Acceptable Use Policy

1. Purpose

This Acceptable Use Policy ("AUP") sets out the rules for sending email through MunchReach. It exists to protect the deliverability and reputation of shared sending infrastructure for every customer, and to keep recipients' inboxes free of unwanted or unlawful email.

This AUP is part of, and incorporated into, our Terms of Service.

2. Permitted use

Business-to-business outreach with a lawful basis and a genuine offer relevant to the recipient.

Recruiting outreach to candidates whose professional contact details are publicly available or were provided directly to you.

Follow-ups to prospects who have engaged with your product or previously opted in, and who have not opted out.

Verified lists that you or your organisation sourced, enriched, or collected directly, with an accurate record of provenance.

3. Consent and lawful basis

You must have a lawful basis to contact every recipient before sending, and you must be able to demonstrate that basis on request.

Acceptable lawful bases include legitimate interest for relevant B2B outreach, prior consent, or an existing business relationship, depending on the recipient's jurisdiction.

You may never purchase consent verification after the fact — the lawful basis must exist before the first message is sent.

4. CAN-SPAM requirements (United States)

Every commercial message must use accurate header information, a non-deceptive subject line, and clearly identify itself as an advertisement where applicable.

You must include a valid physical postal address and a clear, working opt-out mechanism in every message.

Opt-out requests must be honoured within 10 business days, and you may not charge a fee, require login, or require any information beyond an email address to process an opt-out.

5. GDPR and CASL requirements (EU/UK/Canada)

For recipients in the EU/UK, you must complete a documented legitimate-interest balancing test before relying on legitimate interest as your lawful basis, and must honour objections immediately.

For recipients in Canada, CASL requires either express consent, implied consent from an existing business relationship, or a limited statutory exemption, along with sender identification and an unsubscribe mechanism in every message.

You are solely responsible for determining and documenting the correct lawful basis for each jurisdiction you contact.

6. Prohibited content

Phishing, malware, or messages designed to harvest credentials or install software without consent.

Cryptocurrency solicitation, get-rich-quick schemes, adult content, or the sale of illegal goods or services.

Content that is defamatory, harassing, discriminatory, or that promotes violence or self-harm.

Deceptive subject lines, forged headers, or sender identities designed to impersonate another person or organisation.

7. Prohibited sending practices

Ignoring opt-out requests, re-adding suppressed addresses, or removing unsubscribe links from templates.

Sending at volume to catch-all domains, role addresses without a legitimate business purpose, or known spam-trap domains.

Sharing a workspace with unrelated third parties, or splitting sends across multiple accounts, to evade volume limits or suppression rules.

Using open or misconfigured relays, or spoofing domains you do not own or have authorization to send from.

8. List quality and sourcing

Lists must be verified for basic deliverability (valid syntax, active MX records) before the first send.

We reserve the right to request evidence of list provenance, and to pause sending pending review where a list shows abnormal bounce or complaint rates.

Scraped consumer email addresses obtained without a lawful basis, and purchased lists of unknown origin, are not permitted under any circumstances.

9. Volume limits and warmup

New mailboxes are subject to automatic warmup schedules that gradually increase daily send volume to protect domain reputation.

Plan-level sending limits are documented in your workspace settings and may be adjusted based on account health and provider capacity.

10. Monitoring and thresholds

We continuously monitor bounce rates, spam-complaint rates, spam-trap hits, and authentication failures (SPF/DKIM/DMARC) at the workspace and mailbox level.

Crossing a defined risk threshold automatically pauses affected campaigns and notifies workspace owners with the reason and a remediation path.

11. Enforcement

Warnings: a first minor violation triggers a notice and a request to remediate within a set period.

Suspension: repeated or severe violations, or a sustained high complaint rate, result in immediate suspension of sending for the affected workspace.

Termination: illegal content, phishing, deliberate evasion of these rules, or repeated suspensions result in permanent account termination without refund.

We may remove specific campaigns, mailboxes, or content without terminating the full account where the violation is isolated.

12. Appeals

If your workspace is suspended, you may appeal by emailing compliance@munchreach.app with an explanation and evidence of remediation. We review appeals within 5 business days.

13. Reporting abuse

If you received unwanted email sent through MunchReach, you can report it to abuse@munchreach.app. We investigate every report and suppress the reported address across the responsible workspace.

14. Changes to this policy

We may update this policy to reflect new regulations or abuse patterns. Material changes are communicated to workspace owners at least 14 days in advance.