Acceptable Use & Anti-Spam Policy

Last updated: October 24, 2026 · Draft for legal review

Business details and actual service and data practices must be confirmed before this policy is published as final.

1. Purpose and scope

This policy covers all Google Workspace, Microsoft 365, Azure tenant and pre-warmed inbox services supplied through InboxLeaders.com, including associated domains and sequencer connections. It supplements the Terms of Service and the rules of each underlying provider.

InboxLeaders.com provides infrastructure for lawful business communication, not permission to send spam. Technical access to an inbox does not establish a legal right to contact a recipient.

2. Legal requirements for outreach

You must evaluate the rules that apply to your business, recipients and campaign, including CAN-SPAM, GDPR, UK GDPR, PECR, CASL and applicable local privacy and marketing laws. Where consent is required, obtain it before sending. Where another lawful basis is available, document why it applies and meet any additional electronic-marketing requirements.

A publicly listed business email, purchased list or business-to-business context does not automatically establish consent or make outreach lawful. A GDPR legitimate-interest assessment does not override separate consent requirements under other laws.

3. Prohibited messaging and content

  • Spam, unlawful unsolicited bulk messages or sending after a recipient has opted out.
  • Phishing, credential theft, financial fraud, scams or impersonation of a person or business.
  • Malware, malicious links, deceptive attachments or attempts to compromise devices and networks.
  • Misleading sender information, forged headers, deceptive subject lines or concealed commercial intent.
  • Illegal content, unlawful harassment, threats, exploitation or infringement of another party’s rights.

4. Recipient data and list practices

Use recipient information only when you have the required rights and lawful basis. Do not use unlawfully scraped, stolen or collected data, or third-party lists without establishing the permissions required for the intended outreach. Maintain accurate lists, remove invalid addresses and respect recipient objections.

Do not upload sensitive personal information or confidential recipient lists to InboxLeaders.com support unless necessary, authorized and covered by appropriate safeguards. You are responsible for applicable privacy notices and data-subject requests.

5. Sender identification and opt-outs

Clearly identify the sender and business. Include any contact details, postal address, commercial disclosures and unsubscribe mechanism required by applicable law. Opt-outs must be clear, accessible and honored within the applicable legal timeframe.

Maintain suppression records and apply them across your relevant inboxes, domains and sequencers. Never move an opted-out recipient to another mailbox or domain to continue messaging them.

6. Sending practices and provider limits

Follow Google, Microsoft and sequencer sending limits, licensing terms and abuse-prevention requirements. Website capacity estimates are planning estimates, not provider authorization or safe-sending guarantees. Pre-warmed inboxes remain subject to the same requirements.

Do not rotate accounts, domains, tenants or identities to evade blocks, spam controls, opt-outs, rate limits or prior suspensions. Do not manipulate engagement or use warmup activity that violates provider rules.

7. Account and infrastructure security

Use only domains and accounts that you own or are authorized to manage. Protect credentials and restrict administrative access. Do not attempt unauthorized access, distribute credentials publicly, interfere with other customers, probe infrastructure without permission or conduct denial-of-service activity.

Notify InboxLeaders.com promptly if you suspect compromised credentials or unauthorized sending, and take available steps to secure affected accounts.

8. Investigation and enforcement

Abuse reports, provider notices or credible evidence of a violation may lead to investigation. Customers may be asked for relevant campaign information, evidence of authorization or corrective action, with personal information limited to what is necessary.

Proportionate responses may include a warning, restrictions, suspension or termination under the Terms of Service. Urgent threats or legal requirements may require immediate restriction. Billing and refund consequences remain subject to agreed terms and applicable law, not an automatic no-refund penalty.

9. Reporting abuse and requesting review

To report suspected abuse or request review of a restriction, consult the contact page for available channels. You can email abuse reports and review requests to hello@inboxleaders.com. The current demo form does not submit reports.

Provide the sender address or domain, the date of the incident and relevant message headers where available. Do not include passwords or unnecessary personal information. Reports and review requests should be assessed in context, while providers retain authority over their own platforms.

10. Policy updates

This policy may be revised to reflect legal, security or provider requirements. Material changes should be communicated where required by the agreement or law. If you are unsure whether a campaign is permitted, resolve that question before sending.

This service must not be used for spam, phishing or illegal content. Violations may result in suspension or termination, subject to applicable law and the Terms of Service.