Acceptable Use Policy

What you may and may not send through Hamanimail.

Acceptable use

You are responsible for what you send. In particular:

• Australian anti-spam law applies to you. Commercial electronic messages sent from your domain are governed by the Spam Act 2003 (Cth) — consent, accurate sender identification and a working unsubscribe. Those obligations are the law's, not ours; what our system enforces technically on your behalf is described in our Terms of Service and on this page. In short: you must send only to people who have consented, you must keep records of that consent, and you must honour every unsubscribe. We also enforce unsubscribe technically — a marketing send is refused outright if our one-click unsubscribe is not configured, so we never send non-compliant mail on your behalf.
• Do not send spam, phishing, malware, deceptive content or anything unlawful.
• Do not use the service to harass, defraud or impersonate anyone.
• Do not attempt to circumvent our rate limits, warm-up limits, suppression list or reputation controls.
• Do not use the service to send mail on behalf of a third party whose sending you cannot vouch for.

Personal mailboxes on a HAMANI-owned domain

HAMANI may offer a personal mailbox on a domain HAMANI owns, rather than on a domain of your own. Where it does, these additional terms apply to that mailbox:

• The same anti-spam rules apply to you. A personal mailbox is not a loophole. Bulk or commercial messages sent from it are governed by the Spam Act 2003 (Cth) exactly as they are from a business mailbox, and that Act applies to you unchanged.
• Do not impersonate anyone. Do not choose or use an address, display name or signature that represents you as another person, as a business you do not represent, as a government agency or as HAMANI itself.
• Reserved and restricted names. Addresses that suggest an official, administrative or security function — for example admin, postmaster, abuse, security, support, billing, noreply — and names that impersonate a brand, an institution or a public body, are reserved to HAMANI. We may refuse them, and we may reclaim one that was issued in error or obtained by misrepresentation, on notice.
• The address is a licence, not a possession. You do not own a HAMANI-owned domain and cannot transfer the address away, because the domain is not yours. If that matters to you, use a domain you own — which is the main product.
• One person, honestly. Signup requires a verified recovery email address before the mailbox is activated. Do not create accounts in bulk, automate signup, or create an account in someone else's name.

What happens if a personal account is abused. For reputation problems — bounce or complaint behaviour that threatens the shared sending reputation — we suspend that account's sending. Your mailbox and your data stay reachable: you can still sign in, read your mail and get your data out, exactly as with an unpaid business invoice (our Terms of Service, section 4). For a serious breach of our Terms of Service — impersonation, unlawful content, an account created by misrepresentation — we may suspend the mailbox itself, and a suspended mailbox cannot be signed in to while the suspension stands. Either way, suspension is not deletion: nothing is destroyed by a suspension, and your right to obtain your data (our Terms of Service, section 5) survives it — a suspended mailbox's export goes through us rather than through sign-in.

A separation we have actually built, and its limit. Personal sending and business sending are counted against separate reputation aggregates with separate brakes, so abuse on the personal side stops the personal side and cannot stop a paying business customer from sending. Its limit: Amazon SES measures its own account-wide reputation, and that is not separated by us. Bad enough behaviour anywhere on the platform can still cause AWS to throttle or suspend the underlying account, which is outside our control.

Why we enforce this hard

Every HAMANI customer shares sending reputation. One bad sender damages delivery for every honest one. So:

• We may throttle or suspend sending — immediately, with or without notice — where sending breaches our Terms of Service, or where bounce or complaint rates threaten the shared sending reputation. This is a deliberate design commitment.
• Suspension of sending is not lockout from your mailbox. See our Terms of Service, section 4.

Limits that exist, so you are not surprised

These limits are configured today:

• A free sending tier includes 1,000 emails a month and up to 33 a day. Over either ceiling, a send is refused until the next period, unless you hold prepaid pay-as-you-go credit, which is then drawn down. Paid sending tiers raise the monthly volume — see our pricing page.
• New-domain warm-up. A newly verified domain is capped at 50 sends on its first day, growing over 30 days to 50,000 per day, after which it graduates. Over the ceiling, a send is refused with a clear warm-up error. This protects your domain's reputation and everyone else's. Plan launches around it.
• Per-key request rate limit, and a per-source-IP limit applied before authentication.
• Message size is capped: a send request, including base64-encoded attachments, may be up to 6 MB (about 4 MB of files), and a batch send has a maximum number of recipients per call.
• Amazon SES account limits apply underneath us — a sending rate and a daily quota. We surface throttling and never report a message as sent when the provider rejected it.