TCPA Compliance

StoraGrow takes telephone consumer protection law seriously. We design our outreach programs to comply with the Telephone Consumer Protection Act (TCPA), the FCC's 2026 ruling on AI-generated voice, the CAN-SPAM Act, applicable state-level laws, and carrier requirements (10DLC, brand verification). This page summarizes our compliance program.

1. Express written consent

We do not initiate marketing calls, SMS messages, or AI voice contact without verifiable, documented consent from the recipient. Specifically:

• Consent is captured via opt-in checkboxes that are not pre-checked
• Each consent record includes timestamp, IP address, the exact disclosure language shown, and the form URL
• Consent identifies StoraGrow (or our client, where applicable) by name and lists the specific channels (SMS, automated voice, AI voice) covered
• Consent is not bundled with terms of service or other agreements

2. Calling hours and frequency

We comply with all federal and state-specific calling time restrictions:

• No calls before 8:00 AM or after 9:00 PM in the recipient's local time zone (federal minimum)
• State-specific tighter restrictions are honored where applicable
• Frequency caps prevent harassment — typically no more than 3 attempted contacts per prospect per 30 days

3. Do Not Call (DNC) list scrubbing

Before any outbound contact, all phone numbers are scrubbed against:

• The National Do Not Call Registry
• State-level DNC lists where required
• Internal company DNC lists (anyone who has ever requested no further contact)
• Litigator and known-complainant databases

Scrubbing is performed within 24 hours of contact.

4. Opt-out mechanism

Every outbound contact includes a clear, accessible opt-out:

• SMS: "Reply STOP to unsubscribe" included in every message
• Voice calls: Opt-out instructions provided at the start of every call (FCC requirement)
• Email: Functional unsubscribe link in every message
• AI voice: Recipients can request opt-out by saying "stop," "remove," "unsubscribe," or similar terms; the AI is trained to recognize and honor these requests immediately

Opt-outs are processed within 10 minutes across all our calling and messaging systems.

5. AI voice disclosure

Per the FCC's 2026 ruling on AI-generated voice, all AI voice calls we conduct include:

• Disclosure within the first 30 seconds that the call uses AI-generated voice
• Identification of the calling party (StoraGrow or our client by name)
• Purpose of the call
• Option to be transferred to a human representative on request
• Option to opt out of further contact

6. State-specific compliance

We honor stricter state-level requirements in jurisdictions that have them, including but not limited to:

• Florida (FTSA) — additional consent requirements and stricter penalties
• Washington — explicit prior consent requirements
• Oklahoma (OTSA) — disclosure and opt-out requirements
• California — CCPA/CPRA-aligned data handling for residents

7. SMS compliance

All SMS messaging complies with carrier requirements:

• 10DLC registered campaigns with brand verification
• Approved templates and content
• Toll-free messaging with proper verification where used
• Adherence to CTIA messaging principles and best practices
• Quarterly compliance attestations

8. Data sourcing

We do not source contact data from purchased lead lists of unknown provenance. All phone numbers used in our outreach come from:

• First-party data (our clients' existing customers and prospects with documented consent)
• Compliant third-party data partnerships with verified consent chains
• Public records used in compliance with applicable law (and not for direct outreach without independent consent)

9. Audit trail and recordkeeping

For every outbound contact, we maintain records of:

• Consent capture details (form, timestamp, IP, disclosure shown)
• DNC scrub results prior to contact
• Time, date, and content of each contact attempt
• Recipient responses, opt-outs, and follow-up actions

Records are retained for at least 5 years and available for production in the event of a complaint or audit.

10. Reporting violations

If you believe you've received a call or message from StoraGrow in error or in violation of TCPA, please contact us immediately so we can investigate and remediate:

Email: compliance@storagrow.com
Phone: (833) 253-2343

Include the date and time of contact, the phone number contacted, and any other details you can provide. We will respond within 1 business day.

11. Insurance

StoraGrow maintains errors and omissions insurance covering TCPA-related claims. Certificate of insurance available on request from clients.