- Email only people who asked to hear from you, about what they signed up for.
- Never use bought, rented, shared, scraped or harvested lists, not even “opt-in” ones from someone else.
- No phishing, malware, deception or illegal content, and no URL shorteners or disguised links.
- Every campaign is checked automatically. Emails from new accounts, and anything our checks flag, also get an automated review before sending.
- We pause sending automatically at 3% hard bounces or 0.08% spam complaints, well before it hurts anyone else.
This summary helps you find your way. The full text below is what applies.
01Why this policy exists
Mailbox providers judge senders by their behavior: how many messages bounce, how many people mark them as spam, and whether recipients ever asked for them. Mailmanny sends for many customers through shared infrastructure. A single sender with a bad list can push email from everyone else into spam folders, or get sending stopped altogether.
So we are strict, and we enforce this policy actively. In return, careful senders get a platform with a clean reputation, and their email lands where it should.
02What every sender must do
- Get permission. Every person on your list must have actively asked to receive email from you, for example through a signup form, a checkout checkbox that wasn’t pre-ticked, or an in-person signup they knowingly gave.
- Keep proof. Be able to show when, where and how each person subscribed. Mailmanny records this automatically for signups through our forms and API.
- Use double opt-in. It’s on by default for new audiences. Only switch it off if you have another way to prove consent.
- Send what people signed up for, and send reasonably soon after they subscribe, so they remember you.
- Identify yourself. Use a clear “From” name, a domain you own and have verified, and accurate reply-to and header information.
- Include your postal address and a working unsubscribe link in every marketing email. Mailmanny adds both to every footer and won’t send without them.
- Honor unsubscribes immediately. Mailmanny does this for you the moment someone clicks. Never re-add someone who opted out.
- Keep your list healthy. Remove addresses that bounce (we suppress hard bounces automatically) and stop mailing people who haven’t engaged in a long time, or ask them to confirm again.
- Follow the law wherever you and your subscribers are, including CAN-SPAM, CASL, the GDPR and the UK GDPR.
03Prohibited list practices
You may not upload, import, add by API or email any of the following:
- Purchased, rented, traded or shared lists, including lists sold as “opt-in”, “permission-based” or “GDPR-compliant”. Consent given to another company isn’t consent given to you.
- Harvested or scraped addresses, collected from websites, social profiles, directories, search results, forums or other public sources.
- Generated or guessed addresses, for example name combinations or dictionary attacks against a domain.
- Co-registration, affiliate and lead-generation lists where people didn’t specifically choose to hear from you.
- Role addresses you weren’t invited to email, such as info@, sales@, admin@, support@ or webmaster@ at other organizations. Blasting role addresses is a strong spam signal; only email them if someone there signed up.
- Old or stale lists that haven’t been emailed for a long time (as a rule of thumb, more than two years) without first asking people to confirm.
- People who unsubscribed from you anywhere, or whom another provider suppressed for bouncing or complaining.
- Disposable or temporary addresses added in bulk, and addresses at domains on our denylist.
04Prohibited content
You may not use Mailmanny to send, link to or host:
- Phishing and impersonation: anything that asks people to “verify”, “unlock” or “update” an account or payment details while posing as another organization, or that pretends to come from someone you are not.
- Malware: viruses, spyware, executables, scripts, or links to files such as .exe, .scr or .js and to archives used to deliver them.
- Deceptive messages: misleading subject lines, fake “Re:” or “Fwd:” prefixes, false urgency, “From” names that pose as a brand or a security team, or links whose visible text shows a different site from the one they open.
- Disguised or hidden content: URL shorteners, links to bare IP addresses, hidden text meant to fool spam filters, image-only emails used to dodge them, or embedded forms, scripts and frames.
- Get-rich-quick and financial schemes: pump-and-dump or “guaranteed return” crypto and stock promotions, unregistered securities offerings, forex or trading “signals”, pyramid schemes and multi-level-marketing recruitment.
- High-cost lending and debt schemes: payday loans, debt-relief or credit-repair offers.
- Sexually explicit material and adult services.
- Gambling, including casinos, betting and sweepstakes that require a purchase, except where we have approved a licensed operator in advance.
- Unlawful goods and claims: illegal drugs and drug paraphernalia, prescription drugs offered without a prescription, supplements or treatments with unproven health claims, weapons and explosives, counterfeit goods.
- Hate, harassment and violence: content that promotes violence, or attacks people based on protected characteristics.
- Other people’s rights: content that infringes copyright, trademarks or privacy, or that shares someone’s personal data without permission.
- Anything illegal where you or your recipients are.
05Higher-risk industries
Some legitimate businesses operate in industries that attract a lot of abuse or complaints, such as cryptocurrency, gambling, pharmacies and supplements, dating, affiliate marketing and lead generation. If you work in one of these, we may ask for more information before you can send, keep your account under review longer, or decline the account. That isn’t a judgment on you; it’s how we keep the platform safe for everyone.
06Prohibited technical behavior
- Don’t try to get around sending limits, reviews, pauses or suspensions, including by opening extra accounts or splitting one list across several.
- Don’t send from domains or addresses you don’t control, and don’t forge or alter headers.
- Don’t use transactional API email to send marketing to people who haven’t opted in.
- Don’t share API keys outside your organization, embed them in browsers or apps, or resell sending to others without our written agreement.
- Don’t probe, scan or test the security of Mailmanny, or interfere with its operation, without our written permission. To report a vulnerability, email report@mailmanny.com.
- Don’t use Mailmanny to verify or “clean” lists you don’t have permission to email.
07How we enforce this policy
We use automatic checks at every stage, and tell you the reason for anything we hold:
- Signup vetting. New accounts are scored on how the list was collected, the website and sender domain, expected volume and other risk signals. A purchased, rented or scraped list means immediate suspension; risky accounts are held for an automated review, which may ask you a few questions before you can send.
- A trust ladder. New accounts start with low daily and hourly limits, and every campaign and automation email they send goes through our automated review, as does the first API email of each kind. Limits grow automatically as an account builds a clean record: for example, after at least a week, three approved campaigns and low bounce and complaint rates.
- Automated review. Two independent AI checks read the email as recipients will see it, including its images and the pages its links lead to, and judge it against this policy. Our own rules then make the decision, taking the account’s track record into account: approve it, approve it with a smaller first batch or a slower pace, ask for changes, or refuse it. At every level, something new or unusual for an account, such as a link to an unfamiliar domain or a new sender address, is reviewed too. Nothing under review is sent until it’s approved. If we ask for changes, we tell you why, and you can edit and send again.
- Content scanning. Every campaign and every API email is scanned before it sends. A missing unsubscribe link or postal address, a URL shortener, a deceptive link, a known bad domain or phishing language blocks the send outright. Weaker signals send it to automated review.
- List checks. Imports are checked for invalid, role and disposable addresses and for domains that can’t receive email (see Section 3).
- Canary sends. A campaign first goes to a small slice of its recipients, and the rest is released only if that slice looks clean; otherwise the rest is held for up to 7 days, and you can send it once you’ve cleaned up the list. For newer accounts, and for campaigns that reach contacts from an import our list checks held for review, the slice is 5% (at least 50 people, at most 500) and must show bounces under 2.5% and complaints under 0.1%. Other campaigns that get a canary use a 10% slice and a 4% bounce limit.
- Live monitoring. Bounces, complaints and abuse reports are evaluated continuously, and links in newer accounts’ campaigns are re-checked during a send. A campaign that crosses our limits mid-send, or whose links start leading somewhere else, is paused with the rest of it held, and the workspace’s limits may be reduced.
- Pause and suspension. Workspaces that cross the thresholds in Section 8 are paused automatically. Serious or repeated violations lead to suspension and account closure. We may report illegal activity to the authorities.
Review decisions are logged, and our team can look at any of them again and overturn it. When we block, hold or pause something, we tell you the reason. We may adjust our checks and limits at any time to protect deliverability.
08Bounce and complaint thresholds
Our email provider can review an entire sending account when bounces approach 5% or spam complaints approach 0.1%. Our own limits sit well below that, so one sender is stopped long before they can affect anyone else.
| Signal | Campaign stopped mid-send | Workspace paused automatically |
|---|---|---|
| Hard-bounce rate | Over 5% (after 100 results), or 10% or more after the first 50 sends | Over 3% of emails sent in the last 7 days (at least 200 sent) |
| Spam-complaint rate | Over 0.1% (after 100 results) | Over 0.08% of emails delivered in the last 7 days (at least 200 sent) |
| Abuse reports | — | 3 open reports within 24 hours |
Bounce rate counts permanent (hard) bounces only. Complaint rate counts recipients who marked a message as spam with their mailbox provider.
09If your sending is paused
When your sending is paused, you’ll see the reason in the app and receive an email. Queued messages wait; nothing is lost or sent while you’re paused. Your workspace is reviewed automatically and may move to lower limits.
If the pause was caused by bounces, complaints or abuse reports and the review finds no abuse, we archive the contacts most likely behind the problem (such as recently imported contacts who never opened an email), tell you exactly what we archived, and resume sending automatically after a cool-down. If the review needs more from you, it tells you what to clean up, and you can resubmit from the app. Limits lowered because of bounces or complaints recover step by step while your sending stays clean.
If your sending doesn’t resume automatically, or you think we got something wrong, reply to our email or write to report@mailmanny.com. Tell us where the affected addresses came from. We review every appeal by hand. If a pause or block was a mistake, we’ll lift it and say so.
10Reporting abuse
Received email through Mailmanny that you didn’t ask for, or that looks like phishing? Please tell us. Every email sent through Mailmanny includes a link to our report abuse form, which identifies the exact message and sender for us automatically. You can also use the form directly, or email report@mailmanny.com with the full message headers attached.
Every report triggers an immediate health check of the sender’s account. Three open reports about the same sender within 24 hours pause their sending automatically. To simply stop receiving a sender’s email, use the unsubscribe link in the message: it works instantly.
11Changes to this policy
We update this policy as abuse patterns and laws change, and the “Last updated” date at the top shows the current version. We’ll give account holders notice of material changes by email or in the app.
