Marketing Communications & Consent Policy

1. Our own marketing (controller)

1. Consent-first. Marketing email/SMS goes only to people who opted in, or existing customers for closely related services under the soft opt-in — with a clear opt-out at collection and in every message (PECR).
2. Tokenised unsubscribe that works instantly — the same mechanism the platform ships. Suppression entries are permanent (POL-10).
3. Business identity is never hidden: sender name, business identity and a real contact route in every campaign.
4. Cold B2B outreach (corporate emails, e.g. a lettings group's office address) is permitted, honest, individually written or lightly templated, low-volume, and stops on first "no" — which goes on the suppression list.
5. Claims discipline: module counts, client results and case studies quoted in marketing must be true at time of sending (the same counts audit.mts enforces in the docs).

2. The platform's marketing features (what tenants get)

BizOS ships consent-first campaigns with tokenised unsubscribe by design. Tenants are the controllers of their own lists; JonnyAI:

• keeps the consent and unsubscribe machinery non-optional (a tenant cannot send campaigns to non-consented contacts through the product),
• acts on abuse reports (spam complaints via Resend) as a P2 incident, suspending a tenant's sending if they burn the shared sending reputation.

3. Social and content

Organic content (walkthrough videos, build-in-public posts) must not show real tenant data — demo workspaces only (POL-03 §3). Paid ads land on honest pages; pricing shown matches the live /pricing page.

4. Little Jonny's

Event marketing (flyers, socials, local ads) follows the same rules; customer phone/email lists from bookings are used for marketing only with opt-in, and allergen/dietary information collected for events is never reused for marketing at all.