What should a maker do to keep waitlist emails compliant with US anti-spam rules?

CAN-SPAM applies to your waitlist, not just your newsletter

The federal CAN-SPAM Act covers commercial email, and an email about a product you plan to sell is commercial even if the product does not exist yet. The core obligations are simple: no misleading header or sender information, no deceptive subject lines, a valid physical postal address in every message, a clear way to opt out, and honoring that opt-out promptly (the rule allows ten business days, but doing it instantly is the norm). Notably, US law does not require opt-in consent, but the inbox providers effectively do, as covered below.

Transactional messages, like a signup confirmation, get lighter treatment, but a "confirmation" that also pitches the product and asks for shares is a mixed message and should carry the full set of disclosures. The safe approach is to put your address and an unsubscribe link in everything, including the welcome email. It costs nothing and removes any argument about categories. This article is general information, not legal advice, so talk to a lawyer about your specific situation.

Keep reading: Why a Plain Waitlist Underperforms, Turning Signups Into Referrers, Building Pre Launch Momentum. See how RefVite helps you pre-launch referral leaderboard and waitlist for makers.

Referral invites are where waitlists get into trouble

The tempting design is "enter your friend's email and we will invite them for you." That makes you the sender of an unsolicited commercial email to someone who never heard of you, and when a reward is attached, regulators have signaled that the company offering the reward can be held responsible for the message. The friend also never consented, which means your first contact with a prospect is a spam complaint waiting to happen. Related: How do you write waitlist page copy that converts visitors who have never heard of you?

The better design is a share link the referrer sends through their own channels: text, social, a message in their team chat. The friend arrives on your page and chooses to sign up. Your first email to them is one they asked for. This is also why referral tools built for waitlists lean on unique links and leaderboards rather than address-book uploads. The link model is cleaner legally and produces signups who actually want in. Related: Which waitlist metrics actually predict a strong launch for a small software team?

Consent, records, and the people who leave

Keep a record of when and where each person signed up, including the page and the referrer if any. If someone later claims they never subscribed, that record is your answer. Double opt-in (a confirmation click) strengthens the record and filters out typos and fake entries, which also protects your referral leaderboard from junk. The trade-off is a small drop in confirmed signups. For most makers it is worth it.

When someone unsubscribes, remove them from every pre-launch list, not just the one they clicked from, and do not re-add them at launch because "that is a different list." If you run a separate transactional flow for access invites, make sure an unsubscribe from marketing does not accidentally stop the invite they explicitly signed up for, and explain the difference in your unsubscribe confirmation. Related: When should a maker choose an invite-only beta over an open public waitlist?

Deliverability rules that function like law

Major inbox providers now require bulk senders to authenticate their sending domain (SPF, DKIM, and a DMARC policy), to support one-click unsubscribe headers, and to keep spam complaint rates very low. Miss those and your emails go to spam regardless of what the statute says. Set authentication up on the domain before the first welcome email goes out, and send from a subdomain if you want to protect your main domain's reputation. Related: How often should a small team email its waitlist in the months before launch?

Complaint rate is the number to protect. Sending to a list that has not heard from you in months, sending more often than you promised, or emailing people who never confirmed all push it up. Warm up gradually if the list is large, remove addresses that bounce, and make leaving easy. A smaller list that lands in the inbox beats a bigger one that does not.