Acceptable use policy

DRAFT — not legal advice. Review with qualified counsel (Indian law: IT Act 2000, DPDP Act 2023; plus GDPR/UK GDPR if serving EU/UK customers) before publishing.

Last updated: [Effective date]

Mail by vizsu is for normal business email: one person writing to people they know or who expect to hear from them. This policy applies to every customer and every mailbox user. Account owners are responsible for their users.

1. Not allowed

Spam and unsolicited mail

• Sending bulk or unsolicited commercial mail, including to bought, rented, scraped or harvested lists.
• Mailing people who have not opted in, or who have unsubscribed.
• Hiding or faking who a message is from, or using misleading subject lines.
• Using Mail by vizsu for newsletters, marketing campaigns or cold outreach at volume. Use a dedicated email marketing service for that.

Phishing, fraud and impersonation

• Pretending to be another person, brand, bank or government body.
• Collecting passwords, payment details or other sensitive data under false pretences.
• Registering lookalike domains of other brands.

Malware and harmful content

• Sending viruses, ransomware, spyware or links to them.
• Content that is illegal in India or where you or your recipients are, including child sexual abuse material, content inciting violence, or infringing material.

Abusing the platform

• Trying to get round sending limits, for example by spreading volume across many mailboxes, aliases, forwards, groups or accounts.
• Open relays, or forwarding mail you do not control in bulk.
• Probing, scanning or attacking our systems or other customers, or bypassing authentication.
• Reselling the service without a written agreement with us.

2. Sending limits

These limits protect deliverability for every customer.

• Each unique To, Cc and Bcc address counts once. Mail forwarded to outside addresses also counts.
• The limits apply the same way to webmail, SMTP/IMAP apps and the API.
• When you reach a limit, further sends are refused until the window rolls forward. Mail you already sent is not affected.
• Business plan limits: [Business sending limit].

3. Automatic protections

We monitor sending and act automatically when we see risk:

• Volume spikes. If a mailbox's sending in 24 hours jumps to more than 5 times its recent daily average and over 100 recipients, sending from that mailbox is suspended.
• Bounces. If more than 5% of an account's recent deliveries hard-bounce, account sending is suspended.
• Complaints. If more than 0.1% of an account's recent deliveries are reported as spam, account sending is suspended.
• Domain screening. Disposable domains and lookalikes of other brands cannot be added.

4. Suspension process

1. Suspend. We, or our automated controls, suspend sending for a mailbox or account. Sending is refused; receiving, reading, signing in and exporting keep working.
2. Notify. The account owner sees a notice in the dashboard [and by email], with the reason.
3. Appeal. Reply to the notice or write to abuse@vizsu.com with what happened and what you have changed (for example, a compromised password reset, a list cleaned).
4. Review. A person reviews the appeal within [2 business days]. We may lift the suspension, lift it with lower limits, or keep it.
5. Escalate. Repeated or serious breaches (phishing, malware, illegal content) can lead to suspending the whole account, then termination under the Terms of service. We may act immediately, without prior notice, where needed to protect people or the service, or where the law requires.

If your account was compromised, tell us. We treat that differently from deliberate abuse.

5. Reporting abuse

Report spam, phishing or other abuse from a Mail by vizsu address to abuse@vizsu.com. Please include the full message headers. We acknowledge reports within [1 business day]. We do not tell the sender who reported them.

Report security vulnerabilities to security@vizsu.com.

6. Cooperation with authorities

We may preserve data and share information with law enforcement or CERT-In where the law requires.

7. Changes

We may update this policy as abuse patterns change. Material changes are announced at least [14] days in advance, except where urgent for security.

---

Placeholders to fill

• [Effective date]
• [Business sending limit]
• Whether suspension notices also go by email ([and by email])
• Appeal review time [2 business days]
• Abuse report acknowledgement time [1 business day]
• Notice period for changes [14] days