Acceptable Use Policy

Placeholder pending legal review. The standards below reflect how the product is actually built and how we intend to operate; the binding wording must be finalised with counsel before launch.

The permission standard

You may only send marketing email to people who have given you permission to do so, and you must be able to evidence that permission. This is not a preference we express — it is enforced by the product. Bounce, complaint, and unsubscribe processing cannot be disabled on any plan, by any administrator, at any time.

Prohibited sources of addresses

• Purchased, rented, leased, or otherwise acquired third-party lists.
• Addresses harvested or scraped from websites, directories, or public records.
• Addresses guessed, appended, or generated algorithmically.
• Addresses collected for one purpose and used for an unrelated one without fresh consent.
• Addresses transferred from another party without a lawful basis and evidence covering the transfer.

Prohibited content and conduct

• Unlawful content, or content that infringes another party's rights.
• Phishing, credential harvesting, or impersonation of another person or organisation.
• Malware, malicious links, or deceptive redirects.
• Falsified header information, misleading subject lines, or a from-address designed to obscure the sender's identity.
• Omission of a working unsubscribe mechanism, or failure to honour one promptly.
• Omission of the sender's legal identity and postal address where required.
• Circumventing, or attempting to circumvent, suppression lists, frequency caps, or consent enforcement.
• Sending to addresses you know or ought reasonably to know are spam traps.
• Content that harasses, defames, or promotes violence or discrimination against any person or group.

Restricted categories

Certain categories carry elevated abuse and complaint risk and may require prior discussion, additional evidence of consent, or dedicated sending infrastructure. These typically include adult content, gambling, cryptocurrency and other high-risk financial promotion, pharmaceuticals and supplements, debt relief, lead generation for third parties, and multi-level marketing.

Technical and platform conduct

• Do not attempt to access data belonging to another tenant or brand.
• Do not attempt to reach secret, credential, or internal resources through the API.
• Do not probe, scan, or load-test the platform without prior written permission.
• Do not share API keys, or use a key outside the scopes and brand restrictions it was issued for.
• Do not use the platform to relay mail on behalf of a party who would themselves be in breach of this policy.

Deliverability obligations

Because you send on your own provider account, your sending practices affect your reputation first. They also affect the platform's standing with providers and with your recipients. You are expected to:

• Verify each sending domain and maintain correct SPF, DKIM, and DMARC alignment.
• Warm new domains and IPs rather than starting at full volume.
• Import suppressions before contacts on any migration.
• Maintain a hard bounce rate below 2% and a complaint rate below 0.1%.
• Sunset persistently unengaged contacts rather than continuing to mail them.

Monitoring and enforcement

The platform records risk events, system incidents, and per-domain reputation. Where signals indicate a breach of this policy, we may contact you, require remediation, rate-limit or suspend sending, or terminate the account. We will act proportionately and, wherever it is safe and lawful to do so, we will tell you what we are doing and why before we do it.

Serious breaches — phishing, malware, and illegal content — may result in immediate suspension without prior notice.

Reporting abuse

If you believe mail sent through SendNectar breaches this policy, email [email protected] with the full message headers where possible. We investigate every report.