Acceptable Use Policy

Draft of 25 October 2026

Postilon is for email that recipients expect from you. Every customer shares our sending reputation, so one sender's spam can block everyone's receipts and login codes; this policy is how we prevent that. It is part of the Terms of Service.

1. What Postilon is for

Transactional email: messages a person expects because of something they did or an account they have with you, such as sign-up confirmations, one-time codes, password resets, receipts, invoices, shipping updates and account alerts. Marketing, newsletters, promotions and other bulk email are not allowed, even to people who opted in.

2. What you must not send

Unsolicited email: cold outreach, or any mail to people who did not give you their address for this purpose.
Mail to bought, rented, shared, scraped or harvested lists, or to addresses appended from other sources.
Phishing, malware, links to malicious sites, or mail that impersonates another person, brand or authority.
Mail from domains or addresses you do not own or have permission to use, or with forged or misleading headers, sender names or subject lines.
Fraud and scams, including fake investment, cryptocurrency, prize and loan offers, and pyramid or Ponzi schemes.
Content that is illegal where you or your recipients are, including child sexual abuse material, illegal gambling, illegal drugs, weapons sales, counterfeit goods, and pornography or adult content.
Content that promotes violence, terrorism, or harassment or hatred against people for who they are.
Mail that breaches anti-spam or privacy laws, such as UU ITE and UU PDP in Indonesia, the PDPA and Spam Control Act in Singapore, CAN-SPAM in the US, and the GDPR and ePrivacy rules in the EU and UK.

Send only to people who gave you their address and would expect your message.
Keep proof of how and when each recipient's address was collected, and give it to us on request.
Honour unsubscribe requests at once. Postilon adds one-click unsubscribe headers and suppresses unsubscribed addresses; do not send to them again from another account or service.
Remove addresses that bounce. Do not re-add suppressed addresses to get around the suppression list.

4. Healthy sending

Keep bounces below 2% and spam complaints below 0.1% of the mail you send. At 5% bounces or 0.3% complaints over 24 hours (minimum 100 emails), sending pauses automatically until we review it.

5. Using the platform fairly

Do not open several accounts or workspaces to collect free credits again, or to get around a sending limit or a pause.
Do not share API keys or SMTP credentials outside your organisation, or let others relay mail through your account.
Do not probe, scan, overload or attack Postilon, or test our limits without our written permission.
Do not resell the service or use it to build a competing email service without our agreement.

6. What we do about breaches

Depending on how serious and how repeated a breach is, we may warn you, lower your sending limit, pause sending, suspend or close your account, and report illegal activity to the authorities. Credits are not refunded when an account is closed for breaching this policy. We review paused workspaces and tell you what we found.

7. Reporting abuse

If you receive unwanted or harmful email sent through Postilon, write to abuse@postilon.com with the full message headers. We aim to act within [1 business day].