How to Cold Email Vacation Rental Owners
Cold email to vacation rental owners: CAN-SPAM rules, Gmail, Yahoo and Outlook sender requirements, list hygiene, email counts by state and example first emails.
Cold email is the cheapest way to reach a vacation rental owner who has never heard of you. It is also the easiest way to burn a domain, annoy a market you plan to work for years, and break a federal law without noticing. This guide is for businesses that sell to short-term rental owners: property managers and co-hosts, cleaning and turnover crews, insurers, furnishers, pool and maintenance contractors, photographers, revenue managers and real estate agents. It covers the law, the mailbox providers' rules, where owner email addresses come from, and how to write and measure a campaign that a busy owner might answer.
Everything here is sourced. The legal sections quote the Federal Trade Commission's CAN-SPAM guide and the statute. The deliverability sections quote Google's, Yahoo's and Microsoft's own sender pages. The data sections use counts from our dataset of public permit registers as of October 2026. We do not quote response rates, because no public source measures them for this market and we will not make one up. This is not legal advice; if email is a large part of your plan, have a lawyer review your program.
What cold email can and cannot do in this market
Start with a fact that most cold email guides leave out. Google's sender guidelines tell senders: "Don't purchase email addresses from other companies" and "Don't send messages to people who didn't sign up to get messages from you." Microsoft's guidance for high-volume senders asks them to "ensure your recipients have consented to receive your messages." Those are the mailbox providers' preferences, not the law. United States law (CAN-SPAM) allows unsolicited commercial email as long as you follow its rules. But the providers decide what reaches the inbox, and they judge you mainly by how recipients react.
So cold email to owners works under three conditions:
- Small volume. You write to a few dozen or a few hundred owners a week, not tens of thousands.
- A specific reason to write. The owner just registered a rental, or holds a permit type that needs your service, or owns several properties in your area. You say so in the first line.
- Clean mechanics. Authentication, a working opt-out, a real postal address, an accurate subject line, and a suppression list that never forgets.
When those conditions do not hold (you want to reach every owner in a state at once, or you have nothing specific to say), direct mail is usually the better channel. Our direct mail guide covers it, and it is the lowest-risk way to reach owners whose register publishes only an address.
CAN-SPAM requirements, line by line
The CAN-SPAM Act sets the federal rules for commercial email. The FTC's compliance guide for business is the plainest summary, and it is worth reading in full. Here is what it requires, with what each rule means for an email to a vacation rental owner.
1. Accurate header information
The "From," "To," "Reply-To" and routing information must be accurate and "identify the person or business who initiated the message." For you, that means the sender name is your real business (or a real person at it), and the sending domain belongs to you. A display name that pretends to be a guest, a neighbor or a platform is out.
2. An accurate subject line
"The subject line must accurately reflect the content of the message." Fake "Re:" or "Fwd:" prefixes that suggest an earlier conversation, or subjects such as "Your booking" or "Permit issue" on a sales email, fail this test.
3. Identification as an advertisement
The FTC guide says you must "disclose clearly and conspicuously that your message is an advertisement." The FTC says the law "gives you a lot of leeway in how to do this," but it should be plain. A footer line such as "This is a marketing email from Bayou Turnover Co." does the job without sounding odd.
4. Your physical postal address
"Your message must include your valid physical postal address." The FTC allows a current street address, a post office box registered with the Postal Service, or a private mailbox registered with a commercial mail receiving agency under Postal Service rules.
5. A clear way to opt out
Every message must explain how to stop receiving your marketing email, and the FTC says "you must include the option to stop all marketing messages from you." A reply-based opt-out ("reply 'no thanks' and I won't write again") is legal, but the mailbox providers now expect a one-click unsubscribe from larger senders (see the deliverability section), so plan to offer both.
6. Honoring opt-outs promptly
You must honor an opt-out within 10 business days, and your opt-out method must keep working for at least 30 days after you send. You may not charge a fee, require any personally identifying information beyond an email address, or make the person take any step other than replying to an email or visiting a single web page. You also may not sell or transfer the addresses of people who opted out, except to a company you hired to help you comply.
7. Responsibility for others who send for you
If you hire an agency or a freelancer to run your email, you remain responsible. The FTC guide says you "can't contract away your legal responsibility to comply with the law," and that both the company whose product is promoted and the company that sends the message may be held legally responsible.
Penalties
The FTC guide says each separate email in violation "is subject to penalties of up to $53,088." That is per email, not per campaign. A batch of 500 non-compliant messages is, in principle, 500 violations.
Commercial versus transactional messages
CAN-SPAM turns on a message's "primary purpose." Commercial messages (advertising a product or service) must follow all the rules above. Transactional or relationship messages, such as confirming a purchase or delivering a service the person agreed to, are mostly exempt. Every first-touch cold email is commercial. Once an owner hires you, your invoices and schedule confirmations become transactional, but any message that promotes a new service is commercial again.
Address harvesting and dictionary attacks
The FTC guide lists aggravated violations that can carry criminal penalties, including "harvesting email addresses or generating them through a dictionary attack" (sending to made-up addresses in the hope that some exist), and registering accounts or domains with false information. Guessing an owner's email from their name ("firstname.lastname@gmail.com") is close enough to that line that you should not do it.
B2B versus consumer when the owner is a person
Many sellers assume that emailing a rental owner is business-to-business marketing and that consumer rules do not apply. For email, the FTC is direct: "The law makes no exception for business-to-business email." CAN-SPAM applies the same way whether the owner is an LLC or a schoolteacher. Where the B2B question really matters is in the other channels and in privacy law.
How often the owner is a person
Our study of who holds short-term rental permits counts how many named holders on each register are companies, trusts or people. As of October 2026:
| Register | Named holders | Companies (LLC, corporation, partnership) | Trusts | People |
|---|---|---|---|---|
| Florida DBPR vacation rental licenses | 50,107 | 22,242 (44%) | 531 (1%) | 27,334 (55%) |
| Wisconsin DATCP tourist rooming houses | 12,918 | 5,575 (43%) | 224 (2%) | 7,119 (55%) |
| Nashville residential STR permits | 17,699 | 6,975 (39%) | 357 (2%) | 10,367 (59%) |
| New Orleans STR permit applications | 28,084 | 4,939 (18%) | 37 (0.1%) | 23,108 (82%) |
In every one of these registers, most holders are people. Even where an LLC holds the permit, the email on the form often belongs to the person who filled it in.
What changes when the owner is a person
- Calls and texts. The phone number on a permit is often a personal mobile. The TCPA and the National Do Not Call Registry apply: no autodialers, no prerecorded or artificial voices, and no texts without consent. If a follow-up plan includes a call, read our guide on calling STR owners under TCPA and DNC rules first.
- Privacy law. California's Consumer Privacy Act protects California residents, defined by the Attorney General as natural persons rather than companies. The CCPA applies to for-profit businesses that do business in California and meet one of three tests: gross annual revenue over $25 million; buying, selling or sharing the personal information of 100,000 or more California residents or households; or deriving half or more of annual revenue from selling California residents' personal information. The Attorney General's page also says the old exemption for "personal information reflecting business-to-business transactions" expired on December 31, 2022. Most small vendors will not meet the thresholds, but larger ones should check.
- Tone. A person reads your email on their phone between other things. Write to them as a neighbor in business would, not as a vendor addressing a procurement desk.
State laws worth knowing
CAN-SPAM limits what states can do about commercial email. The statute (15 U.S.C. 7707) says it supersedes any state law that "expressly regulates the use of electronic mail to send commercial messages," except to the extent the state law "prohibits falsity or deception in any portion of a commercial electronic mail message or information attached thereto." It also leaves in place state laws that are not specific to email (trespass, contract and tort law) and state laws on fraud or computer crime.
In practice, that means three things for an owner campaign:
- Deception is a state problem as well as a federal one. States with email statutes can still act against false or misleading content, headers and subject lines. If you follow CAN-SPAM's rules on headers, subject lines and content to the letter, you are in a much better place under state law too.
- State privacy laws sit alongside CAN-SPAM. California's CCPA, above, is the most cited example. Other states have their own privacy laws with their own thresholds; check the ones where you hold large numbers of owner records.
- Phone rules are stricter at the state level. Several states have their own telemarketing statutes. They matter the moment your email sequence includes a call or a text.
Owners outside the United States
Permit registers list the property address, and many also list the owner's mailing address, which may be outside the United States. Canada's government describes its anti-spam law (CASL) as requiring businesses to "obtain consent before sending commercial electronic messages," which is stricter than CAN-SPAM. If an owner's mailing address is in Canada or another country with consent rules, the safe choice is to leave them out of the email campaign and use mail.
Deliverability in 2026: what Gmail, Yahoo and Outlook require
Since February 2024, Google and Yahoo have enforced written requirements for everyone who sends to their users, with stricter rules for bulk senders. Microsoft added its own rules for high-volume senders to Outlook.com, Hotmail and Live in May 2025. These are the rules that decide whether your email reaches the inbox, the spam folder or nowhere.
Requirements for every sender
Google's email sender guidelines require all senders to:
- "Set up SPF or DKIM email authentication for your sending domains."
- "Ensure that sending domains or IPs have valid forward and reverse DNS records, also referred to as PTR records."
- "Use a TLS connection for transmitting email."
- "Keep spam rates reported in Postmaster Tools below 0.3%."
- Format messages according to RFC 5322, and not impersonate Gmail From: headers.
Yahoo's sender best practices set the same floor: SPF or DKIM at a minimum, a spam rate below 0.3%, valid forward and reverse DNS, and compliance with RFCs 5321 and 5322.
Requirements for bulk senders
| Requirement | Google (over 5,000 messages a day to Gmail) | Yahoo (bulk senders) | Microsoft (over 5,000 a day to Outlook.com, Hotmail, Live) |
|---|---|---|---|
| SPF and DKIM | Both required | Both required | SPF must pass; DKIM must pass |
| DMARC | Required; policy can be "none" | Valid policy, at least p=none, and DMARC must pass | At least p=none, aligned with SPF or DKIM |
| Alignment | From: domain aligned with the SPF or DKIM domain | Same; relaxed alignment acceptable | Aligned with SPF or DKIM, preferably both |
| One-click unsubscribe | Required for marketing and subscribed messages, plus a visible unsubscribe link in the body | Required for marketing and subscribed messages; RFC 8058 POST method highly recommended | Recommended: a functional, visible unsubscribe link |
| Unsubscribe timing | FAQ recommends honoring requests within 48 hours | "Honor unsubscribes within 2 days" | Not stated |
| Spam rate | Below 0.3%; target below 0.1% | Below 0.3% | Not stated as a number |
Microsoft's announcement said non-compliant messages from high-volume domains would be routed to Junk starting May 5, 2025, and that it would move to rejecting them, quoting the rejection code "550; 5.7.515 Access denied." Google adds that sending to personal Gmail accounts requires a DKIM key of 1024 bits or longer.
Three details that catch small senders
Bulk status is permanent and counted by primary domain. Google's sender guidelines FAQ says "senders who meet the above criteria at least once are permanently considered bulk senders," and that it counts "all messages sent from the same primary domain." Mail sent from a subdomain rolls up to the parent. If your company also sends newsletters, invoices or app notifications from the same domain, they count toward the 5,000.
The spam rate is a ratio, so small volumes magnify each complaint. At 0.3%, a sender delivering 1,000 messages to Gmail users can absorb three spam reports. A sender delivering 200 hits 0.3% with less than one complaint: one report out of 200 is 0.5%. Small campaigns do not get a pass; they get less room for error. This is the strongest argument for writing only to owners you have a specific reason to contact.
The unsubscribe clock is shorter than the law's. CAN-SPAM gives you 10 business days. Yahoo asks for 2 days and Google recommends 48 hours. Build your process around the shortest one: suppress the address the moment the request arrives.
One-click unsubscribe, in plain terms
One-click unsubscribe is defined in RFC 8058. Your message carries two headers: a List-Unsubscribe header that "MUST contain one HTTPS URI," and a List-Unsubscribe-Post header that must contain the single key/value pair "List-Unsubscribe=One-Click." Both headers must be covered by a valid DKIM signature. When an owner taps "unsubscribe" in Gmail or Yahoo, the provider posts to your URL and your system removes the address. Many sending tools can add these headers; check a sent message's raw headers to confirm yours does.
Separate sending domains
Do not send cold email from the domain your business runs on. If a campaign goes badly, the damage to your domain's reputation follows your invoices, your password resets and your replies to paying clients. The usual setup is a second domain used only for outreach.
How to do it without breaking the rules
- Use a separate registered domain, not a subdomain. Google counts subdomain mail toward the primary domain, so outreach.yourcompany.com shares more with yourcompany.com than many senders assume. A second registered domain keeps the two apart.
- Register it truthfully. The FTC lists registering domains with false information as an aggravated violation. Register it in your company's name.
- Make it clearly yours. The From: line must identify who sent the message. A domain that is obviously your brand (yourcompanyhq.com, getyourcompany.com) satisfies that; a domain that looks like a platform, a city office or a permit agency does not.
- Set up SPF, DKIM and DMARC on it before the first send, aligned with the From: domain. Microsoft's FAQ notes that DMARC alignment means the From: domain matches the domain used by SPF and/or DKIM.
- Point the website at your real site. Owners who get your email will type the domain into a browser. It should load a page about your business, or forward to your main site.
- Keep the reply path working. Microsoft's guidance asks that the From: or Reply-To address be valid and able to receive replies. Replies are the point of the exercise.
How many domains and mailboxes
For a single-market vendor, one outreach domain with one or two mailboxes is enough, because the volume of owners worth writing to is small (see the volume section below). Large networks of lookalike domains are a sign of a volume-first program, and they multiply the setup and monitoring work. Add capacity only when your list and your results justify it.
List hygiene and verification
Every address you send to should pass five checks before it enters a campaign.
1. The permit is current
A large share of every register is history. Across the 297,717 records in our dataset on October 22, 2026, 99,966 carried an active status and 4,660 a pending one; 64,668 were ended and 8,721 refused or denied. Writing to the holder of an expired or denied permit about their "rental" is a fast way to earn a complaint. Filter to active and pending first. Our guide to pending versus granted permits explains the labels.
2. One owner, one message
Many owners hold several permits. If you send one email per permit, the same person gets three identical messages on the same morning. Group records by owner name and email, write once, and mention the portfolio if it is relevant. Our guide to finding multi-property STR owners shows how to group them.
3. The address is deliverable
Permit emails are typed by applicants, and typos happen: a missing letter, ".con" for ".com," a space inside the address. Run every list through an email verification step and remove addresses that fail. Hard bounces hurt your sender reputation, and Microsoft's guidance specifically asks large senders to "remove invalid addresses regularly."
4. The address belongs to the right person
The email on a permit belongs to whoever filled in the form. That is often the owner, but it can be a property manager, an attorney or a relative. Write your first line so it still makes sense if a manager reads it, and treat a reply such as "I'm the manager, not the owner" as useful information, not a failure.
5. The address is not suppressed
Keep one permanent suppression list: everyone who opted out, complained, bounced hard, or asked you not to write. Check every new list against it before sending. Permit data refreshes constantly, so the same owner will reappear when they renew or add a property. The suppression list is what keeps a past opt-out from becoming a new complaint.
Never append or guess
Some vendors "append" emails to address-only records by matching names against other databases. In this market, a matched email is often a guess, and a wrong guess puts your message in a stranger's inbox, which is how spam reports happen. Use the emails the register published. For address-only records, use mail.
Warming and volume
A new domain has no reputation. Google's guidance is to "start with a low sending volume to engaged users, and slowly increase the volume over time," and to "avoid introducing sudden volume spikes if you do not have a history of sending large volumes."
A conservative ramp
No mailbox provider publishes a warming schedule, so the plan below is ours, not a rule. It is deliberately slow, because the owner market is small and a damaged domain is expensive to replace.
| Period | What to send | What to watch |
|---|---|---|
| Week 1 | Normal one-to-one mail only: replies to real contacts, scheduling, conversations with colleagues | Authentication passes on every message (check headers) |
| Week 2 | The first owner emails, a handful a day, to your best-fit records | Bounces, replies, any spam complaint |
| Weeks 3 to 4 | Raise volume gradually if bounces and complaints stay at zero or near it | Postmaster Tools for the outreach domain, once data appears |
| After week 4 | Hold at the volume your list actually supports; do not raise it to fill a quota | Spam rate well under 0.1%, replies, unsubscribes |
How many owners you actually have to write to
Volume should come from your list, not from a sending tool's capacity. Our dataset gives a sense of scale. Over the 15 complete weeks from July 6 to October 18, 2026, an average of about 700 records a week were new to the dataset nationally, and about 428 a week carried a phone number or email (10,505 records and 6,426 contactable records, divided by 15). That is across every state we cover and every kind of contact detail.
For email in a single market, the numbers are much smaller. In the week of October 12 to 18, 2026, Louisiana added 31 records, 27 of them with a phone or email, and Kentucky added 19, all with a phone or email. A New Orleans cleaning company working only fresh registrations would be writing a few dozen owners a week. That is a volume you can send by hand, personalize line by line, and follow up on properly.
Working an existing file is larger but still finite. As of October 2026, Louisiana's records carried 29,181 email addresses. A vendor who writes to 40 owners a day, five days a week (our planning estimate, not a provider limit), would take about 146 weeks to reach every one of them once (29,181 divided by 200 a week). Most vendors serve part of a state, so the real number is a fraction of that. The point stands: a focused owner program never needs to send thousands a day.
Where permit emails come from and how contactability varies by state
An email address appears in a permit record because the owner, or someone acting for them, typed it on the application, and because the agency chose to publish that field. The second part decides everything. Two agencies running similar programs can publish very different files. New Orleans publishes its full dataset of permit applications on its open data registry. Florida's DBPR, whose license search notes that "under Florida law, email addresses are public records," publishes a vacation rental file in which phone numbers are common and emails are rare.
Across our dataset on October 22, 2026, 64,197 of 297,717 records (about 22%) carried an email address and 125,019 (about 42%) a phone number. The split by state:
| State | Records | With email | Email share | Phone share |
|---|---|---|---|---|
| Louisiana | 34,052 | 29,181 | 85.7% | 85.9% |
| Wisconsin | 13,374 | 12,944 | 96.8% | 84.3% |
| Texas | 57,720 | 8,764 | 15.2% | 14.8% |
| Georgia | 3,675 | 3,041 | 82.7% | 82.7% |
| Kentucky | 3,996 | 2,477 | 62.0% | 62.0% |
| Arizona | 5,503 | 1,721 | 31.3% | 87.0% |
| New Mexico | 2,183 | 1,258 | 57.6% | 58.1% |
| Ohio | 1,952 | 1,134 | 58.1% | 95.2% |
| Minnesota | 1,579 | 920 | 58.3% | 50.9% |
| Florida | 53,152 | 959 | 1.8% | 74.7% |
| Washington | 29,621 | 866 | 2.9% | 2.9% |
| Colorado | 10,103 | 300 | 3.0% | 3.0% |
| California | 24,511 | 101 | 0.4% | 79.2% |
| Tennessee | 33,731 | 0 | 0% | 0% |
Four lessons come out of that table.
- Two states hold most of the email. Louisiana and Wisconsin together account for 42,125 of the 64,197 email addresses, about two in three. If your business serves either state, email is a natural channel. Wisconsin's addresses come from the statewide DATCP tourist rooming house file; Louisiana's mostly from New Orleans' permit applications.
- Florida and California are phone states, not email states. Florida has 39,690 records with a phone and only 959 with an email. California has 19,402 phones and 101 emails. A cold email plan for Florida owners has almost nothing to send to; the channels there are mail and, carefully, the phone.
- Some large markets publish no contact details at all. Tennessee, Oregon, Illinois, South Carolina, North Carolina, Hawaii, Pennsylvania, Massachusetts and Wyoming show no phone or email in our data, because their registers publish an address and usually an owner name only. Nashville's register of more than 31,000 records is an address-and-name file. Mail is the channel there.
- Texas email comes from city registers. The statewide hotel occupancy tax roll publishes no phone or email, so the Texas addresses come from the city registers in the Texas file. The share is low statewide but varies sharply by city.
Every register page in our register directory shows which fields that source publishes, and the STR permit lookup checks a single address against the registers we collect.
Writing the first email
The first email has one job: get a reply from an owner who did not ask to hear from you. Owners get pitches from cleaners, managers, software companies and photographers. The emails that stand out are about the owner's property, not about the sender.
Principles
- Open on the property. The first line names the street, the neighborhood or the kind of rental, and why that matters for your service.
- Say how you found them, plainly. "Your rental is on the city's public short-term rental register" is true and unthreatening. Do not imply you know more than the register says.
- Do not claim timing you cannot prove. Unless the register publishes an issue date, do not say the permit was "just issued." Say it is new to the public register, or recently filed if the filing date shows it.
- One offer, one question. Ask something an owner can answer in a line: "Who handles turnovers for you now?" beats "Can we book a 30-minute call?"
- Short. Aim for under 120 words before the footer. Owners read on a phone.
- Plain text. No images, no tracking-heavy templates. Google advises that links be "visible and easy to understand" and that recipients "know what to expect when they click a link." One link or none.
- The compliance footer. Your business name, postal address, a line identifying the message as marketing, and how to opt out.
Example 1: turnover cleaning in New Orleans
Subject: Turnovers for your rental on Burgundy Street
Hi Ms. Landry,
Your place on Burgundy Street showed up on the city's short-term rental register this month, so I'm guessing you're sorting out turnovers now. We clean about a dozen rentals in the Marigny and Bywater, with same-day linen swaps and photos of every finished unit sent to the owner.
Who handles your cleaning at the moment? If you're set, no problem. If not, I can send our checklist and price for a two-bedroom.
Renee Ortiz, Bayou Turnover Co.
This is a marketing email from Bayou Turnover Co., [your street address], New Orleans, LA. Reply "stop" or use the unsubscribe link and we won't email you again.
Why it works: the street name is in the subject and the first line; the source is stated (the city's register); there is no claim about when the permit was issued; and the question takes five words to answer. (The address in the footer is a placeholder for your real one.)
Example 2: property management in Door County, Wisconsin
Subject: Your Sister Bay rental and the summer season
Hi Tom,
I saw your tourist rooming house license for the cottage on the north side of Sister Bay on the state's public list. We manage rentals between Ephraim and Ellison Bay, mostly cottages like yours.
Are you managing it yourself this year, or do you have help? Happy to share what similar cottages near you booked last fall, if that's useful.
Karen Lindqvist, Peninsula Stay Management
Marketing email from Peninsula Stay Management, [your street address], Sister Bay, WI. Reply "unsubscribe" or click the link below to stop these emails.
Note the offer at the end. It promises to share something only if the sender really has that data; never invent comparables. If you do not have them, offer something you do have, such as your fee sheet.
Example 3: insurance for an LLC owner in Atlanta
Subject: Insurance for short-term rentals held in an LLC
Hi Marcus,
Your Atlanta rental is licensed under Peachtree Homes LLC on the city's short-term rental list. When a rental is held in an LLC, it is worth checking that the policy names the company and covers paying guests. We write coverage for short-term rentals in Georgia and can review what you have in about ten minutes.
Is the policy on the rental in the LLC's name today?
Dana Hughes, licensed agent, Hughes Risk Partners
This is an advertisement from Hughes Risk Partners, [your street address], Atlanta, GA. To stop all marketing email from us, reply "remove" or use the one-click link.
Insurance agents should also check their state's insurance advertising rules. The structure still holds: the property and the entity first, one specific question, the footer.
Example 4: furnishing for a new Louisville registration
Subject: Furnishing the rental on Bardstown Road
Hi Alicia,
Your Bardstown Road rental is new on Louisville's short-term rental registration list. If you're still furnishing it, we stage and furnish rentals in the Highlands for owners who want guest-ready photos in two weeks or less.
Is the unit furnished yet, or are you starting from empty rooms?
Jordan Price, Derby City Rental Interiors
Marketing email from Derby City Rental Interiors, [your street address], Louisville, KY. Reply "no thanks" or use the unsubscribe link to stop these emails.
Names, streets and businesses in these examples are invented for illustration. Replace bracketed text with your real details before sending; CAN-SPAM requires a real postal address.
Subject lines
Subjects that name the property or the place, in plain words, fit both the law and the reader: "Turnovers for your rental on Burgundy Street," "Your Sister Bay cottage," "Insurance for rentals held in an LLC." Avoid anything that implies an existing relationship ("Re: your booking"), an official notice ("Permit update"), or urgency you cannot back up.
Follow-ups
A first email often lands at a bad moment, which is why a short follow-up is worth sending. Follow-ups are also where programs also get into trouble, because each one is another chance to be reported. Keep them few, useful and easy to stop.
A sequence we recommend
- Day 0: the first email.
- Day 4 or 5: a short reply in the same thread that adds one new, useful thing (a checklist, a price range, a local rule the owner may not know, with its source).
- Day 12 to 14: a last note that closes the loop: "I won't keep writing. If turnovers become a headache later, my number is below."
Three messages is our recommendation, not a legal limit. Stop at once if the owner replies (even "not now"), opts out, bounces, or if you learn the email belongs to someone else. Every follow-up must carry the same CAN-SPAM footer as the first message.
Switching channels
- Mail is the natural second channel, and the only one for owners whose register publishes no email. A postcard to the owner's mailing address after an unanswered email is low risk.
- Phone and text are high risk with individual owners. The TCPA and the National Do Not Call Registry apply; do not use autodialers, prerecorded or artificial voices, and do not text without consent. If you call, dial by hand, scrub against the registry, call within permitted hours, and keep records. See our TCPA and DNC guide.
Re-engaging later
An owner who did not answer in October may answer in March, when they renew, add a second property or lose their cleaner. Permit data gives you a reason to write again: a renewal, a new registration under the same name, or a new rule. Write again only with a new reason, never to an address on your suppression list, and no sooner than a few months after the last sequence ended.
Measuring a campaign
Measure what tells you whether the program is healthy and whether it makes money. In order of importance:
| Metric | How to calculate it | Why it matters |
|---|---|---|
| Spam complaint rate | Complaints divided by messages delivered, by mailbox provider; Gmail's figure is in Postmaster Tools | Google and Yahoo require it to stay below 0.3%; Google's target is below 0.1% |
| Hard bounce rate | Hard bounces divided by messages sent | Shows list quality; invalid addresses hurt reputation |
| Reply rate | Unique owners who replied divided by unique owners emailed | The first sign that your message and targeting work |
| Positive reply rate | Replies showing interest (asking a price, a call, more detail) divided by owners emailed | The number that predicts revenue |
| Unsubscribe rate | Opt-outs divided by owners emailed | Rising opt-outs warn that complaints may follow |
| Meetings or quotes | Count | Where the pipeline starts |
| Clients signed and revenue | Count and dollars, traced to the campaign | The only result that pays for the work |
Count per owner, not per email, so a three-message sequence does not dilute your reply rate. And measure by segment: market, permit type, holder type (person or company), and how fresh the record is. The differences between segments tell you where to spend next month's effort.
Read every reply yourself
Owners' replies are short and often ambiguous. "How much?" is a buying signal. "We already have someone, but they're unreliable" is a buying signal. Automated reply sorting can misread these, especially when a reply quotes your own footer (for example, the line telling the reader how to opt out), which can make a real request look like an unsubscribe. In a program this small, a person should read every reply the same day, and every price request should get an answer within hours.
Watch Postmaster Tools
Google tells senders to "regularly monitor your domain's spam rate in Postmaster Tools." Verify your outreach domain there before your first campaign, and check it weekly. If the spam rate climbs toward 0.1%, slow down and look at your targeting and copy before you send more.
Mistakes to avoid
- Sending from your main business domain. Use a separate registered domain for outreach.
- Sending to the whole register. Filter to active and pending permits, group by owner, and write only where you have a reason.
- Writing about yourself first. Open on the property.
- Claiming a permit was "just issued." Unless the register publishes an issue date, say it is new to the register.
- Fake thread prefixes and official-looking subjects. They violate CAN-SPAM's subject line rule and invite complaints.
- Missing footer elements. No postal address, no opt-out, or no marketing identification on even one message is a violation.
- Losing opt-outs when you refresh the list. Keep a permanent suppression list and check every new file against it.
- Guessing or appending emails. Use the addresses the register published. Mail the rest.
- Treating owners as businesses for phone purposes. Many are individuals with personal mobiles. TCPA and DNC rules apply.
- Raising volume to fill a quota. Volume should follow your list and your complaint rate, not the sending tool's capacity.
- Letting replies sit. A price request that waits a week is usually lost.
A setup checklist
- Register a separate outreach domain in your company's name; point its website to your real business.
- Set up SPF, DKIM (1024-bit key or longer) and DMARC (at least p=none), aligned with the From: domain. Confirm TLS and valid forward and reverse DNS with your sending provider.
- Configure one-click unsubscribe (RFC 8058 headers) and a visible unsubscribe link, plus reply-based opt-out.
- Write a footer with your business name, postal address, a marketing identification line and opt-out instructions.
- Build the list: active and pending permits only, grouped by owner, verified, checked against your suppression list, with non-US mailing addresses removed.
- Read your sending platform's acceptable use policy; some prohibit sending to lists you did not collect yourself.
- Verify the outreach domain in Google Postmaster Tools.
- Warm the domain slowly, starting with real one-to-one mail.
- Write the first email and two follow-ups, each opening on the property.
- Send by segment, read every reply the same day, and log complaints, bounces, opt-outs and replies per owner.
- Review the numbers weekly; slow down if the spam rate moves toward 0.1%.
Where to get owner emails
You can collect owner emails yourself from the registers that publish them; New Orleans and many others post their files on open data portals. If you would rather not maintain the pulls, PermitPulse sells the same public register records, refreshed daily, by state: $99 a month for one state (up to 10,000 rows a month) or $299 a month nationally (up to 50,000 rows), or a one-time file at $149 for a state or $499 nationally. A free sign-up shows a 25-row sample of any register, so you can see which fields a market publishes before you plan a campaign. See the pricing page, the weekly fresh records, and the buyer pages for cleaning companies, property managers and insurance agents.
Whatever the source, the rules in this guide stay the same: write to fewer owners, for a better reason, with clean mechanics, and answer every reply fast.
Questions and answers
Is it legal to cold email vacation rental owners?
Under the federal CAN-SPAM Act, unsolicited commercial email is allowed if it follows the rules: accurate header and From information, a subject line that matches the content, clear identification as an advertisement, your valid postal address, a working opt-out, and opt-outs honored within 10 business days. The FTC says the law makes no exception for business-to-business email. Mailbox providers such as Gmail set stricter expectations of their own. This is not legal advice.
Does CAN-SPAM treat an email to a rental owner as B2B?
It does not matter for email. The FTC says CAN-SPAM makes no exception for business-to-business email, so the same rules apply whether the owner is an LLC or a person. The distinction matters for calls and texts, where TCPA and Do Not Call rules protect individuals and permit phone numbers are often personal mobiles, and for state privacy laws such as California's CCPA.
What do Gmail and Yahoo require from senders in 2026?
All senders need SPF or DKIM, valid forward and reverse DNS, TLS (Gmail) and a spam rate below 0.3%. Bulk senders (over 5,000 messages a day to Gmail) need SPF and DKIM, DMARC with at least p=none, From: alignment, and one-click unsubscribe for marketing mail. Yahoo asks bulk senders to honor unsubscribes within 2 days; Google's FAQ recommends 48 hours. Google counts volume by primary domain, and bulk status is permanent once reached.
Which states' permit records include owner email addresses?
As of October 2026, Louisiana (29,181 records with email, mostly New Orleans) and Wisconsin (12,944, from the statewide tourist rooming house file) hold about two of every three emails in our dataset. Georgia, Kentucky, Texas city registers, New Mexico, Ohio and Minnesota also publish some. Florida and California registers publish phones but almost no emails, and Tennessee, Oregon, Illinois, South Carolina, North Carolina, Hawaii, Pennsylvania, Massachusetts and Wyoming publish no phone or email.
Should I send cold email from my main business domain?
No. Use a separate registered domain for outreach so a bad campaign cannot hurt the reputation of the domain you use for clients and invoices. Google counts subdomain mail toward the primary domain, so a subdomain does not separate them. Register the outreach domain truthfully in your company's name, make it clearly your brand, and set up SPF, DKIM and DMARC aligned with the From: address.
How many follow-ups should I send to an owner?
We recommend no more than two follow-ups after the first email, spaced about four days and two weeks later, each adding something useful and each carrying the full CAN-SPAM footer. Stop at once if the owner replies, opts out or bounces. If the register lists only an address, or the owner did not answer, direct mail is a lower-risk next step than calling, which brings in TCPA and Do Not Call rules.
Sources
- Federal Trade Commission, CAN-SPAM Act: A Compliance Guide for Business
- 15 U.S.C. 7707, Effect on other laws (Legal Information Institute)
- Google, Email sender guidelines
- Google, Email sender guidelines FAQ
- Yahoo, Sender Best Practices
- Microsoft, Outlook's New Requirements for High-Volume Senders
- RFC 8058, Signaling One-Click Functionality for List Email Headers
- California Attorney General, California Consumer Privacy Act (CCPA)
- Innovation, Science and Economic Development Canada, Canada's anti-spam legislation
- City of New Orleans, Registry of Short Term Rentals
- Florida DBPR, License Search