Legal
TCPA & Consent Practices
Last updated October 2, 2026 · Template — have counsel review before launch
Every lead we sell carries a timestamped record of how that consumer agreed to be contacted. This page explains what our disclosures say, what we record, how we handle opt-outs, and where our part ends and the buyer’s begins. It describes practices. It doesn’t promise any legal outcome.
1. How consent is captured
Consumers give consent on the lead forms that feed our programs, either by checking a box that starts unchecked or by clicking a submit button with the disclosure right next to it. We hold partner forms that supply leads to the same standard.
Federal rules require prior express written consent for telemarketing calls and texts made with an autodialer or an artificial or prerecorded voice, including AI voice. Our disclosures are written with that standard in mind, and under the federal E-SIGN Act a checkbox or a click can serve as the signature. Whether consent holds up in a particular case is decided by the facts and the court.
If we contact a consumer to schedule or confirm a booked appointment, the disclosure names us as well, and everything on this page applies to our own calls and texts.
Each disclosure does the following:
- Names the company that will contact the consumer
- Lists the channels: calls and text messages, including those made with automated technology and prerecorded, artificial or AI-generated voice
- Applies to the phone number the consumer entered
- Says consent isn’t a condition of any purchase
- Explains how to opt out, including replying STOP to any text
- Links to the privacy policy of the business running the form, not to a long list of “marketing partners”
2. The consent record on every lead
Every lead carries a timestamped consent record (certificate), and the disclosure it captures names your company. Ask for it any time, for one lead or a whole batch.
We keep consent records for at least four years after delivery, and longer if a claim, investigation or legal hold requires it. Federal TCPA claims generally can be brought up to four years after the call or text, not after delivery, so store each record with your own call and text logs and keep both for as long as a claim about your outreach could still be brought.
A certificate records the moment consent was given, not who called later or when, so keep your own call and text records alongside it. Each certificate shows:
- The date and time of the submission
- The page where consent was given
- The exact disclosure text shown to the consumer
- The phone number the consumer entered
- The IP address and browser and device details
3. Do Not Call scrubbing
Every lead is scrubbed against the National Do Not Call Registry, and its phone number is validated before delivery. Each lead is also duplicate-checked against leads already sent to you.
Federal rules expect callers to check the Registry within 31 days before a call. If you contact a lead more than 31 days after delivery, scrub it again first.
Our scrub covers the National Registry. Before you dial, scrub against state Do Not Call lists where they apply and against your own internal list.
4. Opt-outs and revoked consent
A consumer can revoke consent by any reasonable means: replying STOP, asking on a call, sending an email, or writing to us or to you. Under FCC rules in effect since April 11, 2025, revocation must be honored within 10 business days. Replies such as STOP, QUIT, END, REVOKE, OPT OUT, CANCEL and UNSUBSCRIBE count, and one confirmation text with no marketing in it is allowed.
When a consumer tells us to stop, we add the number to our do-not-contact list and tell the buyer that received the lead. When a consumer tells you, honor it within the same 10 business days and let us know so we can suppress the number.
A separate FCC “revoke-all” provision, which would make one opt-out apply to all of a caller’s robocalls and robotexts, has been delayed to January 31, 2027 and may change before then.
5. Calling and texting windows
Our default guidance is to contact leads between 8am and 8pm in the recipient’s local time. Federal rules allow telemarketing calls only between 8am and 9pm local time, but several states are stricter, so the narrower window is the safer default.
This is general guidance as of October 2026, not a full list of state rules. Confirm current requirements with your counsel.
- Florida, Oklahoma and Maryland: 8am–8pm, and no more than 3 sales calls per 24 hours on the same subject. Florida counts texts as sales calls.
- Oregon (effective January 1, 2026): 8am–8pm and no more than 3 contacts per day, texts included
- Texas: telephone solicitations are limited to 9am–9pm Monday–Saturday and noon–9pm Sunday, and SB 140 (effective September 1, 2025) brought marketing texts under the same law. Start Texas calls and texts no earlier than 9am, or noon on Sunday. Sellers may need to register with the Texas Secretary of State unless exempt.
- Always go by the recipient’s time zone, not your office’s
6. Texts get the same treatment
We apply the same consent, opt-out and timing practices to texts as to calls.
In July 2026 the Seventh Circuit held that texts aren’t “telephone calls” for the TCPA’s private Do Not Call claim. That ruling binds only Illinois, Indiana and Wisconsin. It doesn’t touch autodialer or prerecorded-voice claims, and it doesn’t change state laws that cover texts. We don’t treat it as a reason to text differently.
7. The FCC one-to-one rule
In December 2023 the FCC adopted a “one-to-one” rule that would have required consent to name a single seller. On January 24, 2025, the U.S. Court of Appeals for the Eleventh Circuit vacated it in Insurance Marketing Coalition v. FCC. The FCC then restored its earlier consent definition, effective August 29, 2025. As of October 2026, there is no federal one-to-one consent requirement.
We name the buyer anyway. Consent still has to clearly authorize the seller, and a disclosure that names one company is easier to prove and easier for a consumer to understand. That’s our own standard, not a claim that the vacated rule applies.
8. What buyers are responsible for
We capture consent, keep the record, validate the phone number and scrub the National Registry. Compliance also depends on how each buyer dials, texts and markets, so we don’t label any lead as compliant on its own. As a buyer, you’re responsible for the following:
- Contact each lead only about the inquiry they made, on the channels the disclosure covers
- Don’t resell, share or transfer leads. The consent covers only the companies named in the disclosure.
- Follow the calling windows and frequency limits for the recipient’s state
- Scrub state and internal Do Not Call lists, and re-scrub the National Registry if you call more than 31 days after delivery
- Honor opt-outs within 10 business days and tell us about them
- Register as a telephone seller where state law requires it
- Keep your own call and text records with each lead’s consent record
- Keep scripts, texts and ads truthful: no implied government or utility affiliation, no savings promises, and for clinics, no treatment or outcome claims
9. Review date and contact
Last reviewed October 2026. This page is general information, not legal advice. It describes our practices and summarizes federal and state rules as of that date, and those rules change. Talk to your own counsel about your outreach.
To request a consent record, report an opt-out or ask a question, email hello@buysolarleads.co. Consumers who want contact to stop can reply STOP to any text or email us the phone number to remove.