Acceptable Use Policy
Last updated 18 October 2026
Waymail sends, receives and forwards email through infrastructure shared by its customers. Mailbox providers decide whether that infrastructure's mail reaches the inbox by how everyone on it behaves — so these rules protect every customer's deliverability, not only yours. They are part of our Terms of Service, and apply to everyone using a workspace, including a platform's own customers. Receiving unsolicited mail by itself is not a breach of this policy; using the service to create or relay abuse is.
Send only email people asked for
- Every recipient must have given you permission to email them — by signing up, by buying from you, or through another relationship the law recognises for the kind of email you send. For marketing email, that permission must meet the law in the recipient's country; in the EU and EEA, that usually means consent.
- Transactional email — receipts, password resets, account notices — must be genuinely transactional. Marketing dressed up as a receipt is marketing.
- Do not send to purchased, rented, shared, scraped or harvested lists, to addresses appended from other sources, or to addresses made up by guessing.
- Re-confirm people who have not heard from you in a long time before you email them again. We recommend confirmed (double) opt-in for marketing lists.
Receive and forward only where authorised
- Use receiving domains and addresses you control or are authorised to operate.
- Forward only to a mailbox whose holder has authorised the arrangement, and complete destination verification. A verification code proves mailbox access, not consent to marketing or permission to disclose the original sender's information. Keep the required lawful basis and privacy information for incoming mail and its disclosure.
- Do not use catch-all rules, forwarding chains or automatic replies to relay spam, hide its origin, create loops, flood mailboxes or bypass authentication, suppression or sending restrictions. Forwarding is subject to authentication and safety checks and can be withheld.
- Do not treat a message you receive as permission to add its sender to marketing lists. Responsibility for marketing you originate remains yours; forwarding another person's email does not rewrite that person's identity or grant rights in its content.
Make it easy to leave, and honour it
-
Marketing email must let its recipient unsubscribe. Waymail adds an unsubscribe link and a one-click
List-Unsubscribeheader to marketing email; do not remove or obstruct them. - Marketing email must say who sent it and where they can be reached by post. Give your organisation's real postal address in your workspace's settings; Waymail prints it in every marketing email that does not already state it, and refuses marketing email from a workspace that has not given one.
- Honour opt-outs that reach you any other way promptly, and within the time the law allows.
- Do not email an address that has unsubscribed, bounced or complained again without new, verifiable permission. Removing an address from your suppression list is recorded in your workspace's audit log.
Be who you say you are
- Send only from domains you own or are authorised to use, and keep them verified.
- The From name and address, the reply-to address and the subject must not be false or misleading.
- Marketing email must identify the sender, with a valid postal address where the law requires one.
- Do not impersonate another person, company or brand.
Prohibited content
Do not use Waymail to send, link to or promote:
- anything that is illegal where you or your recipients are, or that helps someone break the law;
- phishing, credential harvesting, or any other deception designed to obtain information or money;
- malware or spyware, or links to either;
- child sexual abuse material — we report it to the authorities;
- sexually explicit material;
- threats, harassment, or content that incites violence or hatred against people for who they are;
- content that infringes someone else's intellectual property or privacy;
- scams and schemes: “get rich quick” offers, pyramid schemes and recruitment for multi-level marketing, and unlicensed financial, investment, cryptocurrency, debt-relief or credit-repair offers;
- goods or services that are unlawful to promote to the recipient, such as unlicensed medicines, drugs, weapons or unlicensed gambling; or
- affiliate or lead-generation email to people who did not ask you, specifically, for it.
Bounce and complaint limits
A high bounce rate means a list nobody has looked after; a high complaint rate means people are receiving mail they did not want. Amazon reviews an account whose bounce rate passes 5% or whose complaint rate passes 0.1%, and one workspace's list can put everyone's sending at risk — so Waymail acts first, and on that workspace alone.
We measure each workspace over a rolling 7 days, once it has sent at least 50 messages in that time. The bounce rate is bounces divided by messages sent; the complaint rate is spam complaints divided by messages delivered.
| Level | Bounce rate | Complaint rate | What happens |
|---|---|---|---|
| Warning | 2.5% | 0.1% | Recorded in your audit log and flagged to us, so the list can be fixed before it gets worse. |
| Restricted | 5% | 0.3% | Sending is limited to 500 messages a day — enough for receipts and password resets, not for a bulk send. |
| Suspended | 10% | 0.5% | Sending stops until the cause has been dealt with, together with us. |
Complaints are checked first, and either rate on its own is enough. Aim well below the warning level: a list that is looked after typically bounces under 1%.
Use the service as it is meant to be used
- Do not try to get around sending limits, the protections above or your suppression list — including by spreading sending across several workspaces, domains or accounts.
-
Test with the Amazon SES mailbox simulator's addresses, such as
success@simulator.amazonses.com, rather than with invented addresses at real domains. - Do not probe, scan or load-test the API, try to reach another customer's data, or interfere with the service. Report security problems to hello@waymail.app.
- Do not publish, share or embed API keys in code that runs in a browser or an app.
Enforcement
We look into every report and signal of abuse. Depending on how serious it is, we may warn you, restrict or suspend your sending, suspend your workspace, or end your use of Waymail — without notice where the harm calls for it. We report illegal activity to the authorities when the law requires or allows it, and respond to lawful requests from them.
Copyright complaints
Waymail stores and delivers customer email, including received messages, forwarding copies, templates and attachments. If you believe something stored on, sent or forwarded through Waymail infringes your copyright, send a notice to our copyright agent:
Copyright Agent, Gundhus AS
Hellvikskogsvei 93, 1459 Nesodden, Norway
hello@waymail.app,
with “Copyright notice” in the subject
A notice we can act on has:
- your signature, physical or electronic, or that of somebody authorised to act for the copyright owner;
- the work you say has been infringed, or a representative list if there are several;
- the material you say infringes it, and enough to find it — for an email, the whole message with its headers, which are what let us find the workspace that sent it;
- your name, postal address, telephone number and email address;
- a statement that you believe in good faith that the use is not authorised by the copyright owner, its agent or the law; and
- a statement that the notice is accurate and, under penalty of perjury, that you are the owner or are authorised to act for them.
When a notice is complete we remove the material or stop it being sent, and tell the customer it came from. They may answer with a counter-notice to the same address: their signature, the material and where it was, a statement under penalty of perjury that they believe in good faith it was removed by mistake or misidentification, their name, address and telephone number, and their consent to the jurisdiction of the federal district court for their address — or, outside the United States, of any district in which we may be found — and to accept service from whoever sent the notice. We pass a counter-notice on, and restore the material after 10 to 14 business days unless we are told a court action has been filed. We close the workspaces of customers who infringe repeatedly.
Reporting abuse
If you received unwanted email sent through Waymail, or believe someone is misusing it, write to hello@waymail.app with “Abuse report” in the subject, and include the whole message, headers and all: the headers are what let us find the workspace that sent it.