---
title: "Graymail has two cut-offs: 11 ignored emails at HubSpot, 3 years in India's law"
summary: "Where a mail platform's default and India's DPDP Rules draw the line on subscribers who opted in and stopped reading, as of September 2026."
url: https://www.thetechbag.com/blog/graymails-email-marketing
format: Note
desk: "SaaS & business software"
published: 2025-12-09
facts_checked: 2026-09-30
author: TechBag (The TechBag Journal)
tags: ["graymail","email marketing","HubSpot","list hygiene","Apple Mail Privacy Protection","Gmail","DPDP","data retention"]
cover: https://www.thetechbag.com/blog/covers/graymails-email-marketing.png
---

# Graymail has two cut-offs: 11 ignored emails at HubSpot, 3 years in India's law

*Where a mail platform's default and India's DPDP Rules draw the line on subscribers who opted in and stopped reading, as of September 2026.*

Note · SaaS & business software · By TechBag · Published 2025-12-09 · Facts checked 2026-09-30 · Canonical: https://www.thetechbag.com/blog/graymails-email-marketing

A subscriber who opted in and then stopped reading now meets two cut-offs. HubSpot stops sending them marketing email by default after 11 ignored sends, or 16 if they once engaged; and India’s DPDP Rules make the largest consumer platforms erase a silent user’s data after three years. That subscriber is what the 2023 version of this piece called graymail. The question it asked still stands: how long do you keep mailing someone who said yes and never says anything again?

## The platform has already drawn one line

HubSpot defines graymail as “email that contacts have opted in to receive, but don’t interact with”, and counts an engagement as an open or a click. A contact who has never engaged and has ignored the last 11 marketing emails, or who engaged once and has ignored the last 16, is treated as unengaged. The “Don’t send to unengaged contacts” switch is on by default for all emails on every plan; turning it off needs a paid Marketing Hub subscription.[1]

The weak point is the word “opens”. Apple’s Mail Privacy Protection, announced on 7 June 2021, stops senders using invisible pixels to learn whether a message was opened,[2] so an iPhone reader who never reads can still register as opening and stay off the unengaged list. The mailbox providers judge on complaints instead: Gmail asks bulk senders to keep reported spam below 0.3%,[3] a ceiling our [drip-campaigns analysis](https://www.thetechbag.com/blog/drip-email-campaigns) covers in full.

**Figure: An ignored subscriber hits a platform cut-off after 11 to 16 sends; on India's largest platforms the law adds one at three years**

*Thresholds for unengaged email contacts: HubSpot's default and the DPDP Rules' Third Schedule, as of September 2026*

1. 0111 sends ignoredA contact who has never opened or clicked is suppressed from HubSpot marketing email by default.
2. 0216 sends ignoredA contact who engaged once and then went quiet is suppressed too.
3. 03Ask once, then stopOne re-permission email; no click means the address leaves every marketing list and stays on a suppression list.
4. 04Three years silentE-commerce and social platforms with two crore Indian users, gaming with fifty lakh, must erase, with 48 hours’ notice.

Source: HubSpot Knowledge Base, graymail article; DPDP Rules 2025, Rule 8 and Third Schedule; step 3 is TechBag's recommendation · as of 30 September 2026 · the three-year clock applies from 13 May 2027

Our view

Our view: define graymail by clicks, not opens, and act on it well before a vendor’s default does. A list that keeps its silent half is paying to look bigger, and it is the silent half that eventually presses “report spam”.

## What it costs, and what the law adds in India

Graymail is billed. HubSpot prices Marketing Hub by marketing contacts, the ones you actively mail; TechBag’s intel page records roughly US$250 a month for each additional 5,000 on Professional, in US dollars.[4] Bought through a reseller it is invoiced in INR with 18% GST, so a dormant block of 5,000 is a recurring rupee cost, not a rounding error.

The Digital Personal Data Protection Act, 2023 already requires that withdrawing consent be as easy as giving it, and that data be erased once consent is withdrawn or the purpose is no longer served.[6] The DPDP Rules, notified on 13 November 2025, put a number on “no longer served” for three classes: e-commerce entities and social media intermediaries with at least two crore registered users in India, and online gaming intermediaries with fifty lakh, must erase a user’s data three years after the user last approached them, warning the user at least 48 hours before. That rule applies from 13 May 2027.[5] Most senders are below those thresholds, but the direction is clear: in India a subscriber who has gone silent is a liability with a date on it.

How we did this

Figures as of 30 September 2026

The suppression thresholds are quoted from HubSpot’s own knowledge-base article, last updated 25 September 2026. The erasure clock is read from the Gazette copy of the DPDP Rules 2025 (G.S.R. 846(E)), Rule 8 and the Third Schedule; Rule 8 is among the rules that commence eighteen months after notification. The contact-tier price is TechBag’s recorded figure at the 30 September 2026 commit, not a quote. Other platforms’ suppression defaults were not counted. The 2023 post’s figure that 40% of all email is graymail, credited to Statista, could not be traced to a dated source, and its Netflix, Amazon and Shopify examples carried no source; all were dropped.

Spotted an error? Write to us; corrections are published at the foot of the piece.

Sources

1. [HubSpot Knowledge Base, What is graymail and how can I avoid sending my email to unengaged contacts?](https://knowledge.hubspot.com/marketing-email/what-is-graymail-and-how-can-i-avoid-sending-my-email-to-unengaged-contacts) — last updated 25 September 2026
2. [Apple Newsroom, Apple advances its privacy leadership with iOS 15, iPadOS 15, macOS Monterey and watchOS 8 (Mail Privacy Protection)](https://www.apple.com/newsroom/2021/06/apple-advances-its-privacy-leadership-with-ios-15-ipados-15-macos-monterey-and-watchos-8/) — 7 June 2021
3. [Google Workspace Admin Help, Email sender guidelines (spam rate below 0.3%)](https://support.google.com/a/answer/81126) — bulk-sender requirements in force from 1 February 2024
4. [TechBag, HubSpot Marketing Hub intel page (marketing-contacts pricing)](https://www.thetechbag.com/hubspot/hubspot-marketing-hub) — as committed 30 September 2026
5. [MeitY, Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E)), Rule 1(4), Rule 8 and Third Schedule](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf) — 13 November 2025
6. [Digital Personal Data Protection Act, 2023, sections 6(4) and 8(7)](https://www.meity.gov.in/data-protection-framework) — 11 August 2023

**Disclosure.** TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view.

Go deeper on TechBag

- [HubSpot Marketing Hub](https://www.thetechbag.com/hubspot/hubspot-marketing-hub) — priced by marketing contacts, so a dormant contact is a monthly cost
- [Email security guide](https://www.thetechbag.com/browse/security/email-security) — the authentication tools the mailbox providers now require of bulk senders
