Acceptable Use Policy

Before every campaign, ask: would this person understand why they got this email, and could they make it stop in one click? If the answer is yes, you are almost certainly within this policy. The rules below spell out the rest.

You must have a lawful basis to email every person you contact, under the laws where you are and where they are, such as CAN-SPAM in the United States, the GDPR and the ePrivacy rules in Europe and the UK, and CASL in Canada.

You may not email:

• people on lists you bought, rented or swapped, unless you can show each person may lawfully be contacted by you;
• addresses harvested by scraping websites or other sources, or generated by guessing patterns;
• anyone who has unsubscribed from you or asked you not to write, in Norbelys or anywhere else;
• consumers, where the law requires their prior consent and you don’t have it;
• children.

Your emails must say honestly who you are and why you are writing, and their From line, subject and content must not mislead.

You may not use Norbelys to send:

• phishing, or anything that asks for passwords, payment details or other credentials under false pretenses;
• malware, or links to it;
• content that impersonates another person, company or brand;
• offers of illegal goods or services, counterfeits, or regulated goods without the required licenses;
• sexually explicit content;
• harassment, threats, hate speech or content that encourages violence;
• deceptive or fraudulent offers, such as get-rich-quick schemes, fake invoices or miracle cures;
• content that infringes someone else’s intellectual property or privacy.

• Send only from mailboxes and domains you own or are allowed to use, with valid SPF, DKIM and DMARC records.
• Keep the unsubscribe link and header Norbelys adds to every campaign email, and never hide them.
• Respect Norbelys’s daily limits, the gap between emails and the limits of your mailbox providers. Don’t spread one campaign across extra mailboxes or domains to get around a block or a limit.
• Don’t spoof headers or disguise where an email comes from.
• Keep your lists clean. Norbelys checks addresses before it sends, removes bounces and suppresses unsubscribes for good; don’t import them again.

We watch bounce and complaint rates. When a workspace’s spam complaints exceed 0.3% of delivered email, or its hard bounces exceed 5%, we may pause its campaigns until the cause is fixed. These numbers are close to what Google and Yahoo expect from every sender.

• Don’t use AI features to fabricate facts about a person or a company, or to write messages that would break this policy.
• Don’t create accounts, workspaces or API keys in bulk, or use them to get around limits or a suspension.
• An assistant connected through the MCP server, or software using the API, must follow this policy too. You are responsible for what it sends.

You may not probe, scan or test the vulnerability of Norbelys, except as our disclosure process allows; interfere with other customers or their data; put an unreasonable load on the service; or resell access to the hosted service without our written agreement.

Security researchers are welcome. Write to security@norbelys.com before testing, never access data that isn’t yours, and give us reasonable time to fix what you find. We won’t pursue legal action against good-faith research that follows these rules.

If you received an email sent with Norbelys that breaks this policy, forward it with its full headers to abuse@norbelys.com. We investigate every report within 24 hours, act on the sending workspace where needed and never tell the sender who reported them.

To stop receiving emails from a sender, use the unsubscribe link in their email. Norbelys honors it at once and for good.

Depending on how serious it is, we may warn you, pause a campaign, pause all sending from a workspace, suspend the workspace or close the account. For serious harm, such as phishing, malware or a flood of complaints, we act first and explain right after. Where the law requires, we report illegal activity to the authorities.

If you think we got it wrong, reply to our message or write to abuse@norbelys.com. A person will review it.

We may update this policy. For a change that matters, we email workspace owners at least 30 days before it takes effect, except when we must act sooner to stop a new kind of abuse. Every change is shown in the record at the end of this page.