Draft. This document is a pre-launch draft based on market-standard terms for email deliverability services and is being reviewed by legal counsel. Questions: welcome@roxinbox.io.
1. Why this policy exists
Every customer's reputation depends on the network staying clean. One sender who abuses it can harm everyone else. This policy sets the rules for using RoxInbox and forms part of our Terms of Service.
2. Who RoxInbox is for
RoxInbox is built for businesses that send legitimate email: sales teams, agencies, marketers, recruiters, founders, and product teams sending transactional and onboarding email. It is not a fit for:
- high-volume consumer newsletters sent to millions of addresses, where reputation is built through an email service provider and dedicated IPs rather than mailbox warm-up; or
- anyone sending email without a lawful basis or consent where consent is required.
3. Sending rules
You may not use RoxInbox to support email, or to warm mailboxes used for email, that:
- is sent without a lawful basis under the laws that apply to you and your recipients, including the GDPR, the ePrivacy rules, CAN-SPAM and CASL;
- goes to purchased, rented, scraped or harvested lists where the law requires consent;
- hides or falsifies the sender's identity, headers or subject, or lacks a working opt-out where one is required;
- contains phishing, malware, scams, impersonation of another person or brand, or links to such content;
- promotes illegal goods or services, or content that is illegal, hateful, harassing or sexually exploitative;
- keeps sending to people who have unsubscribed or objected.
4. Network rules
The warm-up network exists only to build sender reputation. You may not:
- send campaigns, offers or any of your own content to network mailboxes or seed mailboxes, except the placement tests the Service runs for you;
- collect, store, export or contact addresses you see in warm-up messages;
- tamper with warm-up messages, for example by marking them as spam, deleting them, or creating mailbox rules that interfere with them;
- try to identify, map or fingerprint the network or other customers;
- connect a mailbox you do not own or are not authorised to connect, or keep a mailbox connected after the provider has suspended it.
5. Service rules
- No sharing of accounts or log-ins outside your organisation, except through agency client workspaces.
- No attempt to bypass plan limits, verification checks, pauses or suspensions.
- No reverse engineering, scraping or load testing of the Service, its API or its free tools, and no automated use of the free tools beyond normal personal use.
- No security testing without our written permission. If you find a vulnerability, report it to welcome@roxinbox.io.
6. Thresholds we monitor
We monitor signals that predict abuse and network damage. Breaching them may trigger an automatic pause and a review:
- user-reported spam rates at or above 0.3%, the level large mailbox providers treat as a hard limit for bulk senders;
- hard-bounce rates that indicate unverified or harvested lists;
- listings of your sending domain or IP on major blocklists;
- sudden volume spikes outside the guidance shown in the app.
7. Enforcement
We may verify a customer's identity and sending practices at any time. Depending on the severity, we may warn you, pause mailboxes, remove mailboxes from the network, suspend or close the account, and report illegal activity to the authorities. Where the risk to the network is immediate, we act first and explain afterwards. Fees for suspended or closed accounts are not refunded when the cause is a breach of this policy.
8. Report abuse
If you believe someone is using RoxInbox for spam or abuse, email welcome@roxinbox.io with the full message headers. We review every report.