Anti-Spam Policy

1. Our Commitment

Everinbox is built for senders who care about inbox placement. We dedicate significant infrastructure to deliverability — dedicated IPs, reputation monitoring, list hygiene tools — and that investment only works when every sender on our platform plays by the rules. We have zero tolerance for spam, and we enforce that position actively, not reactively.

We are signatories to the M3AAWG Sender Best Practices and align our policies with CAN-SPAM (US), LGPD (BR), CASL (Canada), and GDPR (EU).

2. What Constitutes Spam

Spam is unsolicited bulk email — messages sent to recipients who have not explicitly consented to receive them from you. The following are treated as spam under this policy, regardless of intent:

• Emails sent to purchased, rented, scraped, or harvested lists
• Emails sent to addresses collected without clear, affirmative consent
• Emails sent to recipients who have previously unsubscribed
• Bulk messages without a functional unsubscribe mechanism
• Emails with deceptive, misleading, or forged headers or subject lines
• Messages with no physical mailing address of the sender
• Transactional emails used to send unsolicited commercial content

3. Sender Obligations

Every sender on the Everinbox platform agrees to the following:

• Permission: Only send to recipients who have explicitly opted in to receive communications from you, via a confirmed opt-in process where possible.
• Unsubscribe: Include a functioning, one-click unsubscribe link in every commercial email. Honor unsubscribe requests within 10 business days.
• Suppression: Maintain an active suppression list. Do not re-add unsubscribed or bounced addresses.
• Bounce management: Remove hard-bounced addresses immediately. Investigate and address soft-bounce spikes within 48 hours.
• List hygiene: Regularly validate and clean your lists. Sending to stale lists (collected more than 12 months ago without re-engagement) may trigger review.
• Sender identification: Clearly identify yourself or your organization in the "From" name. Do not use misleading sender names.
• Authentication: Maintain valid SPF, DKIM, and DMARC records for your sending domain. Everinbox provides tools to verify and manage these.

4. Prohibited Content

The following content is prohibited in emails sent through Everinbox, regardless of recipient consent:

• Phishing attempts — impersonating another company, brand, or person to obtain credentials or personal data
• Malware, viruses, or links to malware distribution sites
• Content promoting illegal activities
• Hate speech, harassment, or content targeting individuals based on protected characteristics
• Non-consensual adult content
• Content that violates applicable export control, sanctions, or embargo regulations

5. Enforcement

Everinbox monitors sending activity in real time. When our systems detect potential violations, we follow a tiered enforcement process:

• Warning: First-time or borderline violations receive a formal warning and require corrective action within 48 hours.
• Feature suspension: Continued or more serious violations result in suspension of email sending capabilities pending review.
• Account termination: Confirmed bad actors — particularly those engaged in phishing, malware distribution, or systematic spam — are terminated immediately, with no refund.

Confirmed spam complaints are reported to ISP feedback loops and relevant blocklists. Everinbox cooperates with law enforcement and anti-abuse organizations including Spamhaus, SURBL, and M3AAWG in investigating serious violations.

6. Complaint Handling

Everinbox maintains FBL (Feedback Loop) agreements with major ISPs. Spam complaints submitted through ISP FBLs are processed automatically — the recipient is removed from your list and the complaint is counted toward your complaint rate threshold. Accounts exceeding 0.1% complaint rate on Gmail or 0.3% on other major ISPs trigger immediate review.

To report spam received from an Everinbox sender, visit our Abuse Prevention page.

7. Compliance References

Our Anti-Spam Policy is designed to meet or exceed the requirements of:

• CAN-SPAM Act (US, 2003) — commercial email requirements including opt-out, sender identification, and prohibition on deceptive headers
• LGPD — Lei Geral de Proteção de Dados (BR, 2020) — Brazilian data protection law governing consent, data subject rights, and processing of personal data
• CASL — Canada's Anti-Spam Legislation (CA, 2014) — requires express or implied consent, identification, and an unsubscribe mechanism
• GDPR (EU, 2018) — EU regulation governing processing of personal data of EU residents, including requirements for lawful basis of processing

Senders operating in regulated markets are responsible for ensuring their own compliance with applicable local law. Everinbox's policies establish a floor, not a ceiling.