Acceptable Use Policy
What you may and may not send through rootmail — and what we do about it.
Last updated August 24, 2026
This policy applies to every rootmail account, and to every one of your own customers if you send on their behalf. It forms part of our Terms of Service. If you send through rootmail, you are responsible for the mail your account produces — including mail sent by your customers.
Permission is the whole rule
You may only send to people who gave you permission to email them. Everything below follows from that one sentence.
- Purchased, rented, scraped and appended lists are prohibited. No exceptions, and no “we bought it from a reputable vendor”. If you did not collect the address yourself, you may not mail it.
- Marketing recipients must have opted in. Through a signup form, a checkout, an account, or another action they took knowingly. Pre-ticked boxes and consent bundled into unrelated terms do not count.
- Transactional mail must be triggered by the recipient's own action — a receipt, a password reset, an order update. A marketing message does not become transactional because you call it one.
- Unsubscribes are final. Every marketing and sales message carries a working one-click unsubscribe, and an opt-out applies across your whole account.
Prohibited content and conduct
You and your users will not use rootmail to:
- send unsolicited bulk email, or mail anyone without a lawful basis or valid consent;
- send phishing, malware, deceptive headers or forged sender information, or impersonate anyone;
- send unlawful, infringing, harassing, or harmful content, including content that promotes fraud;
- break anti-spam or privacy law — CAN-SPAM, CASL, GDPR and ePrivacy among them — including the requirement to carry a real physical mailing address on commercial mail;
- bypass or attempt to bypass suppression lists, unsubscribe handling, quotas, rate limits, or plan boundaries — including by splitting sending across accounts or sub-tenants;
- probe, scan, overload or interfere with the service, or attempt access you were not granted; or
- resell rootmail to third parties except through the sub-tenancy features, for your own customers, for whose sending you remain responsible.
How we enforce this
These are not aspirations. Each of the following runs automatically, without waiting for a person to notice:
- Bounces and complaints suppress the address immediately. A hard bounce or any spam complaint adds that recipient to your suppression list automatically, and the suppression is applied before a later message is ever handed to our sending provider. You cannot remove a bounce or complaint suppression.
- Each of your clients is scored on its own. If you send for multiple customers, every sending domain carries its own bounce and complaint rates over a rolling seven days. Cross a warning threshold and you hear about it; cross a higher one and that client's sending is throttled; cross the top one and it is paused outright. Only a person can lift a pause.
- Imports require you to say so. Uploading a list requires an explicit confirmation that everyone on it gave you permission. We record that confirmation against the import.
- Marketing cannot reach a stranger. A marketing or sales message to an address that is not already in your audience is refused.
- Domains are re-checked continuously. Verification is not a one-time gate — if a sending domain's DNS records disappear, we tell you, and if they stay missing we stop that domain's sending.
We may throttle, suspend or terminate sending or an account that violates this policy, threatens deliverability for other customers, or creates legal or security risk — immediately where the situation requires it, and without refund where the violation is deliberate.
Reporting abuse
If you received mail sent through rootmail that you believe violates this policy, tell us at abuse@rootmail.io and include the full message headers if you can. We investigate every report. You can also reach us through our contact page.
To stop receiving mail from a particular sender, use the unsubscribe link in the message — it is honored across that sender's entire account, permanently.