Home/Acceptable Use

Acceptable use

One mailbox, one person, writing to people who know them.

Everyone on inbox.my sends from the same domain and the same IP ranges. That is the whole basis of the deliverability you are paying for, and it only survives if the rules below are enforced strictly.

Last updated: [COMPLETE: date] · Forms part of the terms of service

1. What inbox.my is for

Personal and professional correspondence: one human writing to people who expect to hear from them. Ordinary mail, at ordinary volume, to recipients who know who you are.

2. Prohibited outright

The following result in suspension. Serious cases are immediate and permanent, with no refund.

  • Bulk sending of any kind — newsletters, marketing campaigns, cold outreach, sales sequences, automated notification blasts, or mail to any list you did not personally collect with explicit consent.
  • Phishing and impersonation — pretending to be a person, brand or institution you are not, or soliciting credentials, payment details or personal data under false pretences.
  • Malware — distributing or linking to viruses, ransomware, spyware, exploit kits or any other malicious payload.
  • Fraud — advance-fee schemes, investment fraud, fake invoices, business email compromise, or any scheme designed to deceive a recipient out of money.
  • Harassment and abuse — targeting an individual with unwanted contact, threats, doxxing, or material intended to intimidate.
  • Child sexual abuse material — reported to the relevant authorities and terminated immediately and permanently, without exception or notice.
  • Unlawful content — anything illegal in the jurisdiction where inbox.my operates, as set out in the terms.
  • Circumvention — evading a suspension, running automated signup attempts, or reselling access to a mailbox we issued to you.
"But my list is opt-in"

It makes no difference here. Even a genuinely consented list is bulk sending, and bulk sending from a shared personal-mail domain damages placement for every other customer. Use a dedicated email service provider built for campaigns — they exist precisely because this is a different technical problem.

3. How enforcement actually works

Every message leaving the platform passes an outbound gate that scores it in the same way a receiving server would. There is no manual review queue standing between an abuse pattern and a suspension.

  • Rate and pattern detection. A sudden volume spike, a large recipient set, or repeated near-identical messages trigger scoring before anything leaves the platform.
  • Automatic suspension, not throttling. A mailbox that crosses the threshold is suspended outright. Rate-limiting a spammer only slows the damage to everyone else.
  • Blocklist response. If one of our sending IPs is listed, the account responsible is suspended and we file a delisting request. We do not rotate to a clean IP and carry on — that is evasion, and it is how a domain's reputation dies permanently.
  • Reports are triaged first. A live abuse case outranks every other ticket in the queue. Send full headers and the complete SMTP response to [email protected].

4. What suspension means

  • Inbound and outbound mail stop immediately. Senders receive a permanent SMTP failure rather than silence.
  • No refund is issued, on either plan, including a lifetime licence. See the refund policy.
  • Your data remains encrypted and untouched during any appeal window. We could not read it in order to review your case even if we wanted to.
  • Permanent termination triggers crypto-shredding and the release of the address back to the pool.

5. Appeals

If you believe a suspension was an error — a false positive on the outbound gate, or a pattern that looked like bulk but was not — open a ticket in the portal with your invoice reference and a plain description of what you were sending and to how many people. We review on the facts and reinstate where we got it wrong. Suspensions for phishing, malware, fraud or CSAM are not appealable.

6. Reporting abuse from an inbox.my address

Write to [email protected] and include the complete message headers, the full body, and the SMTP transaction if you have it. Reports with full headers are actioned quickly; reports with a forwarded screenshot usually cannot be traced to an account at all. You do not need an inbox.my account to file one.

7. Why the rules are this blunt

A shared domain has exactly one reputation, and it is the thing you are actually buying. A single customer running a cold-outreach campaign for one afternoon can cost every other mailbox on the platform weeks of degraded placement. Refusing that business — and cancelling it without refund when it slips through — is not us being difficult. It is the product.

Personal mail, sent properly.

If that describes what you need, the rest is just picking a name.