Acceptable Use Policy
Last updated: 28 October 2026
These terms are provided by Studio 404 d.o.o., Gradišče 15c, 1360 Vrhnika, Slovenia, EU, VAT ID SI42531357 ("SpacePost", "we", "us"), contact: legal@spacepost.dev.
This policy applies to everyone who sends email through SpacePost by API, SMTP or the dashboard. It exists to protect recipients and to keep sending reputation healthy for every customer on shared infrastructure. It forms part of the Terms of Service. You are responsible for all email sent with your account and API keys, including by people and software you authorise.
1. Consent and lists
- Send only to recipients who have asked to receive your email, or who have a clear existing relationship with you and would reasonably expect it (for example, a receipt after a purchase or a password reset they requested).
- Marketing and bulk email requires prior, provable opt-in consent. Keep a record of when and how each recipient consented and be able to show it to us on request.
- No purchased, rented, scraped, harvested or third-party lists of any kind, and no addresses guessed or generated by combining names and domains.
- Do not send to role accounts or addresses you have no reason to believe belong to a person who expects your mail.
- Do not use a recipient's address for something other than what they signed up for.
2. Unsubscribe and suppression
- Every bulk, marketing or subscription email must include a visible, working unsubscribe link. Broadcasts sent through SpacePost add one-click unsubscribe headers (RFC 8058) automatically; if you send bulk email through the API or SMTP, you must add them yourself.
- Honour opt-outs promptly, and no later than ten days after the request. SpacePost suppresses hard bounces and complaints automatically; you must not try to bypass or clear the suppression list to re-send to those addresses.
- Identify yourself accurately: the From name, address and subject must not be misleading, and bulk mail must include a valid physical sender address where the law requires it.
3. Bounce and complaint thresholds
We monitor delivery health per team. To protect recipients and our shared infrastructure, we apply these automatic and manual controls:
| Measure (recent sends) | Threshold | What happens |
|---|---|---|
| Bounce rate | Above 5% (with at least 10 bounces) | Sending is paused automatically and we contact you. |
| Complaint rate | Above 0.2% (with at least 3 complaints) | Sending is paused automatically and we contact you. |
Thresholds are measured over your most recent sends and may be adjusted to keep us well inside the limits of our email provider. A pause may be lifted once you have shown us what went wrong and fixed it. Repeated or severe breaches, or any abuse we judge to be deliberate, lead to suspension or termination of the account without refund.
4. Prohibited content and conduct
You must not use SpacePost to send or facilitate:
- Unsolicited commercial email (spam), chain letters, or pyramid and multi-level-marketing schemes.
- Phishing, impersonation, spoofing of another sender or domain, or messages meant to deceive recipients into revealing credentials or payment details.
- Malware, viruses, or links and attachments intended to harm devices or data.
- Illegal content, or content that exploits or endangers children, incites violence or hatred, harasses or threatens individuals.
- Fraud, scams, get-rich-quick or "work from home" offers, illegal gambling, and the sale of counterfeit or illegal goods, drugs or weapons.
- Content that infringes intellectual property, or personal data sent without a legal basis.
- Adult content or other regulated goods and services that we have not specifically approved in writing.
- Cold outreach to purchased contact data, or "email appending" and similar practices.
You also must not: send from domains you do not control; attempt to evade rate limits, sandbox restrictions or suppression; share API keys to resell access to the service without our agreement; probe or disrupt our systems; or use the service in a way that violates applicable law, including the GDPR, the ePrivacy Directive, CAN-SPAM, and equivalent laws.
5. Sandbox for new accounts
New accounts are limited to verified domains and a low daily volume during an initial period. This is not a penalty; it is how we protect shared reputation. Trying to circumvent it, for example by creating multiple accounts, is a breach of this policy.
6. Attachments and file delivery
SpacePost is for transactional and marketing email, not for bulk file delivery. Each email, including its attachments and inline images, may be up to 40 MB. We don't charge for attachments on standard plans. If your attachment volume is unusually high relative to your email volume (for example, large files sent to many recipients as a way to distribute them), we may contact you to discuss a custom plan or a better way to deliver those files, such as a download link.
7. Enforcement
We may investigate suspected breaches and, without prior notice where the risk justifies it, pause sending, remove content, suspend or terminate accounts, and report unlawful activity to authorities. We review message metadata and delivery events to enforce this policy and may review message content where needed to investigate a complaint or abuse. Where practical we will tell you what we found and give you a chance to fix it.
8. Reporting abuse
If you receive unwanted email sent through SpacePost, report it to abuse@spacepost.dev with the full message headers. Security vulnerabilities go to security@spacepost.dev.