Zexa Messaging Compliance: Policy and Requirements

​

Consent and Opt-In

• Freely given — not bundled into unrelated terms or made a condition of a service
• Specific — clearly indicating that the contact agrees to receive messages from your brand via the relevant channel
• Documented — you must be able to demonstrate when, where, and how consent was collected if requested

​

Opt-Out Handling

• SMS — include Responda STOP para cancelar (or equivalent) in your message text. Zexa automatically processes STOP replies and adds the number to your suppression list.
• Email — Zexa inserts a compliant unsubscribe link in every marketing email. When a recipient clicks it, they are removed from future sends immediately.
• WhatsApp and other channels — provide clear instructions for how a recipient can stop receiving messages from your account.

​

Prohibited Content

• Spam — unsolicited bulk messages sent without consent
• Phishing — messages designed to trick recipients into revealing credentials, financial details, or personal information
• Fraudulent content — false claims, deceptive offers, or misleading commercial communications
• Malware or malicious links — any content intended to compromise the recipient’s device or data
• Illegal material — content that violates Angolan law or the laws of the recipient’s country
• Hate speech or harassment — content that targets individuals or groups based on protected characteristics
• Impersonation — messages pretending to originate from a bank, government authority, law enforcement body, or third-party brand without explicit written authorisation

​

Sender ID Rules

• Using a Sender ID that resembles the name of a bank, financial institution, government ministry, law enforcement agency, or any well-known brand you are not authorised to represent
• Registering a Sender ID for the purpose of deceiving recipients about the true origin of a message
• Using another business’s registered trademark as your Sender ID without documented, written authorisation

​

Data Protection (Angola)

• Have a lawful basis for collecting, storing, and using your recipients’ personal data (consent, contract, legitimate interest, or legal obligation)
• Provide recipients with a privacy notice at the point of data collection, explaining how their data will be used
• Honour recipients’ rights under Lei n.º 22/11, including the rights to:
  • Access — obtain a copy of the data you hold about them
  • Correction — have inaccurate data corrected
  • Deletion — have their data erased where there is no longer a legal basis for holding it
  • Portability — receive their data in a structured, machine-readable format
• Implement appropriate technical and organisational security measures to protect recipient data
• Not transfer personal data outside Angola except where adequate safeguards are in place

​

Message Content Rules

• Be accurate and not misleading — do not make false claims about your product, service, or identity
• Include clear sender identification — recipients must be able to identify who sent the message
• Respect reasonable sending hours — avoid sending marketing messages late at night or in the early morning in the recipient’s local time zone
• Honour opt-outs within 24 hours — once a contact opts out, stop sending to them within 24 hours at the latest

​

Consequences of Non-Compliance

• Warning — for minor or first-time violations, we may issue a written warning and require corrective action
• Campaign suspension — specific campaigns may be paused pending review
• Account suspension — accounts showing systemic or serious violations may be suspended with immediate effect
• Account termination — repeated or severe violations may result in permanent termination without refund of remaining credits
• Regulatory referral — Zexa cooperates with Angolan regulatory and law enforcement authorities and may report violations where required by law