Acceptable Use & Anti-Spam Policy

Why this policy exists

Every customer of Lebx Mail shares sending infrastructure and reputation with mailbox providers such as Gmail, Outlook and Yahoo. One sender's spam can hurt everyone's deliverability. This Acceptable Use & Anti-Spam Policy ("AUP") sets out what you may and may not do with the Service. It forms part of our Terms of Service and applies to every account, user, email, form, landing page, funnel and ad campaign.

Permission is required

You may only send marketing email to people who have given you clear, affirmative permission to email them about the subject you're writing about. Specifically:

• Consent must be freely given, specific and recorded — for example a sign-up form, a checked (not pre-checked) box at checkout, or a documented in-person request.
• Never use purchased, rented, traded, scraped, harvested or "opt-out" lists, or lists given to you by a third party, even if the seller says the contacts opted in.
• Addresses collected for one purpose (such as a receipt or a contest entry) may not be used for unrelated marketing unless the recipient agreed to that too.
• Lists you haven't emailed in more than 12 months must be re-permissioned or verified before sending.
• You must be able to show us when and how each contact gave consent if we ask.

We strongly recommend double opt-in (confirmation emails) for all sign-up forms. It keeps lists clean and gives you proof of consent.

What every email must include

• Accurate sender information. "From" names, addresses, reply-to and routing information must identify you truthfully. Don't impersonate anyone.
• An honest subject line that reflects the content of the message.
• Your valid physical postal address (a street address or registered post box).
• A clear, working unsubscribe link. Don't hide it, require a login or charge a fee. The Service processes unsubscribes automatically — never re-add people who have unsubscribed or complained.
• Clear identification of advertising where the law requires it.
• Authenticated sending domains. You must send from a domain you own and have authorised, with SPF, DKIM and DMARC set up where we ask you to. Free mailbox addresses (such as Gmail or Yahoo) may not be used as the "from" address.

Prohibited content

You may not use the Service to send, host or promote content that:

• is illegal, or promotes illegal products, services or activities, in the sender's or recipient's country;
• is phishing, or tries to collect passwords, financial or other sensitive information under false pretences;
• contains or links to malware, viruses, spyware or other harmful code;
• is sexually explicit or pornographic, or promotes escort or dating services of a sexual nature;
• involves child sexual abuse material or sexualises minors in any way (we report this to the authorities);
• promotes get-rich-quick schemes, pyramid or multi-level marketing schemes, unlicensed investment, trading or cryptocurrency offers, or "guaranteed" income;
• promotes unlicensed gambling, betting or lotteries;
• sells prescription drugs without a licence, illegal drugs, or unapproved health claims;
• sells weapons, ammunition, explosives or counterfeit goods;
• offers loans, debt relief, credit repair or payday lending in a deceptive way, or without required licences;
• is hateful, harassing, threatening or defamatory, or incites violence;
• infringes intellectual property, privacy or publicity rights;
• is deliberately false or misleading, including fake news, impersonation and fake invoices or delivery notices;
• sells, rents or shares personal data or email lists.

Some industries (such as financial services, health, and alcohol) are allowed but may need extra review. Contact us before sending if you're unsure.

Prohibited practices

• Harvesting or scraping addresses, dictionary attacks, or sending to randomly generated or guessed addresses.
• Forging headers, spoofing domains, or using domains you don't control.
• "Snowshoeing" — spreading sending across many domains, IPs or accounts to avoid filters or limits.
• Opening multiple accounts, or re-registering after suspension, to avoid limits or enforcement.
• Sending on behalf of third parties you don't represent, or reselling access to the Service without our written agreement.
• Deliberately sending to spam traps, role addresses that didn't opt in (such as info@ or sales@) or known invalid addresses.
• Obscuring links with URL shorteners or redirect chains designed to hide the destination.
• Attempting to probe, scan or break the security of the Service, or to overload it.

Performance standards

Engagement statistics are the clearest signal of whether recipients wanted your email. We review accounts whose campaigns exceed any of these levels:

Mailbox providers such as Google and Yahoo require bulk senders to keep complaint rates below 0.3%. Our lower thresholds protect you from ever getting close.

Laws you must follow

You are responsible for complying with every law that applies to your emails and your recipients, which may include:

• the CAN-SPAM Act (United States);
• the GDPR and ePrivacy Directive (European Union), the UK GDPR and PECR (United Kingdom);
• CASL (Canada) and the Spam Act 2003 (Australia);
• the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India);
• consumer protection, advertising and sector-specific rules wherever your recipients are.

Where laws differ, follow the strictest one that applies to a recipient.

Forms, landing pages, funnels and ads

• Forms and landing pages must say clearly what people are signing up for and link to your privacy policy.
• Pages may not mimic another brand's login or checkout page, or collect credentials or payment details deceptively.
• Ad campaigns must also comply with the advertising policies of the platform they run on (for example Meta or Google). Their rules apply in addition to this AUP.
• Transactional messages (such as receipts) must be genuinely transactional; don't disguise marketing as a transactional message.

How we enforce this policy

We monitor sending patterns, bounces, complaints, content and blocklists automatically and review accounts manually. If we believe this AUP has been breached, we may, at our discretion and with or without notice:

1. contact you and ask for information, such as proof of consent;
2. delay, pause or cancel campaigns, lower sending limits or require list cleaning;
3. suspend or terminate your account, without refund, for serious or repeated breaches;
4. remove content, forms or pages; and
5. report illegal activity to law enforcement and share information with mailbox providers and anti-abuse organisations.

If we took action and you believe we made a mistake, write to support@lebx.io and we'll review it.

Reporting abuse

If you received spam or phishing sent through Lebx Mail, or see a form or page on our platform breaking these rules, email abuse@lebx.io. Please include the full email with headers (in most email apps: "Show original" or "View source") or the page URL. We investigate every report.