Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out what you may and may not do when sending email through Epostix (the "Service"). It forms part of the Terms of Service. Capitalised terms not defined here have the meaning given in the Terms.

Deliverability is shared infrastructure: one abusive sender damages inbox placement for everyone on the platform. We enforce this policy to protect the recipients of your email, the reputation of our sending infrastructure, and every other customer on it.

If you breach this AUP, we may throttle, suspend, or terminate your account — for serious abuse, immediately and without prior notice. Fees already paid are not refunded where suspension or termination results from your breach of this AUP, as set out in the Terms of Service.

1. Consent and mailing lists

All email sent through the Service must go to recipients who have given you clear, provable consent to receive it, except transactional messages a recipient has necessarily triggered (receipts, password resets, security notices, account and service messages).

• Purchased, rented, scraped, or appended lists are prohibited. You may not send to, upload, or store any list acquired from a third party — bought, rented, traded, harvested from websites, or "data-appended". This applies regardless of what the seller claims about consent.
• Consent must be explicit and provable. Consent is a clear affirmative act: an unticked checkbox, a signup form, a documented verbal or written opt-in. Pre-ticked boxes, silence, inactivity, or a purchase alone do not constitute consent to marketing.
• Keep consent records. For every recipient you must be able to show what they consented to, when, and how (source URL or form, timestamp, IP address or equivalent evidence). You must produce these records within 72 hours if we request them following an abuse complaint.
• Honour opt-outs immediately. Every marketing message must contain a working, one-click unsubscribe. Unsubscribes are suppressed by the platform automatically; you must not re-import, re-subscribe, or otherwise circumvent a recipient's opt-out.
• Identify yourself. From, To, and Reply-To headers must accurately identify you or the brand you demonstrably send for. A valid postal or business address must appear in every marketing message.
• Sender-domain authentication is mandatory. You may only send from domains you control and have verified in the dashboard (SPF, DKIM, DMARC alignment).

2. Sending thresholds

Your sending must stay within these limits, measured per sending domain and per IP over a rolling window:

The platform's reputation gate may slow or pause a sending stream before these ceilings are reached if bounce or complaint velocity indicates a damaged or stale list. Exceeding the hard-bounce or complaint ceiling is a material breach of this AUP: we may suspend the affected stream or your account without prior warning, and reinstatement requires evidence that the underlying list problem is fixed.

3. Marketing traffic requires a Marketing plan

Bulk and promotional sending is only permitted on an active Marketing plan, which includes the audience, consent, and suppression tooling that lawful bulk sending requires.

• Transactional plans and streams are for triggered, recipient-initiated messages only. Newsletters, promotions, re-engagement campaigns, and any other bulk content sent through a transactional stream may be reclassified, throttled, or blocked.
• We may ask you, before or during onboarding of marketing volume, for a short sending plan: what you send, to whom, list origin and opt-in method, expected volumes, and ramp-up schedule. Sending materially outside an agreed plan is grounds for review.

4. Prohibited content and activities

You may not use the Service to send, link to, or promote:

1. Anything unlawful in the jurisdiction you send from or into, or that facilitates illegal activity;
2. Content that sexualises or exploits minors in any way — zero tolerance; such content is reported to the competent authorities;
3. Phishing, spoofing, or impersonation of any person, brand, or authority; forged headers or transmission information;
4. Malware, viruses, or any code intended to damage or covertly access systems, data, or devices;
5. Content that threatens, harasses, or incites violence or hatred against any person or group;
6. Deceptive commercial practices: pyramid and multi-level marketing schemes, "get rich quick" offers, credit-repair and get-out-of-debt schemes, payday and other predatory short-term loan offers;
7. Counterfeit goods or unlicensed sale of regulated products, including pharmaceuticals;
8. List brokerage, list rental, lead-resale, or the sale of social-media engagement;
9. Pornographic or sexually explicit content, or escort services;
10. Cryptocurrency, forex, or trading promotions, unless we have approved your use case in writing beforehand.

You also may not: send unsolicited bulk email of any kind (including "cold outreach"); use the Service to verify or clean third-party lists; create multiple accounts to evade quotas, thresholds, or a suspension; resell the Service without a written agreement with us; or interfere with the operation of the Service or any other network.

5. iGaming and licensed gambling

Unlike most email providers, Epostix accepts gambling senders — openly and by design, not as a loophole. That acceptance is conditional:

1. You must be licensed. You hold a valid gambling licence for every jurisdiction your email targets, and you can produce evidence of it during onboarding and at any time on request.
2. Dedicated IPs only. Gambling mail is never sent from the shared IP pool. Each brand sends from its own dedicated, isolated IP allocation with its own authentication.
3. Onboarding review is mandatory. Gambling senders are activated only after we have reviewed licences, brands, list provenance, and a sending plan under Section 3.
4. Responsible-gambling and advertising rules apply. Your messages must carry the disclosures your licence requires — responsible-gambling message, age statement, licensee name and licence number — and comply with the advertising codes of each target jurisdiction (for example the UK Gambling Commission's direct-marketing rules and the Malta Gaming Authority's advertising requirements).
5. Granular consent. Marketing to players requires consent that meets the standard of each target jurisdiction, including per-product and per-channel consent where required. Self-excluded players must be suppressed.
6. Jurisdiction-aware targeting. You must not send gambling promotions into jurisdictions where you are not licensed or where such promotions are prohibited.

Breach of any of these conditions is treated as serious abuse under Section 7 and may result in immediate suspension.

6. Dedicated IPs

Dedicated IP allocations remain our property and under our reputation management, and are subject to ongoing review:

• Allocation is conditional on sufficient, consistent volume and on the sending practices described in this AUP; new IPs are warmed up on a managed schedule that you must not attempt to bypass.
• We may throttle, re-warm, or reclaim a dedicated IP whose reputation is being damaged by your sending, or which is left substantially idle.
• IPs may not be used for any traffic other than the brand and streams they were allocated for.

7. Enforcement

We monitor bounce, complaint, block, and engagement signals across the platform. Depending on severity, we may: contact you and require corrective action; throttle or pause individual streams; suspend the account; or terminate the agreement.

For serious abuse — including spam runs to purchased lists, phishing, malware, content under Section 4(2), unlicensed gambling traffic, or any activity exposing us or other customers to legal or reputational harm — we suspend first and investigate second, without prior notice.

Where suspension or termination results from your breach of this AUP: no refund is due for the remainder of any paid period (to the extent permitted by mandatory law), no service credits accrue, and we may refuse reinstatement at our discretion.

You are responsible for use of your account by anyone — authorised or not — including compromise resulting from your failure to secure credentials or systems. If we are legally required to disclose your traffic or content to a competent authority we will do so, and where lawfully permitted we will notify you.

8. Reporting abuse

To report abusive mail originating from our infrastructure, email [email protected] with the full message headers. We investigate every report.

9. Changes

We may update this AUP as abuse patterns and legal requirements evolve. Material changes are announced at least 30 days in advance by email to account owners, except changes required by law or needed to address an immediate risk to the platform, which take effect immediately.