Acceptable Use Policy

Introduction

This Acceptable Use Policy (AUP) governs how customers use Yellaro. It exists for one reason: to keep email working, for you, for your subscribers, and for everyone else relying on our infrastructure. Violations may result in account suspension or termination, sometimes immediately.

Permitted use

You may use Yellaro to send:

• Newsletters to people who have explicitly opted in.
• Product updates, transactional confirmations, and announcements to your own users.
• Event invitations, content updates, and similar opt-in communications.

Prohibited content and conduct

You may not use Yellaro to send:

• Unsolicited bulk email (spam) of any kind.
• Email to addresses obtained from purchased, rented, scraped, or harvested lists.
• Email to recipients who have not explicitly opted in to receive messages from you.
• Email containing illegal content, hate speech, harassment, threats, or content that violates anyone’s rights.
• Email promoting illegal goods, services, or activities.
• Email containing malware, phishing attempts, or deceptive subject lines.
• Email impersonating other people, brands, or organizations.
• Email related to: pyramid schemes, multi-level marketing, gambling, adult content, or get-rich-quick offers.

List hygiene requirements

• All lists must use double opt-in confirmation. This is the default and cannot be disabled.
• You must remove unsubscribed addresses immediately and not contact them again.
• You must honor unsubscribe requests within 10 days at the latest.
• You may not re-import suppressed addresses or attempt to circumvent unsubscribes.
• Hard-bounced addresses are automatically suppressed and may not be re-added.

Sender vetting

Yellaro reserves the right to vet new customers before granting full sending capacity. Vetting may include:

• Identity verification at signup.
• Mandatory acceptance of this Acceptable Use Policy.
• Domain ownership confirmation for any custom sending domain (DKIM/SPF/DMARC).
• Gradual sending limits during initial onboarding while we monitor metrics.
• Manual review for customers requesting elevated sending volumes.

We reserve the right to request additional information before granting sending access, including business registration details, prior sending history, and information about the customer’s recipient acquisition practices.

Sending limits and reputation

• We may monitor sending health using metrics including bounce rates, complaint rates, and engagement signals.
• Accounts exceeding industry-standard thresholds (5% bounce rate, 0.1% complaint rate) may be paused while we investigate.
• Repeated violations may result in permanent account termination.

Enforcement

We may suspend or terminate accounts for violations of this policy at our sole discretion. We may also report illegal activity to law enforcement or affected parties. We aim to communicate with customers before suspending where possible, but we reserve the right to act immediately when sending threatens our infrastructure or other customers.

Investigating abuse

Where we have reasonable grounds to suspect a violation of this policy, or where necessary to protect the security, deliverability, or integrity of our platform and our other customers, we may access your account, your hosted instance, and the content within it to investigate. We limit such access to what is necessary for the investigation, and we do not access customer content for any other purpose. We may take action, including suspending sending, terminating the account, or preserving evidence, based on what we find.

Ongoing monitoring

We monitor sending health using metrics including:

• Bounce rate (industry threshold: 5%). We may act earlier.
• Complaint rate (industry threshold: 0.1%). We may act earlier.
• Spam trap hits via industry feedback loops.
• Engagement signals (open and click rates over time).
• Sudden volume changes or pattern anomalies.

Customers with deteriorating metrics may receive alerts and be subject to list re-confirmation requirements, sending pauses, or account review.

List import and confirmation

Imported subscriber lists may be subject to additional scrutiny:

• Yellaro may require review of large imports during initial onboarding.
• Imports of large lists may be subject to review and re-confirmation requirements before further sending is permitted.
• We may require evidence of consent for imported addresses (signup form details, consent timestamps, source documentation).
• Lists showing patterns consistent with purchase or scraping may be rejected.

Industry standards

Yellaro’s policies and infrastructure are designed in alignment with industry best practices including:

• RFC 8058 (one-click unsubscribe via List-Unsubscribe-Post header).
• DKIM, SPF, and DMARC authentication on all outbound mail.
• Double opt-in confirmation on all subscriber lists by default.

We participate in industry feedback loops and abuse-reporting mechanisms with major mailbox providers.

Reporting abuse

If you believe a Yellaro customer is sending email in violation of this policy, contact us at hello@yellaro.com or use our contact form. Include the full email headers if you can. It helps us investigate quickly.

Changes

We may update this policy from time to time. Material changes will be communicated to active customers via email.