Skip to main content
AgentSDR sends email, LinkedIn messages and invitations, and WhatsApp messages on your behalf, and records calls. You run it, so you decide who it contacts and how. That makes the rules below yours to follow. This page is not legal advice; when in doubt, ask a lawyer who knows the countries you sell into.

​
Platform terms

  • LinkedIn. LinkedIn’s User Agreement does not allow automated access or messaging by third-party tools. Using any automation, AgentSDR included, can get an account restricted or banned. AgentSDR’s limits (a few dozen invitations a day, random gaps, working hours only, pausing when LinkedIn pushes back) reduce that risk; they do not remove it.
  • WhatsApp. WhatsApp’s terms and Business policies forbid unsolicited bulk messaging, and numbers that people report get banned. AgentSDR’s guards (no new chats for 24 hours after linking a number, 25 new chats a day, 10 seconds between sends, never to Do Not Contact) are a floor, not permission.
  • Unipile and Google Workspace. Your use also falls under their terms, and under your own organization’s email policies.

​
Email and privacy law

Cold outreach is regulated differently in each country. Among others:
  • United States (CAN-SPAM): identify yourself truthfully, include a working opt-out and a physical address, and honour opt-outs promptly.
  • European Union and United Kingdom (GDPR, ePrivacy, PECR): you need a lawful basis to process someone’s data and, in many cases, prior consent to email individuals. You must tell people where you got their data, and delete it when asked.
  • Canada (CASL): commercial email generally requires consent.
AgentSDR helps with the mechanics: every campaign email carries a one-click unsubscribe, unsubscribes and bounces are suppressed across campaigns, and Do Not Contact applies to every channel. It cannot decide whether you are allowed to contact someone in the first place.

​
Call recording

Many places require the consent of everyone on a call before it is recorded, and some require you to announce it. Tell people when a call is recorded.

​
Your data responsibilities

You are the controller of the personal data you import and enrich. Keep your database and its backups secure, limit who can sign in, keep INTEGRATION_CREDENTIALS_KEY secret, and delete people’s data when you no longer need it or when they ask.

​
No warranty

AgentSDR is provided under the AGPL-3.0 without warranty of any kind. Its authors are not responsible for how it is used.