Acceptable Use & Anti-Spam Policy

1. Purpose of This Policy

Flowmails is built for transactional email and professional business mailboxes. We do not allow bulk marketing, unsolicited advertising, or abusive messaging. This policy protects recipients, our customers, and sender reputation.

2. Allowed Use Cases

• Account verification and security notifications
• Password reset and authentication emails
• Order, payment, and receipt notifications
• Critical product or service updates
• Business mailbox communications with verified senders

3. Consent and Unsubscribe Requirements

For any non-transactional or optional email, you must obtain explicit recipient consent (opt-in) and provide an easy unsubscribe mechanism. Recipients must be able to opt out within 10 business days, and you must honor suppression lists immediately.

Transactional messages (security, billing, and account-related) must be clearly identified and limited to the scope of the transaction.

4. Bounce and Complaint Handling (Strict Mode)

We process bounce and complaint signals in real time through AWS SES event notifications and enforce immediate suppression. This is required to protect sender reputation and meet provider requirements.

• AWS SES Bounce and Complaint events are received through SNS notifications and processed automatically.
• Hard bounces and complaints are added to a suppression list immediately, with permanent stop on future sending.
• Soft bounces are retried no more than 3 times. If they continue, the recipient is suppressed for 7 days.
• Complaint rate > 0.1% or bounce rate > 5% triggers automatic suspension of sending for the sender or domain.
• Suspended senders must provide consent evidence, clean recipient lists, and pass a manual review before re-enablement.

5. Prohibited Content and Behavior

• Purchased, rented, or scraped email lists
• Unsolicited commercial messages (spam)
• Phishing, malware, or deceptive content
• Impersonation or falsifying sender identity
• High complaint rates or abnormal bounce rates

6. Deliverability and Domain Authentication

All outbound email must pass SPF and DKIM checks. We require DKIM domain alignment for DMARC compliance and recommend a custom MAIL FROM domain to improve SPF alignment reliability. When you enable inbound delivery, MX records must be configured correctly.

We continuously monitor sending patterns and may suspend accounts that risk reputation or violate this policy.

7. SES Production Access Use Case Statement

Flowmails is designed for transactional email and business mailbox infrastructure. We send only to recipients who explicitly requested or consented to receive messages. We process all hard-bounce and complaint events through SES SNS notifications, update suppression lists in real time, and automatically pause sending when quality thresholds are exceeded.

We do not support purchased, rented, or scraped recipient lists and do not allow unsolicited bulk messaging.

8. Enforcement

We may suspend or terminate accounts that violate this policy, the Terms of Service, or applicable law. We may also require additional verification for high-volume senders.

9. Contact

Questions about this policy can be sent to:
support@flowmails.net
abuse@flowmails.net
postmaster@flowmails.net