Thread

Grammarly will send unhinged messages to all your users if you try to cancel

394 points · 104 comments · ksec

pjmlp · 1790146698 · focus · HN ↗
For those in Europe, this kind of behaviour usually is taken care by consumer protection agencies, fill in a complaint /report them, in you jurisdiction.
1. alexaholic · 1790147887 · focus · HN ↗
  Consumer protection applies to individual consumers, not businesses. OP looks like a business.
  1. alibarber · 1790149684 · focus · HN ↗
    Yes - unfortunately this looks to be completely irrelevant to consumer protection.
    "A contractor of my employer asked me to contact another member of my organisation to persuade them to do something commercially advantageous for them" - at no point is anyone here a consumer.
    Business emails are subject to fairly different rules by the looks of it: <a href="https://tietosuoja.fi/en/faq-direct-marketing" rel="nofollow">https://tietosuoja.fi/en/faq-direct-marketing ("Can a person working in a company be sent direct electronic marketing") - it appears there's a fair bit of an exception that doesn't require consent.
    mjmas · 1790150830 · focus · HN ↗
    Here in Australia unless that particular user that received the emails gave consent to receive marketing emails (and the emails have identification + unsubscribe) it would be violating our Spam act.
    <a href="https://www.acma.gov.au/publications/2024-07/guide/consumer-consent-expectations-businesses-conducting-telemarketing-and-e-marketing" rel="nofollow">https://www.acma.gov.au/publications/2024-07/guide/consumer-...
    rrr_oh_man · 1790168379 · focus · HN ↗
    What happens if it gets ignored? I get blasted with email drips everywhere I sign up.
    mitxela · 1790163462 · focus · HN ↗
    The principle here, for anyone confused, is that a consumer has very weak negotiating power against a business and therefore needs basic rights, but when two businesses negotiate, it's a level playing field and if they wanted those rights they would've been easily able to get them.
    buzer · 1790231103 · focus · HN ↗
    According to <a href="https://superhuman.com/legal/dpa" rel="nofollow">https://superhuman.com/legal/dpa they claim that their role is processor. Processor is only allowed to use personal data they obtained from controller under controller's documented instructions. Unless those included authorization to send such an email to controller's users it's quite likely that they exceeded those. GDPR-wise (and likely that DPA-wise) that is a breach on it's own.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.