Acceptable Use Policy

Effective 13 October 2026 · Version 2026-10-17

This policy is part of our Terms of Service. It applies to everything sent or done through your account, including by campaigns, team members, and AI tools using your API token.

1. Contact people lawfully

• You must have a lawful basis to email every recipient under the laws that apply to you and to them. Rules differ: some EU countries allow relevant B2B outreach to work addresses with a clear opt-out, while others, including Germany and Latvia, require prior consent for most commercial email, even to businesses. The UK (PECR), the US (CAN-SPAM Act) and Canada (CASL) each set their own requirements. You are responsible for knowing and following them.
• Contact people because of something specific: their website, their articles, their role. Keep a record of why each contact is relevant, and where you found their address.
• When you process recipients' personal data, you are the controller under the GDPR. That includes telling people where you got their data when the law requires it, usually in your first email.

2. Lists you may not use

• Purchased, rented, shared or traded email lists.
• Addresses harvested in bulk with scrapers or guessed by pattern ("dictionary") to blast at volume.
• Addresses of people who opted out of your emails, anywhere.
• Role or distribution addresses where the context makes clear unsolicited email isn't welcome (for example abuse@, postmaster@, or lists marked "no solicitations").

3. Be honest

• Send from your real identity or your organisation's, and make clear who you are.
• Subject lines must reflect the email. Don't fake a reply or a forward ("Re:", "Fwd:") for a first message, and don't invent a previous conversation, a deadline or an invoice.
• No impersonation of people, brands or institutions, and no misleading sender names, headers or links.
• For commercial email where the law requires it (for example under CAN-SPAM in the US and CASL in Canada), include your physical postal address and a simple way to opt out.

4. Respect "no"

• Honour every opt-out, unsubscribe or "please stop" reply promptly, and in any case within 10 business days. Mailpitcher stops follow-ups when someone replies and keeps a suppression list per account: use it.
• Don't re-add people who opted out by importing them again, using another mailbox, or another account.

5. Volume and the guardrails

• Each mailbox has a daily cap (new mailboxes start at 50 a day, then 100 by default) and a gap between sends. Raising them is allowed within the app's limits, but not past what your mail provider permits.
• Don't work around limits: no rotating many accounts or mailboxes to multiply volume to the same audience, no splitting one campaign across accounts, no automation that bypasses the app's checks.
• If your bounce rate, spam-complaint rate or block rate is high, slow down and clean your list. As a guide, complaints above 0.3% of delivered mail (Google's and Yahoo's sender threshold) or bounces above 5% will get our attention.

6. Content that's never allowed

• Phishing, credential harvesting, malware, or links to them.
• Fraud and scams: fake invoices, advance-fee schemes, fake prizes, pyramid schemes, "get rich" and crypto pump schemes.
• Illegal goods or services, or content that breaks the law in the sender's or recipient's country.
• Sexually explicit content, and any sexual content involving minors (reported to authorities).
• Harassment, threats, hate speech, doxxing, or content that incites violence.
• Content infringing someone else's copyright, trademark or privacy.
• Misleading health, financial or legal claims.

7. Using the platform

• Only connect mailboxes you own or are authorised to use.
• Don't try to access other accounts, probe or attack the Service, or overload it (including through the API or MCP server).
• Don't resell or share access to the Service without our written agreement.
• Keep API tokens secret. Whatever a tool does with your token counts as done by you.

8. What we do when this policy is broken

We may, depending on how serious it is: warn you; lower sending caps; pause campaigns; suspend sending; suspend or close the account. We'll usually contact you first and give you a chance to fix things. For phishing, malware, fraud, or high complaint rates that risk our infrastructure or other customers, we may act immediately. We may report illegal activity to the relevant authorities.

9. Report abuse or illegal content

Received an unwanted email sent with Mailpitcher? Send it, with full headers if you can, to abuse@mailpitcher.com. We review every report.

To report content you believe is illegal (for example an image we host for a sender, or an email's content), write to the same address with:

• why you believe it is illegal;
• where it is: the email with its headers, or the exact link to the image;
• your name and email address (not needed for reports of child sexual abuse material);
• a statement that you believe in good faith that the report is accurate and complete.

We confirm we've received it, decide promptly and carefully, and tell you what we decided and how you can challenge it. Decisions are made by a person. The sender is told what we did and why, as described in our Terms of Service.