[ihattendorf]

"We may collect, use, transfer, sell, and disclose non-personal information for any purpose. For example, when you use our services, we may collect data from and about the “commercial electronic mail messages” and “transactional or relationship messages” (as such terms are defined in the CAN-SPAM Act (15 U.S.C. 7702 et. seq.) that are sent to your email accounts.

We may collect and use your commercial transactional messages and associated data to build anonymous market research products and services with trusted business partners. If we combine non-personal information with personal information, the combined information will be treated as personal information for as long as it remains combined.

Aggregated data is considered non-personal information for the purposes of this Privacy Notice."

https://unroll.me/legal/privacy/

[rhizome]

To be sure, CAN-SPAM was not aimed at end users so much as defining what they can complain about, which is not much, and the law is toothless besides.