Acceptable Use Policy.

Last updated 2026-06-22. This policy is part of, and incorporated into, the Terms of Service.

1. Permission is the rule

You may only send mail to recipients who have given you permission to contact them, or with whom you have a genuine, current relationship that makes the mail expected. Consent is not transferable. You must be able to show how and when each recipient opted in.

2. Prohibited uses

You must not use Egressif to send, transmit, host, or facilitate any of the following:

• Unsolicited bulk or commercial email (spam). Mail to recipients who did not opt in, or to addresses you cannot prove consent for.
• Purchased, rented, scraped, or harvested lists. Address lists you did not collect yourself with consent are prohibited.
• Forgery or spoofing. Falsifying headers, the envelope sender, the From identity, or any part of the message to disguise its origin, or sending from domains you are not authorized to use.
• Phishing, fraud, and social engineering. Impersonating people or brands, credential harvesting, business-email-compromise, or deceptive content.
• Malware and malicious content. Viruses, ransomware, exploit links, or attachments intended to harm recipients or systems.
• Illegal, harmful, or abusive content. Anything unlawful in the jurisdictions involved, including content that infringes others' rights, or that harasses, threatens, or exploits.
• Evasion and abuse of infrastructure. Operating open relays or open proxies, circumventing rate limits or suppression, list-bombing or subscription-bombing, or using the service to attack or probe third parties.
• Defeating recipient choice. Ignoring unsubscribe requests, complaints, or do-not-contact records, or making opt-out difficult.
• Misrepresentation of the sender. Hiding who you are, omitting a real identity, or using a display name that misleads recipients about who holds their consent.

3. Sending standards you must meet

• Authenticate your mail. SPF, DKIM, and DMARC alignment as configured for your domains. See email authentication.
• Identify yourself honestly. Accurate From identity and, for commercial mail, the identification and physical-address requirements of the laws that apply to your recipients. See email laws by region.
• Honor opt-outs promptly. Provide a working unsubscribe (one-click where required) and stop sending quickly. See suppression & consent.
• Keep complaints and bounces low. Maintain list hygiene, remove hard bounces and complainers, and keep spam-complaint rates within mailbox-provider expectations.
• Follow recognized best practice. We align with M3AAWG sender best common practices and expect the same of senders. See our email sending best practices.

4. Enforcement

We monitor for abuse and investigate reports. Depending on severity and intent, we may rate-limit, suspend, or terminate sending, require remediation, remove offending content, and retain evidence. Serious or repeated violations, and any unlawful activity, can result in immediate termination. We cooperate with lawful requests from authorities and with the wider anti-abuse community where appropriate. We aim to be proportionate and to tell you what triggered an action and what is needed to resolve it.

5. Reporting abuse

If you believe mail sent through Egressif violates this policy, report it. Use our report-abuse form or email abuse@egressif.io (the abuse@ role mailbox defined by RFC 2142). Include full headers and the message where possible so we can act quickly. We also monitor postmaster@ and security@; for security issues see Trust & Security and security.txt.

6. Changes

We may update this policy as abuse patterns and standards evolve. Material changes will be reflected here with a new "last updated" date.