That's from the past 30 days.

Are you sure you’re not actually spamming people? What sort of messages are these? Did people subscribe to them? How long have you been sending these out for?

Absolutely not! We use double opt-in, with explicit subscribe call to action. We are fully GDPR/CCPA compliant.

I'm not that keen on the phrase "double opt-in". It's a phrase used by marketers, to make it look as if anti-spammers are doubling their workload and making things unnecessarily complicated.

What you are referring to should be called "confirmed opt-in", and it simply means that you don't accept an opt-in unless you can be sure it came from the owner of the mailbox in question, and was not forged. Making people opt-in twice wouldn't help with that.

Good point!!

If the content of your email or frequency of emails is not inline with the expectation of subscribers when they subscribed, some will report the emails as spam regardless of the steps you documented.

Sure, we have been doing this for several years so we are aware of these pitfalls. The issue is the way Google has been handling this case. There is no process, no communication. They have made extreme threats, with nothing to back it up, no way to respond.

This a thousand times. We also go to greath lengths to ensure there's no spam coming from our servers and then we get a notification and it's for a legitimate email that someone reported as spam for whatever reasons. It's frustrating.

Sorry this happened. All I can recommend is to transfer your domain away. We do cold reachouts as well (less than 20 a day though) and I have my domain in namecheap.