Zoho has updated the Zoho Campaigns Terms of Use, with the update last made on 3 September 2026 and taking effect on 7 October 2026. Continuing to use Zoho Campaigns after that date means you're accepting the revised terms, so it's worth understanding what's actually changed before then.
The introduction now links out to a page listing which specific Zoho entity you're contracting with, and the governing law and jurisdiction that applies, based on your region. This is largely a clarity improvement rather than a substantive change to your obligations.
The existing restriction around emergency services, such as hospitals, police, and fire departments, has been pulled out into its own clearly labelled section, making it easier to find rather than buried within a broader restrictions list. The underlying rule is unchanged: Zoho Campaigns isn't designed for, and doesn't provide access to, emergency services, and you're responsible for using other means to contact emergency services if needed.
This section now points to a dedicated Prohibited Content page detailing exactly what you can't promote, market, sell, or send via Zoho Campaigns. Failing to comply can result in Zoho suspending or terminating your access, and Zoho retains the right to block a campaign it believes could harm its own sending reputation. The broader restrictions themselves remain largely consistent with before: no content that infringes intellectual property, is defamatory or abusive, promotes hate speech, is pornographic or obscene, impersonates someone, spreads malware, or breaches applicable law, along with continued restrictions around scams, illegal or counterfeit products, pharmaceuticals, gambling, e-cigarettes, and cryptocurrency-related content.
If you send SMS campaigns via 10DLC, Zoho has clarified that it may make minor, non-material technical edits to your registration submission to ensure it complies with The Campaign Registry (TCR) and mobile carrier standards. Zoho commits that any change judged to be material will require your explicit approval first, rather than being applied unilaterally.
The core deliverability and consent obligations remain in place: hard bounce rates must stay under 5%, spam complaints under 0.1%, unsubscribe counts shouldn't exceed click rates, and you can only email contacts obtained through genuinely consensual means, such as a website sign-up, a business card given at an event, or an existing customer referral, never through purchased, scraped, or long-dormant contact lists.