Acceptable Use Policy

Effective: 1 May 2026

This Acceptable Use Policy (“AUP”) applies to every email you send through the Splashify Pro Email API. Violations trigger automated enforcement (see Auto-Action System) and may result in account termination and reporting to law-enforcement or internet abuse desks.

You agree NOT to send

1. Illegal content

• Content that violates Indian law, including the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, the Indecent Representation of Women (Prohibition) Act, the POCSO Act, the Narcotic Drugs and Psychotropic Substances Act, or sectoral regulations issued by SEBI, RBI, IRDAI, or TRAI.
• Content that violates the laws of the recipient’s country (CAN-SPAM, GDPR, CASL, ePrivacy, etc.).
• Defamatory, threatening, or harassing content; doxxing; incitement to violence; revenge porn.

2. Sexual content involving minors

Content depicting, promoting, or facilitating the sexual exploitation of minors. Such content is reported to the National Cyber Crime Reporting Portal (cybercrime.gov.in) and the National Center for Missing and Exploited Children (NCMEC) without notice to the sender.

3. Spam and unsolicited mail

• Email to recipients who have not given clear, affirmative consent to receive marketing email from your organization.
• Email to addresses purchased, rented, scraped, or appended from third-party lists.
• Email to addresses harvested from websites, directories, or WHOIS records.
• Email to role-based addresses (info@, sales@, postmaster@) without a pre-existing relationship.
• Email to disposable / temporary mailbox providers (10minutemail, guerrillamail, mailinator, etc.) with marketing intent.

4. Phishing, malware, and fraud

• Phishing attempts. Brand impersonation. Credential harvesting. Forged sender identities.
• Email containing or linking to malware, ransomware, keyloggers, cryptominers, exploit kits, or malicious browser extensions.
• Advance-fee fraud (“Nigerian prince”), romance scams, fake-invoice schemes, business email compromise (BEC).
• Pump-and-dump stock promotion. Pyramid schemes. Multi-level marketing where compensation is primarily from recruitment.

5. Regulated industries without authorization

• Pharmaceuticals, prescription drugs, controlled substances, or recreational drugs.
• Tobacco, e-cigarettes, vaping products. Alcohol marketing in jurisdictions where prohibited.
• Firearms, ammunition, explosives, weapons of any kind.
• Gambling, lottery tickets, or betting services in jurisdictions where unlicensed.
• Adult content (pornography, escort services, dating with sexual intent). Splashify Pro does not service this category.
• Cryptocurrency or token sales without prior written approval and proof of compliance with SEBI / FIU-IND rules.
• Get-rich-quick schemes; “guaranteed income”; binary options; CFDs marketed to retail investors.

6. Privacy violations

• Sending another person’s personal data (PAN, Aadhaar, Voter ID, passport details, bank account numbers, health records) to anyone other than the data principal themselves, without explicit consent and a lawful basis under the DPDP Act 2023.
• Doxxing, stalking, or any use of email to facilitate harassment campaigns.

7. Deceptive sender behaviour

• Forging or misrepresenting the From address, Reply-To address, or any header field.
• Routing email through Splashify Pro to bypass another email provider’s deliverability filters or suppression list.
• Using the API to test, measure, or evade spam filters of major inbox providers (Gmail, Outlook, Yahoo, Apple iCloud, etc.).

8. Infrastructure abuse

• Reverse-engineering, attacking, or attempting to compromise the API or any internet infrastructure operated by us or any third party.
• Sending email designed to trigger automated reply storms (out-of-office loops, vacation responder amplification).
• Any activity that degrades the service for other partners.

Recipient practices we require

You must:

1. Honor unsubscribe requests within 10 calendar days. We process the unsubscribe synchronously when a recipient clicks the link or uses Gmail/Outlook one-click unsubscribe; you must not re-add unsubscribed recipients to your sending list.
2. Maintain proof of consent for each recipient — date, source, wording of the consent prompt — for at least the duration of your sending relationship plus 3 years (DPDP Act §11 record-keeping).
3. Include accurate identification of you as the sender, a valid physical postal address, and a clear unsubscribe link in every marketing email. The Splashify Pro renderer ships these by default in the Footer block; do not strip them in raw-MIME sends.
4. Use a from-domain that you control and that has been verified through our identity flow.
5. Set up SPF, DKIM, and DMARC records for your sending domain. DMARC at p=quarantine or p=reject is required for production access.
6. Segment marketing and transactional email under separate configuration sets so reputation issues don’t bleed across.
7. Suppress hard-bounced and complainted addresses from your sending list immediately. The Splashify Pro suppression list does this automatically; do not work around it.

Consequences of violation

The auto-action system runs without human intervention and without prior notice on triggered thresholds. See Auto-Action System for the exact thresholds and recovery paths.

Reporting violations

If you believe another sender is abusing the service, email abuse@splashifypro.in with the offending message including full headers. We respond to abuse reports within 24 hours on business days and within 72 hours on weekends. Reports involving CSAM, imminent harm, or active fraud are escalated immediately.

Updates

This AUP may change to reflect new threats or new legal requirements. Material changes get 30 days’ notice; clarifications and additions to the banned-content list take effect immediately. Always check the “Effective” date at the top.