Acceptable Use Policy

This Acceptable Use Policy applies to every person and organization that uses Brand My Inbox to configure, route, or send email. You are responsible for your users, recipients, content, sending practices, domains, and compliance with applicable law and the rules of every connected provider, which currently include Cloudflare for supported inbound routing and any authenticated sending provider configured for your domain. Provider rules apply in addition to this policy, and the stricter rule governs.

Ordinary correspondence only. Every plan is sold for ordinary personal, household, or office correspondence — the mail a person or a small team sends and receives in the normal course of their work or family life. Published allowances describe that pattern. They are not a budget to be consumed by automated dispatch, mailing campaigns, list mail, notification floods, load generation, or resale of routing or sending capacity to third parties. Where a plan states a daily or monthly message allowance, that allowance is the measured limit for the account as a whole across both received and sent mail unless the plan states otherwise, and the figure shown before purchase is the figure enforced in your workspace.

What an unlimited allowance means. Where a plan states that addresses, domains, or team seats are unlimited, it means there is no counter and no per-unit charge for them, because those resources carry no meaningful cost to provide. It does not mean the account is unmetered. The stated daily and monthly message allowances remain the measured limit, ordinary-correspondence use above still applies, and creating addresses or domains at a scale inconsistent with the account's own sending and receiving may be treated as evasion under the enforcement paragraph below rather than as permitted use.

How messages are counted. Every send attempt is counted against the allowance at the moment it is accepted for processing, whether or not it is ultimately delivered, and regardless of whether it later bounces, is rejected by the recipient, or is suppressed. A message addressed to several recipients counts once per recipient. Counting attempts rather than deliveries is deliberate: a limit measured only on success would place no bound on repeated delivery attempts to invalid addresses, which is the exact behaviour that damages sending reputation for every account on the platform.

Domains must be registered, not free. Domains under top-level domains that are distributed at no cost, and free subdomains supplied by such registries, cannot be connected and will be refused at signup and at provisioning. This is not a judgement about any individual customer. Mail from these namespaces is filtered heavily by receiving providers irrespective of authentication because abandonment costs the registrant nothing, and a single abandoned free domain measurably harms delivery for every other domain sending through shared infrastructure. A domain registered with any paid registrar is acceptable.

Authorized and verified sending only. You may send only from domains and email identities that you own or are expressly authorized to use. You must complete the required domain verification and authentication controls, which may include DKIM, SPF, DMARC, and a custom MAIL FROM domain. You may not spoof sender information, impersonate another person or organization, conceal the origin of a message, or attempt to bypass verification, account limits, suppression controls, or provider review.

Permission and recipient expectations. Purchased, rented, borrowed, scraped, harvested, appended, or third-party mailing lists are prohibited. Unsolicited bulk email, spam, and cold-email campaigns are prohibited. Transactional or operational messages may be sent only where the recipient has a relevant relationship with the sender and can reasonably expect the message. Marketing messages require valid consent where required by law, accurate sender identification, a clear explanation of why the recipient is receiving the message, and a working unsubscribe method that is honored promptly.

Prohibited content and conduct include phishing; malware; credential theft; deceptive or fraudulent claims; illegal goods or services; harassment; threats; hate or exploitative content; rights infringement; unauthorized surveillance; pyramid or get-rich-quick schemes; evasion of sanctions or legal restrictions; messages that materially mislead recipients; and any activity that could damage the reputation, security, availability, or deliverability of Brand My Inbox, our upstream sending provider, or another provider.

List hygiene and suppression. You must maintain accurate recipient records, remove invalid or inactive addresses, and avoid repeated delivery attempts to addresses that hard bounce. A hard-bounced address or a recipient who submits a spam complaint must be suppressed promptly and must not be mailed again unless the suppression was erroneous and renewed permission can be demonstrated. Unsubscribe requests must be processed without avoidable delay and within the period required by applicable law.

Monitoring and enforcement. Brand My Inbox may process provider delivery, bounce, rejection, and complaint events; measure the number of messages received and sent on an account; apply per-tenant limits; restrict sending while a new tenant establishes a healthy history; and investigate unusual volume or reputation signals. Stricter internal thresholds may be applied than those published by a provider.

How enforcement escalates. Ordinary overuse and deliberate abuse are treated differently. Where an account simply exceeds its allowance, Brand My Inbox will normally notify first, and may then slow delivery, pause the affected capability, or require an upgrade before the allowance resets — routing for existing addresses is preserved wherever it safely can be. Where activity is abusive rather than merely excessive — unsolicited bulk mail, phishing, fraud, impersonation, rights infringement, or anything that endangers a provider relationship — Brand My Inbox may suspend or terminate the account immediately and without prior notice, and may decline to serve the operator again. Attempting to stay under a limit by spreading the same activity across additional domains, addresses, accounts, or plans is itself a breach and is treated as abuse rather than overuse. Suspension does not destructively remove your DNS, and your domain remains registered in your own name throughout.

You must cooperate with abuse investigations and provide reasonable evidence of domain authority, recipient consent, list source, message purpose, and unsubscribe handling when requested. Brand My Inbox may preserve relevant records, notify an affected provider, or report conduct to authorities where reasonably necessary to protect users, comply with law, or enforce these Terms. No customer activity may be structured to evade these controls by rotating domains, accounts, recipients, or sending infrastructure.