Have you spoken with a lawyer yet? You may be facilitating CAN-SPAM violations in the USA, and possibly violations of similar protective legislation elsewhere, if you don’t take proper precautions immediately. If you’re worried, I would suspend operations until you can get a sign off on what you’re doing.