribed, but I still received an email. Is that a CASL violation?

Answer: Not necessarily. CASL allows up to 10 business days to process unsubscribe requests. Additionally, you may receive:

• In-Flight Messages: Emails that were already scheduled before your unsubscribe was processed
• Transactional Messages: If you're a client, you'll still receive service-related messages (invoices, project updates, etc.)

If you continue to receive marketing emails more than 10 business days after unsubscribing, please contact us immediately at juan@pvrpose.ai so we can investigate.

Q3: Can I unsubscribe from some emails but not others?

Answer: Currently, our unsubscribe mechanism is all-or-nothing: you're either subscribed to all marketing emails or none. We're exploring preference centers that would allow granular control (e.g., only webinars, only case studies). If implemented, we'll notify subscribers and provide a link to update preferences.

Q4: How long do you keep my consent records?

Answer: CASL requires that consent records be kept for a minimum of 3 years from the date consent was obtained (or from the end of the relationship, whichever is later). We retain consent records for 7 years to align with other legal retention requirements (e.g., tax records, PIPEDA). These records are stored securely and are only accessed for compliance audits or in response to regulatory inquiries.

Q5: I'm located outside Canada. Does CASL apply to me?

Answer: CASL has broad extraterritorial application. It applies if:

• The message is sent from Canada (we are a Canadian business)
• The message is received in Canada (even if you're temporarily in Canada)
• The sender or recipient has a Canadian connection

Even if CASL doesn't apply to you, we still follow best practices for consent and unsubscribe mechanisms to comply with international anti-spam laws (GDPR in the EU, CAN-SPAM in the USA, etc.).

Q6: What if I gave consent years ago but can't remember? Can I still unsubscribe?

Answer: Absolutely. You can unsubscribe at any time, regardless of when or how you provided consent. Your right to opt out is unconditional and always available via the unsubscribe link in every marketing email.

Q7: Do you share my email address with third parties for marketing purposes?

Answer: No. We do not sell, rent, or share your email address with third parties for their marketing purposes. Your consent is specific to PVRPOSE AI, and we honor that. We only share data with service providers (e.g., email marketing platforms, CRM systems) who are contractually bound to use it solely for providing services to us, not for their own marketing. See our Privacy Policy for full details.

12. Contact Information for CASL Questions

If you have questions about this CASL Compliance page, our consent practices, or your rights under CASL, please contact us:

13. Commitment to Continuous Improvement

CASL compliance is not a one-time checkbox—it's an ongoing commitment. As email marketing technology evolves and regulatory guidance develops, we continuously review and enhance our compliance practices.

13.1 Regular Audits

We conduct periodic audits of:

• Email lists and consent records
• Unsubscribe processes and response times
• Email templates (identification info, unsubscribe links)
• Consent form language and checkbox functionality

13.2 Training & Awareness

All individuals acting on behalf of PVRPOSE AI are trained on:

• CASL compliance requirements and consent obligations
• Applicable anti-spam regulations and best practices
• Updates when CASL guidance or enforcement evolves

13.3 Technology Enhancements

We continuously invest in technology to improve compliance:

• Automated consent tracking and timestamping
• Real-time unsubscribe processing
• Email authentication (SPF, DKIM, DMARC) to prevent spoofing
• Preference center development for granular opt-ins (future)

13.4 Feedback Welcome

If you have suggestions for how we can improve our CASL compliance or make our consent and unsubscribe processes clearer, we want to hear from you. Contact us at juan@pvrpose.ai with the subject line "CASL Feedback."

14. Updates to This CASL Compliance Page

We may update this CASL Compliance page periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the updated page on our website
• Notify subscribers via email if the changes materially affect consent or opt-out processes

We encourage you to review this page periodically to stay informed about how we maintain CASL compliance.