Terms of Service

The agreement between you and HAMANI PTY LTD for Hamanimail.

HAMANI PTY LTD · ACN 696 864 981 · ABN 48 696 864 981 · Sydney, New South Wales, Australia. HAMANI™ is a trade mark of HAMANI PTY LTD.

Effective 1 August 2026 · Version 1.1, last updated 5 September 2026. These terms are the agreement between you and HAMANI PTY LTD ("HAMANI", "we", "us") for the Hamanimail service. By creating an account or sending through the service you accept them.

Every statement below about what the software does or does not do was checked against the source code. Nothing here promises a capability that does not exist.

1. What Hamanimail is

Hamanimail is Australian-owned, Australian-hosted business email. We run email on your own domain — you keep the domain, we run the mail:

• Mailboxes that receive. Mail addressed to your domain arrives at Amazon SES in Sydney, is scanned for spam and viruses, is stored and is available to read in webmail.
• Mailboxes that send. Compose and reply from webmail; the mail goes out through our sending infrastructure from your verified domain.
• A sending API, if you want your own applications to send transactional or marketing mail from your domain.
• Webmail for reading, replying, searching, organising into folders, and handling attachments — including a contacts list, message filters, an auto-reply, and a personal file drive for files you upload or save from attachments (the drive has its own storage quota, separate from your mailbox's).
• A business admin console for adding, listing, resetting the password of and removing mailboxes on your own verified domains.

• An optional zero-knowledge private mailbox (§2A). It is off unless you deliberately turn it on, one mailbox at a time, and turning it on has consequences you accept in advance.

What it is not: it is not a calendar or an office suite, and it is not an archiving or e-discovery product. The contacts list and file drive above are conveniences inside webmail, not a standalone contacts platform or a file-sync product. An ordinary mailbox is not end-to-end encrypted — your mail is encrypted in transit (TLS) and at rest (AES-256) and stored in Australia, but we hold the keys and are technically able to read stored mail so that spam filtering, search and support can work (see our Privacy Policy, §6). The one exception is a mailbox you have put on the private tier under §2A, where we hold only ciphertext we cannot open. It is email hosting.

One step is yours to do

To send from your domain, you must publish DNS records we give you (DKIM, SPF, DMARC) and, to receive, an MX record. We generate the exact records; publishing them is yours to do, because it is your domain. A domain is only marked verified when Amazon SES itself confirms it — we never mark a domain verified optimistically.

2. Your account and your keys

• API keys are shown once, at creation. We store only a one-way hash, so we cannot recover a key you lose — you issue a new one and revoke the old.
• Mailbox passwords are stored only as a memory-hard (scrypt) hash with a per-mailbox random salt. We cannot tell you what your password is — we can only reset it.
• Keep your keys and passwords secret. Sending done with your key or from your mailbox is treated as sending done by you.
• Tell us promptly if a key is compromised so we can revoke it.
• A key may only send from a domain you have verified. This is enforced on the server on every send — a key can never send from someone else's domain.

2A. The zero-knowledge private mailbox — what you are agreeing to

You may put a mailbox on an optional private tier. It is off by default, it is opted into one mailbox at a time, and the software will not enable it until you have positively acknowledged the following. Full detail is in our Privacy Policy (§4A); these are the terms.

By enabling it, you accept that:

1. We cannot recover your mail if you lose your passphrase, and neither can anyone else. Your passphrase never reaches us — your browser derives the key on your own device. We hold your mail only as ciphertext and hold no key to it. If the passphrase is lost, the mail in that mailbox is permanently and irreversibly unreadable. There is no reset, no recovery, no backup and no legal process that changes this. This is not a limitation of our support — it is the guarantee itself: a vault we could open for you is a vault we could open for anyone.
2. You accept that consequence in exchange for the guarantee. Permanent loss of access following a lost passphrase is not a failure or defect of the service, and is not something we are able to remedy.
3. Search does not work, and spam and phishing filtering does not run, on a private mailbox. You will receive spam unfiltered. Both follow from the same fact: we cannot read it.
4. Enabling it does not encrypt mail you already received, and a vault cannot be replaced — replacing it would orphan every message already stored, so the software refuses.
5. Mail arrives from the internet unencrypted. We encrypt it the instant we receive it, but it exists in plaintext in our memory for that instant. No provider delivering ordinary email can avoid this. Nothing readable is ever written to our storage.
6. It does not protect you from your own device. If the computer or browser you unlock the mailbox on is compromised, none of this holds.

3. Acceptable use

You are responsible for what you send. In particular:

• Australian anti-spam law applies to you. Commercial electronic messages sent from your domain are governed by the Spam Act 2003 (Cth) — consent, accurate sender identification and a working unsubscribe. Those obligations are the law's, not ours; what our system enforces technically on your behalf is described in these terms and on our Acceptable Use page. In short: you must send only to people who have consented, you must keep records of that consent, and you must honour every unsubscribe. We also enforce unsubscribe technically — a marketing send is refused outright if our one-click unsubscribe is not configured, so we never send non-compliant mail on your behalf.
• Do not send spam, phishing, malware, deceptive content or anything unlawful.
• Do not use the service to harass, defraud or impersonate anyone.
• Do not attempt to circumvent our rate limits, warm-up limits, suppression list or reputation controls.
• Do not use the service to send mail on behalf of a third party whose sending you cannot vouch for.

Personal mailboxes on a HAMANI-owned domain

HAMANI may offer a personal mailbox on a domain HAMANI owns, rather than on a domain of your own. Where it does, these additional terms apply to that mailbox:

• The same anti-spam rules apply to you. A personal mailbox is not a loophole. Bulk or commercial messages sent from it are governed by the Spam Act 2003 (Cth) exactly as they are from a business mailbox, and that Act applies to you unchanged.
• Do not impersonate anyone. Do not choose or use an address, display name or signature that represents you as another person, as a business you do not represent, as a government agency or as HAMANI itself.
• Reserved and restricted names. Addresses that suggest an official, administrative or security function — for example admin, postmaster, abuse, security, support, billing, noreply — and names that impersonate a brand, an institution or a public body, are reserved to HAMANI. We may refuse them, and we may reclaim one that was issued in error or obtained by misrepresentation, on notice.
• The address is a licence, not a possession. You do not own a HAMANI-owned domain and cannot transfer the address away, because the domain is not yours. If that matters to you, use a domain you own — which is the main product.
• One person, honestly. Signup requires a verified recovery email address before the mailbox is activated. Do not create accounts in bulk, automate signup, or create an account in someone else's name.

What happens if a personal account is abused. For reputation problems — bounce or complaint behaviour that threatens the shared sending reputation — we suspend that account's sending. Your mailbox and your data stay reachable: you can still sign in, read your mail and get your data out, exactly as with an unpaid business invoice (§4). For a serious breach of these terms — impersonation, unlawful content, an account created by misrepresentation — we may suspend the mailbox itself, and a suspended mailbox cannot be signed in to while the suspension stands. Either way, suspension is not deletion: nothing is destroyed by a suspension, and your right to obtain your data (§5) survives it — a suspended mailbox's export goes through us rather than through sign-in.

A separation we have actually built, and its limit. Personal sending and business sending are counted against separate reputation aggregates with separate brakes, so abuse on the personal side stops the personal side and cannot stop a paying business customer from sending. Its limit: Amazon SES measures its own account-wide reputation, and that is not separated by us. Bad enough behaviour anywhere on the platform can still cause AWS to throttle or suspend the underlying account, which is outside our control.

Why we enforce this hard

Every HAMANI customer shares sending reputation. One bad sender damages delivery for every honest one. So:

• We may throttle or suspend sending — immediately, with or without notice — where sending breaches these terms, or where bounce or complaint rates threaten the shared sending reputation. This is a deliberate design commitment.
• Suspension of sending is not lockout from your mailbox. See §4.

Limits that exist, so you are not surprised

These limits are configured today:

• A free sending tier includes 1,000 emails a month and up to 33 a day. Over either ceiling, a send is refused until the next period, unless you hold prepaid pay-as-you-go credit, which is then drawn down. Paid sending tiers raise the monthly volume — see our pricing page.
• New-domain warm-up. A newly verified domain is capped at 50 sends on its first day, growing over 30 days to 50,000 per day, after which it graduates. Over the ceiling, a send is refused with a clear warm-up error. This protects your domain's reputation and everyone else's. Plan launches around it.
• Per-key request rate limit, and a per-source-IP limit applied before authentication.
• Message size is capped: a send request, including base64-encoded attachments, may be up to 6 MB (about 4 MB of files), and a batch send has a maximum number of recipients per call.
• Amazon SES account limits apply underneath us — a sending rate and a daily quota. We surface throttling and never report a message as sent when the provider rejected it.

4. Payment, and what happens if you do not pay

• Hamanimail is billed in Australian dollars, GST-inclusive, at the plan and rates shown on our pricing page. Free tiers are free — no card, no expiry, not a trial. There is no minimum term and no lock-in contract.
• Payments are processed by Stripe. Card details never reach HAMANI.
• The price you are shown is the price you are charged.

If an invoice goes unpaid:

• Sending may be paused. That is the lever we use, and the only one. When a payment fails we email your account's mailbox saying so and where to fix it (one notice per invoice), and Stripe retries the card on its normal retry schedule; once the invoice is past due, sending on the paid plan may pause immediately. We do not promise a separate grace period beyond those retries.
• You are never locked out of your mailbox or your data. Not for a late invoice, not during a dispute, not ever. You can still log in, read your mail and get your data out.
• Sending resumes as soon as the account is settled.

5. Cancelling, and taking your data with you

• Cancel whenever you like. There is no minimum term and no exit fee. You pay for what you used up to the point you stop.
• Your mail is yours. On cancellation you may take it with you, at no charge.
• How export works today: the account API includes a self-service export that lists every message you hold — every mailbox, every folder, Trash and quarantine included — with the storage location of each message's complete original. It keeps working while an invoice is unpaid, deliberately. A one-click export button in webmail is still on the roadmap; until it ships, you can also simply ask us and we will run the export for you, promptly and for free.
• Deleting your data. You can permanently delete a mailbox and all of its mail yourself, at any time, from your admin console — this erases the messages and their stored attachments, and it cannot be undone. Cancelling your account does not by itself delete your mail (so that you can still export it); deletion is the separate, deliberate action above.
• Closing your account entirely is also self-serve ("Close account" on your account page, behind a typed confirmation): it cancels your plan with the same pro-rata refund as cancelling, then permanently erases every mailbox, message and drive file the account holds and revokes your API keys. Export first — there is no undo.
• Moving to another provider is a DNS change on a domain you already own. That is the whole point of running your mail on your own domain: nothing here is designed to make leaving hard.

6. Service availability

We do not promise an uptime percentage. There is no service level agreement, no availability guarantee and no service credit scheme in these terms.

What we can tell you:

• The service runs on AWS infrastructure in Sydney, and inherits both its resilience and its outages.
• Sending is asynchronous by design: a message you submit is queued and delivered, and a transient failure is retried automatically. A message that cannot be delivered after retries is parked, never silently dropped.
• Mail is stored durably in Amazon S3 and DynamoDB with point-in-time recovery enabled on the index.
• We may need to interrupt the service for maintenance. We will avoid it where we can and tell you where we cannot.
• We do not guarantee delivery to any recipient's inbox. No provider honestly can. Whether mail reaches an inbox or a spam folder is decided by the receiving provider, on signals including your own sending behaviour. Our warm-up ramp and reputation controls protect your domain's reputation; they are not a promise about placement.

7. Our obligations to you

• We will store your mail in Australia (currently AWS's Sydney region) and tell you before that changes.
• We will not read, sell, mine or train on your mail. See our Privacy Policy (§6) for exactly who can access it and when.
• We will keep your data available to you even where a payment is outstanding.
• We will tell you about a security incident affecting your data, and comply with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth) where it applies to us.
• We will not claim certifications we do not hold. HAMANI holds no ISO/IEC 27001, SOC 2, IRAP or Essential Eight assessment.

8. Your content, our platform

• You own your content. Your mail, your attachments, your templates, your contact data. We claim no ownership of any of it.
• You grant us only the permission we need to run the service: to receive, store, process, scan and transmit your mail so it reaches you and your recipients. Nothing broader.
• We own the platform — the software, infrastructure and documentation. Your subscription does not transfer any of it to you.

9. Suspension and termination

• You may stop at any time (§5).
• We may suspend sending immediately where §3 is breached or where the shared sending reputation is at risk. This applies to a personal mailbox on a HAMANI-owned domain exactly as it applies to a business account (§3).
• Suspending sending never suspends access, and non-payment never suspends anything but sending. For non-payment or a reputation brake, your mailbox stays reachable, your mail stays readable and you can still take your data out (§5). The one exception is the serious-abuse mailbox suspension in §3, which does block sign-in to that mailbox — and even then your right to your data survives (§5), with export fulfilled through us. A business owner can likewise suspend a staff mailbox on their own domain from their admin console; that is the owner's decision about their own domain, not ours.
• We may terminate the service on at least 30 days' notice to your account address, except where immediate suspension is permitted under §3 for abuse or reputation risk.
• Termination for any reason does not affect your right to obtain your data (§5), and does not entitle us to withhold it.

10. Limitation of liability

• Your non-excludable rights come first. Nothing in these terms excludes, restricts or modifies any consumer guarantee, right or remedy you have under the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)) or any other law, to the extent it cannot lawfully be excluded. Where our liability for a failure to comply with such a guarantee can be limited, our liability is limited, at our option, to re-supplying the service or paying the cost of having it re-supplied.
• Cap. Subject to the paragraph above, our total aggregate liability to you arising out of or in connection with the service — whether in contract, tort (including negligence), under statute or otherwise — is limited to the total fees you paid us for the service in the 12 months before the event giving rise to the liability.
• Excluded loss. Subject to the first paragraph, we are not liable for any indirect or consequential loss, or for loss of profits, loss of revenue, loss of business, loss of goodwill or loss of or corruption of data, however caused. Email is not a system of record; keep your own copies of anything you cannot afford to lose.
• Your indemnity for your own sending. You indemnify HAMANI against any claim, loss, liability or cost we suffer arising from your use of the service in breach of these terms or the law — including breach of the Spam Act 2003 (Cth), and unlawful, infringing or deceptive content you send. This reflects the simple fact that you, not we, decide what you send and to whom.

11. Changes to these terms

We may update these terms. Where a change materially affects you, we will give notice before it takes effect. Continuing to use the service after that is acceptance; if you do not accept, you may cancel under §5 and take your data with you.

12. Governing law

These terms are governed by the laws of New South Wales, Australia, and the parties submit to the non-exclusive jurisdiction of the courts of New South Wales and the courts competent to hear appeals from them.

13. How to contact us

For support, notices, complaints or disputes, write to [email protected]. We aim to acknowledge within two business days, and to work with you in good faith to resolve it.

HAMANI PTY LTD · ACN 696 864 981 · ABN 48 696 864 981 · Sydney, New South Wales, Australia. © 2026 HAMANI PTY LTD. Hamanimail Terms of Service, version 1.1, effective 1 August 2026, last updated 5 September 2026.