Acceptable Use Policy

Last updated: June 3, 2026

This policy says what you may and may not do with Sendie. It supplements the Terms of Service. It doesn't replace them. The short version: send commercial mail to people who want it, only to lists you obtained lawfully, and don't try to break or game the platform. We enforce this policy by suspending or terminating accounts that violate it.

1. Scope & enforcement
2. Lawful basis & consent
3. Prohibited list sources
4. Prohibited content
5. Prohibited behavior on the platform
6. Sending hygiene & thresholds
7. High-risk industries
8. Security & integrity
9. Account-level abuse
10. What happens when you violate
11. Reporting abuse
12. Contact

1. Scope & enforcement

This Acceptable Use Policy (the "AUP") applies to every account on Sendie and to every message sent through the Service. It is incorporated by reference into the Terms of Service; a violation of this AUP is a violation of those Terms.

We enforce this policy at our discretion. Enforcement steps may include, depending on the severity of the violation, a private warning, an automatic sending pause, a credit clawback, account suspension, account termination, and reporting to law enforcement or to your SMTP provider. We do not commit to a specific escalation ladder; serious violations may result in immediate termination without prior notice.

We do not pre-screen the messages you send and we have no general obligation to monitor your campaigns. We rely on bounce/complaint signals, recipient reports, third-party complaints, and our own periodic review to enforce this policy.

2. Lawful basis & consent

You may only send commercial mail through Sendie to recipients you have a lawful basis to contact under the laws that apply to you and to them. The relevant frameworks include, without limitation, CAN-SPAM (US), GDPR and PECR (EU/UK), CASL (Canada), CCPA/CPRA (California), and equivalent law in your recipient's jurisdiction.

You must, at minimum, in every commercial message:

• Use a truthful "From" name, subject line, and reply-to address: no impersonation, no misdirection, no false claims of affiliation.
• Include a clear, working, one-click unsubscribe mechanism where required by law.
• Identify yourself or your business and include a valid physical postal address where required (CAN-SPAM §5(a)).
• Honor unsubscribe requests within 10 business days at most, and never sell or transfer the unsubscribed address to any other party for marketing.
• Maintain your suppression list and respect it across all of your future campaigns.

For B2B contacts in the EU/UK relying on legitimate interest, you must be able to articulate the balancing test for that contact: the legitimate interest you are pursuing, why it is necessary, and why it is not overridden by the recipient's rights and freedoms. "Their company exists, therefore I can email them" is not a balancing test.

For B2C contacts and for contacts in jurisdictions that require consent (e.g. Canada under CASL), you must have explicit consent and be able to prove it on request. The burden of proof is on you, not us.

3. Prohibited list sources

You may not upload, import, paste, sync, or otherwise submit contact data obtained from any of the following sources:

• Third-party B2B data providers, in breach of their terms. This includes, without limitation, contact lists exported, scraped, or otherwise extracted from Apollo, ZoomInfo, Cognism, Lusha, RocketReach, LinkedIn Sales Navigator, Seamless.AI, UpLead, Clearbit, Hunter, or any similar platform, in breach of that platform's terms.
• Scraped data from any website where the scraping itself violated the site's terms or applicable law (computer-misuse statutes, copyright, database rights). The fact that data is "publicly visible" on the open web is not a license to harvest it at scale.
• Lead lists purchased from brokers who cannot provide a documented chain of consent or lawful-basis provenance. "We sold it to him, he sold it to her, she sold it to you" is not provenance.
• Data exported from a prior employer's CRM after your employment ended, unless you have explicit written permission to take that data with you.
• Data obtained through phishing, social engineering, or credential abuse of any third-party service.
• Data scraped from Sendie itself: see §8.

If you cannot answer the question "where did you get this list and what gave you the right to use it" with a clear, documented answer, do not upload it.

4. Prohibited content

You may not use Sendie to send:

• Illegal content. Anything that violates the law in your jurisdiction or your recipient's, including incitement, child sexual abuse material, content that promotes terrorism, hate speech where prohibited, or content that infringes intellectual property.
• Deceptive content. Phishing, fake invoices, fake-sender impersonation of real people or companies, deceptive subject lines designed to trick the recipient into opening, "you've won" / lottery scams, or any message whose primary purpose is to manipulate the recipient via deception.
• Malware delivery. Attachments or links containing viruses, ransomware, spyware, trojans, keyloggers, or any other malicious code. Links to phishing landing pages count as malware delivery for purposes of this policy.
• Harassment. Repeated messages to recipients who have asked you to stop. Threats, doxxing, intimidation, or coordinated harassment campaigns.
• Pyramid / Ponzi schemes, get-rich-quick offers, and similar high-fraud-risk solicitations.
• Defamatory content about identifiable individuals or businesses.
• Misleading medical, financial, or legal advice presented as if from a licensed professional when you are not one.

5. Prohibited behavior on the platform

You may not:

• Use the Service to deliver email on behalf of someone who is themselves prohibited from using the Service (e.g. circumventing a previous termination).
• Operate multiple accounts to evade rate limits, credit caps, suspension, or any other enforcement.
• Sell, transfer, sublicense, or otherwise make your Sendie account available to any third party. Each account is for a single user.
• Attempt to reverse engineer the Service, decompile it, extract its source code, or recreate its features for a competing product.
• Use automated tools to scrape data from the Service (other users' data, the central contact pool, search results, etc.).
• Probe, scan, or test the security posture of the Service without our prior written authorization. We do not currently operate a public bug-bounty program: contact us at the address in §12 if you believe you have found a vulnerability and we will respond.
• Use the Service to compete directly with Sendie (e.g. building a database of our users by scraping our public pages).

6. Sending hygiene & thresholds

Even where your list and content are lawful, you must maintain reasonable sending hygiene. Specifically:

• Verify before you send. If you have not verified the list in the last 90 days, run it through the Verify pane (or an equivalent tool) before launching a campaign. Stale lists bounce heavily and damage everyone's deliverability.
• Honor unsubscribes immediately. The suppression list is per-account and automatic; do not attempt to bypass it by uploading the same address from a different angle or re-typing it.
• Throttle responsibly. Use the pacing knobs as intended. Don't try to maximize throughput at the cost of your SMTP provider's rate limits: your provider will suspend you and we cannot get you reinstated.
• Warm up new sending domains. Do not blast a brand-new domain or a brand-new SMTP account at full volume on day one. Use the warm-up best practices in our docs.

Threshold-based automatic action. We monitor aggregate bounce and complaint rates per account. Accounts that consistently exceed industry-norm thresholds (typically: hard-bounce rate above ~8% or spam-complaint rate above ~0.5% over a meaningful sample of sends) may have their sending automatically paused pending review. The thresholds are not negotiable on a per-account basis; they are deliverability-hygiene defaults that protect the platform.

7. High-risk industries

The following industries are not permitted on the Service by default. Sending in these categories without prior written permission is a violation of this AUP:

• Adult content, pornography, or sex work.
• Gambling, online casinos, sports betting.
• Controlled substances, including cannabis (regardless of legality in your jurisdiction), psychedelics, prescription medication, or research chemicals.
• Firearms, ammunition, or weapons sales.
• Cryptocurrency token sales, ICOs, "airdrops," or high-risk financial speculation marketed to retail investors.
• Payday lending, debt collection, or other regulated consumer-credit activity.
• Multi-level marketing ("MLM") recruitment.

If your business is in one of these categories and you believe you have a legitimate use case, contact us at abuse@sendie.ai before signing up. We may permit specific use cases on a case-by-case basis with additional contractual terms; we will not approve them after the fact in response to a suspension.

8. Security & integrity

You may not take any action intended to interfere with the security or proper functioning of the Service. Specifically:

• Do not attempt to bypass authentication, rate limits, credit caps, daily caps, or any other enforcement mechanism.
• Do not attempt to access another user's account, data, or session.
• Do not attempt path traversal, SQL injection, cross-site scripting, or other web-app exploits against the Service.
• Do not run distributed denial-of-service (DDoS), application-layer flood, or any other capacity-exhaustion attack.
• Do not embed automated traffic generators that act in our name (e.g. headless browsers that look like real users).
• Do not use our brand, logo, sender identity, or product name in any way that implies endorsement we did not give.

If you believe you have found a security vulnerability, report it to security@sendie.ai rather than exploiting it. We respond to good-faith reports.

9. Account-level abuse

Each account is for a single individual or organisation. You may not:

• Mint multiple accounts to game free credits. Signing up with Gmail address aliases (jane+1@, jane+2@, …), disposable domains, or otherwise duplicate identities to claim the welcome credit grant multiple times is a violation of this AUP. We may revoke duplicated credits and suspend the underlying identity.
• Trade or sell Sendie accounts. Accounts are non-transferable. Do not advertise, sell, or otherwise dispose of an account to a third party.
• Operate an account on behalf of a previously-terminated user. If your account was terminated for an AUP violation, you may not return under a different identity.
• Use the Submit Lead flow or the contact-data contribution toggle to launder data you obtained in violation of §3. Submitting Apollo-exported records as "self-researched" is a misrepresentation of source and a violation of this AUP.

10. What happens when you violate

Our enforcement is graduated but discretionary. Typical actions:

• Automatic sending pause. Triggered by bounce/complaint thresholds, suspicious sending patterns, or third-party complaints. You can usually unpause after acknowledging the cause and making a documented change to your sending practice.
• Credit clawback. Credits granted as a result of a violation (e.g. duplicated welcome grants from §9, kickbacks on scraped lists submitted under a false source) may be reversed.
• Feature gating. For specific abuse vectors (e.g. excessive verification of low-value addresses), we may temporarily disable specific features on an account while leaving the rest of the account active.
• Suspension. Account is locked, sending stops, login is disabled. You may contact us at the address in §12 to dispute. Most suspensions are temporary pending review.
• Termination. Reserved for serious or repeated violations. Account is deleted in accordance with our Privacy Policy retention schedule.
• Reporting. We may report violations to law enforcement, to your SMTP provider, to affected data providers, or to other relevant parties as required by law.

We do not commit to any specific escalation path. Severe violations, phishing campaigns, malware delivery, harassment, security attacks, typically result in immediate termination without prior warning.

11. Reporting abuse

If you believe a Sendie user is violating this policy, sending you spam, phishing you, harassing you, or otherwise misusing the Service, report it to abuse@sendie.ai. Useful information to include:

• The full email message including all headers (most email clients have a "show original" or "view source" option).
• The "From" address and any reply-to address.
• The date and time you received the message.
• If applicable: a screenshot of the unsubscribe link, the landing page, or other context.

We investigate every abuse report and respond within 5 business days. Severe reports (active phishing, security incidents) are escalated immediately. We will not retaliate against good-faith reporters.

12. Contact

Questions about this AUP, or believe enforcement was applied to you in error? Email abuse@sendie.ai. For security vulnerabilities, security@sendie.ai. For general account questions, support@sendie.ai.