8 Total
2 High severity
4 Medium severity
2 Low severity
Summary

Klaviyo's Acceptable Use Policy sets out the rules for how businesses may use Klaviyo's email, SMS, and messaging platform, including what types of content, contact lists, and industries are permitted. The policy prohibits the use of purchased, rented, or scraped contact lists and bars messaging to recipients who have not explicitly opted in, with violations potentially resulting in account suspension or termination. The policy also identifies specific restricted industries, including cannabis, adult content, payday lending, firearms, and multi-level marketing, which require explicit written approval from Klaviyo before the platform may be used.

Technical / Legal Breakdown

This document is Klaviyo's Acceptable Use Policy (AUP), which governs how customers and users may use Klaviyo's marketing automation platform, including its email, SMS, WhatsApp, and related messaging services, and is incorporated by reference into Klaviyo's broader Terms of Service. The agreement states that users are prohibited from sending unsolicited messages, using purchased or rented contact lists, transmitting content that is deceptive, harassing, or illegal, and from using the platform for categories including adult content, firearms, cannabis, payday lending, and multi-level marketing without explicit written permission; the terms also authorize Klaviyo to suspend or terminate accounts that violate the policy, with or without notice. The policy's enumerated list of restricted content categories and industries creates operationally significant access conditions for businesses in regulated or sensitive verticals, and the terms assert Klaviyo's right to make final determinations on compliance, which may limit user recourse in account enforcement decisions. The AUP engages CAN-SPAM, TCPA, and CASL for messaging compliance, as well as GDPR and CCPA for data handling obligations referenced in related policies; enforcement exposure varies by jurisdiction, particularly for SMS marketing practices subject to TCPA in the United States and ePrivacy Directive requirements in the EU. Businesses operating in restricted categories or relying on third-party contact lists should evaluate their onboarding and list acquisition practices against the explicit prohibitions stated in this document.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial
High — 2 provisions
Medium — 4 provisions
Low — 2 provisions

Monitoring

Klaviyo has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Prohibition on Purchased or Rented Contact Lists and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured May 20, 2026 12:15 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000891
Version ID CA-V-002790
SHA-256 6c04452c039cf6b56bb779c332edb6f9d0039bd0d252a295a487b2764a91ae97
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans