Compliance at Scravio
Built for responsible lead generation. Scravio discovers contacts on publicly available, non-gated web pages—no logins, no private areas, no paywall bypassing—and we honor robots.txt. We support standard DMCA notice-and-takedown, and we give you the tools (source URLs, suppression lists, validation) to run outreach that aligns with email and privacy rules in your region.
Key frameworks we align with (overview)
- GDPR/UK GDPR & PECR (direct marketing). You must choose a lawful basis and follow PECR’s direct-marketing rules. Note: under PECR, corporate subscribers can usually be emailed without prior consent, but GDPR still applies to any personal data and people have an absolute right to object to direct marketing—when they object, you must stop. We help by attaching source URLs and supporting suppression/removal.
- CAN-SPAM (U.S.). Your messages must include accurate headers, honest subject lines, a physical postal address, and a working unsubscribe that you honor promptly. Our exports and validation help you comply.
- CASL (Canada). Most commercial emails require express consent (with limited implied-consent exceptions). Every CEM needs identification and a no-cost unsubscribe. Use our suppression lists to maintain hygiene.
- California privacy (CCPA/CPRA). We provide channels to honor access/deletion and opt-out of sale/share, and we recognize Global Privacy Control (GPC) signals where required. We monitor CPPA rulemaking (including the Accessible Deletion Mechanism / “Delete Act” work) and will adjust if obligations expand. We’re SaaS—not a data broker—but if your business model qualifies, you must register and follow CPPA rules.
Platform terms & access controls
We work with public pages only and aim to be respectful of sites’ controls (robots.txt, rate limits). Courts have narrowed the CFAA to focus on circumvention, not merely visiting publicly accessible pages. However, platform terms may still prohibit automated collection even on public pages—for example, LinkedIn’s user agreement bans scraping and bots—so you’re responsible for following third-party terms. We also reserve the right to disable discovery modes that could create ToS risk.
Transparency & redress
- DMCA: We run a notice-and-takedown process and maintain a designated agent registered with the U.S. Copyright Office.
- Data rights: We accept access/erasure/objection requests and provide suppression controls so you can honor opt-outs and the right to object to direct marketing.
This page is for product transparency—not legal advice. Laws and platform rules evolve; please consult counsel for your use case.