Acceptable Use Policy

Mailera manages email for multiple organizations on shared infrastructure and connects directly to Microsoft. This policy keeps the system safe, protects everyone's mailbox reputation, and applies to the website, app, API, and shared links.

• Manage your team's mailboxes and support customers from the appropriate mailbox.
• Read verification codes and system messages from your own mailboxes to automate work.
• Integrate with internal systems through the API and webhooks.
• Warm up your mailboxes with genuine messages sent between mailboxes you manage or to recipients who have consented.
• Share messages with managers or customers using password-protected links with an expiry.

• Connecting or accessing mailboxes without legal authorization, including stolen or hijacked accounts.
• Sending spam or bulk email to people who have not consented to receive it.
• Committing fraud, impersonating other people or organizations, or distributing malware or malicious links.
• Harvesting email addresses or buying or selling other people's email data or personal data.
• Storing or sending content that is illegal, abuses children, harasses, threatens, or incites violence.
• Violating Microsoft's terms or laws on spam and personal data protection.
• Attempting to guess shared link passwords, exceeding API limits, creating multiple workspaces to bypass limits, scanning for vulnerabilities without permission, or overloading the system.

Each API key allows up to 300 requests per minute. Sending messages through shared links is subject to hourly and daily limits. Microsoft also applies its own sending limits to each account; exceeding them may cause Microsoft to temporarily block the mailbox.

Seen Mailera used for spam, fraud, or unauthorized access? Report it through the Contact page with the subject “Report abuse”, including the message subject, time, and sender address if available.

Found a security vulnerability? Choose the subject “Report a security vulnerability”. Please do not access other people's data, disrupt the service, or disclose the vulnerability before we have had time to address it.

Depending on severity, we may issue a warning, suspend mailboxes, revoke API keys or shared links, lock workspaces, or terminate accounts. If conduct appears to violate the law, we may notify the competent authorities.