> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zexa.ao/llms.txt
> Use this file to discover all available pages before exploring further.
# Zexa Messaging Compliance: Policy and Requirements
> Understand Zexa's compliance rules for messaging consent, opt-out handling, prohibited content, Sender IDs, and Angolan data protection law (Lei n.º 22/11).
Zexa provides the infrastructure for business messaging, but **you — the customer — are responsible for complying with all applicable laws and regulations** when using the platform. This page covers the key compliance requirements you must follow, including consent rules, opt-out handling, prohibited content, Sender ID obligations, and Angolan data protection law. Non-compliance may result in account suspension, termination, and legal liability. If you have questions about your specific legal obligations, consult a qualified legal advisor in your jurisdiction.
***
## Consent and Opt-In
You must obtain **prior, documented consent** from every recipient before sending marketing or promotional messages. Consent must be:
* **Freely given** — not bundled into unrelated terms or made a condition of a service
* **Specific** — clearly indicating that the contact agrees to receive messages from your brand via the relevant channel
* **Documented** — you must be able to demonstrate when, where, and how consent was collected if requested
**Transactional messages** — such as order confirmations, one-time passwords (OTPs), and account security alerts — may be sent without explicit marketing consent, but only where a **legitimate business relationship** already exists with the recipient.
Never import contacts into Zexa or add them to a send list without verified consent. Sending to contacts who have not opted in violates our [Terms of Use](https://app.zexa.ao/terms) and Angolan electronic communications law (Lei n.º 23/11), and may result in immediate account suspension.
***
## Opt-Out Handling
Every marketing message you send must include a **clear and easy opt-out mechanism**. Recipients must be able to withdraw consent at any time without penalty.
* **SMS** — include `Responda STOP para cancelar` (or equivalent) in your message text. Zexa automatically processes `STOP` replies and adds the number to your suppression list.
* **Email** — Zexa inserts a compliant unsubscribe link in every marketing email. When a recipient clicks it, they are removed from future sends immediately.
* **WhatsApp and other channels** — provide clear instructions for how a recipient can stop receiving messages from your account.
Zexa automatically processes opt-outs and prevents future sends to suppressed contacts. You can view your suppression list under **Contacts > Opt-Outs** in the dashboard.
You must **not** send further marketing messages to any contact who has opted out, even if you later collect a new form of consent through a different channel, unless the contact explicitly re-opts in for that channel.
***
## Prohibited Content
You must not use Zexa to send messages containing any of the following:
* **Spam** — unsolicited bulk messages sent without consent
* **Phishing** — messages designed to trick recipients into revealing credentials, financial details, or personal information
* **Fraudulent content** — false claims, deceptive offers, or misleading commercial communications
* **Malware or malicious links** — any content intended to compromise the recipient's device or data
* **Illegal material** — content that violates Angolan law or the laws of the recipient's country
* **Hate speech or harassment** — content that targets individuals or groups based on protected characteristics
* **Impersonation** — messages pretending to originate from a bank, government authority, law enforcement body, or third-party brand without explicit written authorisation
Sending prohibited content will result in **immediate account suspension** and may be reported to the relevant Angolan authorities. Zexa cooperates fully with lawful requests from regulatory bodies.
For the full list of prohibited uses, review our [Terms of Use](https://app.zexa.ao/terms).
***
## Sender ID Rules
Your Sender ID must accurately reflect **your own registered brand**. The following are strictly prohibited:
* Using a Sender ID that resembles the name of a bank, financial institution, government ministry, law enforcement agency, or any well-known brand you are not authorised to represent
* Registering a Sender ID for the purpose of deceiving recipients about the true origin of a message
* Using another business's registered trademark as your Sender ID without documented, written authorisation
Violations of Sender ID rules may result in **immediate account suspension** and referral to Angolan authorities for investigation under Lei n.º 23/11 on electronic communications and any applicable consumer protection legislation.
Use your full brand name or a widely recognised abbreviation of it. If you are unsure whether your Sender ID is permissible, contact [suporte@zexa.ao](mailto:suporte@zexa.ao) before submitting it for review.
***
## Data Protection (Angola)
Zexa operates under **Lei n.º 22/11** — Angola's Personal Data Protection Law — and takes its obligations as a Data Processor seriously. As a Zexa customer, you must understand your own role and responsibilities in the data processing chain.
| Role | Party | Responsibilities |
| ------------------- | ------------------ | ------------------------------------------------------------------------------------ |
| **Data Controller** | You (the customer) | Determine the purpose and means of processing recipient data |
| **Data Processor** | Zexa | Process data on your behalf, in accordance with your instructions and applicable law |
As the Data Controller, you must:
* Have a **lawful basis** for collecting, storing, and using your recipients' personal data (consent, contract, legitimate interest, or legal obligation)
* Provide recipients with a **privacy notice** at the point of data collection, explaining how their data will be used
* Honour recipients' rights under Lei n.º 22/11, including the rights to:
* **Access** — obtain a copy of the data you hold about them
* **Correction** — have inaccurate data corrected
* **Deletion** — have their data erased where there is no longer a legal basis for holding it
* **Portability** — receive their data in a structured, machine-readable format
* Implement appropriate **technical and organisational security measures** to protect recipient data
* Not transfer personal data outside Angola except where adequate safeguards are in place
For data protection enquiries, including requests to exercise data subject rights, contact [privacidade@zexa.ao](mailto:privacidade@zexa.ao).
***
## Message Content Rules
Regardless of channel, every message you send through Zexa must:
* Be **accurate and not misleading** — do not make false claims about your product, service, or identity
* Include clear **sender identification** — recipients must be able to identify who sent the message
* Respect **reasonable sending hours** — avoid sending marketing messages late at night or in the early morning in the recipient's local time zone
* **Honour opt-outs within 24 hours** — once a contact opts out, stop sending to them within 24 hours at the latest
Failure to follow these rules can result in high complaint rates, carrier filtering of your messages, and enforcement action by Zexa or regulatory authorities.
***
## Consequences of Non-Compliance
Zexa may take the following actions in response to Terms of Use violations:
* **Warning** — for minor or first-time violations, we may issue a written warning and require corrective action
* **Campaign suspension** — specific campaigns may be paused pending review
* **Account suspension** — accounts showing systemic or serious violations may be suspended with immediate effect
* **Account termination** — repeated or severe violations may result in permanent termination without refund of remaining credits
* **Regulatory referral** — Zexa cooperates with Angolan regulatory and law enforcement authorities and may report violations where required by law
**You are solely liable** for the content of messages sent through your Zexa account and for any legal claims, fines, or penalties arising from your messaging activity.
If you believe your account was suspended in error, email [suporte@zexa.ao](mailto:suporte@zexa.ao) with a description of your messaging activity and the steps you have taken to ensure compliance. Our team will review your appeal within 2 business days.
This page provides general guidance only and does not constitute legal advice. If you have specific questions about your compliance obligations under Angolan law or the laws of other jurisdictions, consult a qualified legal advisor.
***
Read the full Zexa Terms of Use, including acceptable use policy and billing terms.
Review how Zexa collects, uses, and protects personal data under Lei n.º 22/11.
Need help? Visit our troubleshooting guide or reach out to [suporte@zexa.ao](mailto:suporte@zexa.ao).