Neobiz Messaging Policy

This is a policy, not a negotiated agreement. It changes when a messaging platform changes its template rules or a carrier changes its registration requirements — at policy speed, not contract speed. Neobiz may update it on notice, and the current version applies.

Applies to every market. Rather than maintain a separate policy per country, this one is set to the strictest rule among the markets Neobiz serves. Comply with it and you comply everywhere we operate. Where a market imposes something genuinely local — a do-not-contact registry, a timing restriction — §8 puts that obligation on you.

Version: 2026-07-1 · Effective date: 27 July 2026 · Referenced by the Indonesian and global Terms.

1. The principle

You decide who is contacted, what is sent, and in which market. Neobiz transmits on your instruction. You are the data controller for your members and the sender of record for your campaigns.

This policy exists because the consequences of getting it wrong are not evenly shared: a spam complaint or a regulatory finding against your campaign lands on Neobiz's sender reputation, carrier registrations and platform accounts — and through those, on every other merchant.

2. Consent

2.1 Prior express opt-in. Obtain express opt-in before sending any marketing or promotional message on any channel. This is stricter than some markets require — a few permit opt-out for email — and it is deliberate: one standard is workable across every market we serve, and opt-in is the standard that survives everywhere.

2.2 Service messages. Messages strictly necessary to fulfil something the member asked for — a booking confirmation, an order update, a payment receipt, a reminder for an appointment they made — are not marketing and do not require separate marketing consent. Do not use a service message as a wrapper for promotional content.

2.3 Consent must be provable. Record, for every member and every channel: when consent was given, how it was captured, and what it covered. You must be able to produce this on written request. Neobiz records consent provenance and channel flags for members created or updated through the Service, but you are responsible for the accuracy of what you import and for consent obtained outside the Service.

2.4 Consent is scope-bound. Consent covers the subject matter it was given for. A member who opted in to booking reminders has not opted in to a promotional broadcast.

2.5 Consent is non-transferable. Do not buy, sell, rent, share or otherwise acquire consent. Purchased, rented, scraped or appended lists are prohibited outright, however they are described by the seller.

2.6 Inbound messages are narrow consent. A member-initiated message authorises a direct reply on that subject — not recurring messaging, and not marketing. This applies to scan-to-chat: a member scanning a table QR code has authorised the ordering conversation, not subsequent campaigns.

2.7 Consent cannot be a condition of service. Do not require marketing consent in exchange for service, access, a booking, or a discount that is not genuinely optional.

2.8 Stale consent. Re-confirm before messaging a member who has had no interaction with you for an extended period, or where the subject matter has materially changed.

3. Opt-out

3.1 Every message. Every marketing message must carry a working opt-out — a recognised keyword reply on messaging channels, a working unsubscribe link in email.

3.2 Honour it promptly. Stop on receipt. One final confirmation message is permitted; nothing further. Do not require the member to log in, give a reason, provide additional information, or navigate more than a single step to opt out.

3.3 Across channels and lists. An opt-out applies to marketing on that channel across all of your lists, not just the campaign it came from.

3.4 Off-platform requests count. Honour opt-out requests however they reach you — in person, by phone, by email, or on another platform.

3.5 Re-entry requires fresh consent. A member who has opted out may only be messaged again after new express opt-in.

3.6 The duty survives. The obligation to honour an opt-out continues after your account is suspended, closed or terminated.

4. Sender identity and content

4.1 Identify yourself. Every message must make clear which business is sending it. Do not use a misleading sender name, subject line, or preview text.

4.2 Contact details. Marketing email must include a valid physical postal address and a working reply path.

4.3 Accuracy. You are responsible for the accuracy of prices, offers, availability, allergen and safety information, and any claim you make.

4.4 Prohibited content. Do not send, and do not link to: unlawful goods or services; sexually explicit material; hate speech, harassment or incitement; content exploiting or endangering children; regulated categories you are not licensed for (including alcohol, tobacco, vaping, cannabis, firearms, prescription medicines, gambling and financial products) or that you are licensed for but cannot verify the recipient's eligibility to receive; multi-level marketing, get-rich-quick and work-from-home schemes; loan, credit-repair and debt-elimination offers; counterfeit goods; malware, phishing or deceptive links; medical, legal or financial advice presented as authoritative; and content that infringes another party's rights.

4.5 No filter evasion. Do not deliberately misspell, obfuscate, or use look-alike characters to defeat content filtering. Do not use public link shorteners that mask the destination.

4.6 No snowshoeing. Do not spread the same or similar traffic across multiple numbers, sender IDs, domains or accounts to dilute complaint rates or evade limits. Do not use a transactional sender for coordinated marketing.

5. Data that must never enter a message channel

Do not send, request, or invite a member to send, through any Messaging Channel:

• payment card numbers, PANs, CVV/CVC/CID values or PINs;
• bank account credentials or full financial account numbers;
• government identifiers (national ID, passport, tax ID, driving licence);
• health or medical information about an identifiable person;
• passwords, one-time codes for other services, or authentication secrets.

This is not a formality. The common failure is a merchant asking a customer to send card details over chat to secure a booking deposit. Use the Service's payment link instead — it exists for this. A message channel is not a secure payment surface, and messages are retained, logged and visible to your staff.

6. Channel rules that flow through to you

6.1 Platform and carrier rules apply directly. Messaging platforms, carriers and business solution providers impose their own rules on template approval, opt-in evidence, sender registration, message categories, throughput and quality. Those rules apply to your traffic and may change without notice to you.

6.2 Registration is attempted, not guaranteed. Where a channel requires sender or number registration, you must provide truthful business information. Neobiz will submit and pursue registration but cannot guarantee approval. A registered number or sender ID is bound to its declared use case, is not portable to another provider, and may be reclaimed if unused or if registration lapses.

6.3 Delivery is not guaranteed. Delivery depends on the platform, the carrier, the recipient's device and settings, and quality ratings that your own traffic influences.

6.4 Quality affects everyone. Blocks, reports and complaints degrade the sending quality rating, which reduces throughput. Where your traffic is the cause, Neobiz may rate-limit or suspend your messaging to protect other merchants.

6.5 You reimburse pass-through penalties. If a platform, carrier, regulator or network imposes a fee, fine or penalty on Neobiz because of your messages, you will reimburse it.

7. Volume, throttling and enforcement

7.1 Neobiz may apply rate limits and sending quotas, and may queue, delay or reject traffic to protect the Service.

7.2 Neobiz may monitor, and is not obliged to monitor. Neobiz may reject, block or remove messages, and is not obliged to store or retain message content.

7.3 Enforcement is graduated where it can be. Depending on severity: notice and a chance to correct; rate limiting; suspension of a channel; suspension of messaging; termination. Serious or repeated breaches, and anything a platform, carrier or regulator requires us to act on, may be immediate.

7.4 Report problems. Tell us promptly at hello@neobiz.id if you become aware of misuse of your account, a complaint pattern, or a regulatory contact about your messaging.

8. Your local obligations

This policy is set to the strictest standard we are aware of, but it cannot capture every local rule. You are responsible for compliance in each market you message into, including:

• do-not-call / do-not-contact registry screening where the market operates one;
• time-of-day restrictions on marketing contact, measured in the recipient's local time;
• sender registration or licensing requirements specific to that market;
• sector rules applying to your industry;
• any requirement that is stricter than this policy — in which case the stricter one governs.

You choose the audience and the market. Where a local requirement conflicts with this policy, follow whichever is stricter and tell us.

9. Changes

Neobiz may update this policy. Material changes will be notified in-product or by email. The version above identifies the current policy; continued sending after the effective date is acceptance.

Questions: hello@neobiz.id · PT Neobiz Global Technology.