Legal · updated Sat Jul 11 2026 17:00:00 GMT-0700 (Pacific Daylight Time)

Acceptable Use Policy

PostMTA Hosted is for legitimate transactional and consent-based notification mail only — not bulk spam.

Prohibited

• Unsolicited commercial email (UCE) without prior consent.
• Phishing or smishing payloads.
• Misleading header information (From / Reply-To / Subject).
• Coordinated bulk sending outside consent boundaries (CAN-SPAM, GDPR, CASL, etc.).
• Hosting content that violates export control or sanctions law.

Operator responsibilities

• Maintain valid SPF / DKIM / DMARC for every sender domain.
• Honor unsubscribe within 10 business days (CAN-SPAM) or immediately (GDPR where applicable).
• Use suppression lists fed by FBL ingest (see docs/build/fbl.md).
• Remediate any complaint-rate spike via the policyJobs apply path.

Enforcement

Repeat violations may result in rate-limit, suspend, or tenant termination without refund.