Opt-in & opt-out

Consent is a lifecycle, not a one-time checkbox. This page is the overview; see Opt-in collection and Opt-out handling for the detail.

Collect opt-in

You must collect valid customer opt-in before sending business-initiated messages. Callduck logs the source and timestamp of each opt-in in a ConsentLog entry, and tracks a per-contact opt-in status (UNKNOWN, OPTED_IN, OPTED_OUT).

Honor opt-out

When a contact opts out — including replying STOP — Callduck flips their status to OPTED_OUT, records an OptOutLog entry, and suppresses them from future business-initiated sends.

Allow re-opt-in

A contact who later opts in again (for example by messaging you) can be returned to OPTED_IN, with a fresh consent record.

> Callduck automates suppression and keeps the audit trail, but you are responsible for honoring opt-outs everywhere and for complying with the WhatsApp Business Messaging Policy and laws like Saudi PDPL.