DRAFT: review [TO CONFIRM] items and have counsel check before publishing
Last updated: [date of publishing]
SendLit helps you send email through your own email provider. Spam and abuse hurt recipients, damage sending reputation and can get you, your provider and SendLit blocked. This policy applies to everyone using the hosted SendLit service at app.sendlit.app and is part of our Terms of Service. Self-hosted installations aren't subject to our cloud controls, but you're still responsible for following the law.
Only email people who have clearly agreed to hear from you, or where you otherwise have a lawful basis under the laws that apply (such as CAN-SPAM, GDPR and ePrivacy, and CASL).
Don't upload or email purchased, rented, borrowed, shared, harvested or scraped lists, or addresses collected for a different purpose.
Keep a record of how and when each contact subscribed, and be able to show it if asked.
Remove addresses that bounce, complain or ask to stop.
Include a working unsubscribe link. SendLit adds an unsubscribe link and a one-click unsubscribe header to marketing email. Don't remove or hide them, and honor every unsubscribe. SendLit stops sending to unsubscribed addresses automatically; if someone asks you another way, unsubscribe them promptly (within 10 business days at the latest).
Show a valid physical postal address for you or your business in the footer. Add it in your team's settings.
Identify you honestly. Use accurate From names, From addresses, reply-to addresses and routing information.
Have honest subject lines that reflect the content of the email.
Be identifiable as marketing where the law requires it.
spam, or bulk email to people who didn't ask for it;
phishing, or anything that impersonates another person, brand or organization or tries to collect passwords or financial details by deception;
malware, viruses or links to them;
content that promotes or sells illegal goods or services, or that is otherwise illegal where you or your recipients are;
content that infringes someone else's copyright, trademark or other rights;
hateful, harassing, threatening or violent content, or content that exploits minors in any way;
adult or sexually explicit content [TO CONFIRM: whether adult content is fully prohibited or allowed with restrictions];
get-rich-quick schemes, pyramid schemes, deceptive financial offers or other scams [TO CONFIRM: any other restricted industries, for example gambling, cannabis, crypto or debt collection].
Also don't use SendLit to forge headers, hide where email comes from, get around our limits, test lists for valid addresses, or overload or attack our systems or anyone else's.
Once a team has sent at least 500 accepted messages in a rolling seven-day window, SendLit monitors its bounce and complaint rates. We may take these actions when a team crosses these thresholds:
Bounce rate of 2% or more, or complaint rate of 0.05% or more: we may warn the team's owners and admins.
Bounce rate of 5% or more, or complaint rate of 0.1% or more: we may pause broadcasts and sequences. Transactional email may continue at a reduced daily limit.
Complaint rate of 0.3% or more, or 10 or more complaints in seven days: we may stop all new sending for the team until we've reviewed it.
Small lists aren't judged on percentages alone. We may also act on other signs of abuse, such as spam-trap hits, blocklistings, sudden list growth or reports from recipients or providers.
New paid organizations ramp up marketing volume gradually over their first two weeks. Cloud sending also requires a verified account email and, after about 100 messages, a verified From domain.
If we believe this policy has been broken, we may, depending on how serious it is:
contact you and ask you to fix the problem;
limit sending, pause campaigns or stop all sending for a team;
remove content or require you to remove contacts;
suspend or close your account, without a refund where the law allows [TO CONFIRM: no refund on suspension for abuse];
report illegal activity to the authorities where the law requires.
A full stop on sending isn't lifted automatically. A SendLit team member reviews the account before sending resumes. We'll try to warn you first, but we may act immediately to protect recipients, providers or the Service.
If you received spam or a phishing email sent through SendLit, please tell us at [TO CONFIRM: abuse@sendlit.app]. Include the full email with its headers if you can. You can also use the unsubscribe link in the email to stop receiving messages from that sender.
To report a security vulnerability, use GitHub's private security advisories at github.com/codelitdev/sendlit/security/advisories/new.
We may update this policy as email standards and laws change. When we do, we'll update the date at the top and notify account owners of significant changes.