Acceptable Use Policy

1. Lawful receive use

You may use Inboxes.Run to receive email for addresses you create or are authorised to control, including testing, development, automation and other lawful workflows. You must comply with applicable law and third-party rights.

2. Prohibited identity and credential abuse

• Phishing, credential harvesting, impersonation or account takeover.
• Using messages, password resets, one-time codes or account-recovery links that are not intended for you or an authorised user.
• Attempting to access, recover or assume control of a third-party account using residual, misdirected or former-user mail.
• Selling or sharing personal message content obtained without proper authority.

3. No residual-mail harvesting

You may not ask Inboxes.Run to enable catch-all collection for unknown historical recipients, import guessed former-user addresses, or expose organic mail sent to people who previously used a supplier domain. Domain control alone does not make unrelated communications yours to exploit.

4. Security and abuse restrictions

• No malware delivery, harmful payload distribution or infrastructure abuse.
• No stalking, unlawful surveillance, doxxing or targeted interception of communications.
• No unauthorised security testing, exploitation or attempts to bypass service controls, rate limits or access boundaries.
• No use designed primarily to violate another service's terms, anti-abuse controls or legal rights.
• No unlawful spam or outbound-mail activity through or in connection with the service.

5. Automation and Domain Network

High-volume automation must stay within assigned limits and authorised recipients. Reserved or dedicated capacity does not grant ownership of supplier roots or permission to collect mail for unknown recipients. You must not attempt to reconfigure Domain Network into a residual catch-all system.

6. Enforcement

We may rate-limit, suspend, terminate or investigate use that reasonably appears to violate this AUP, threaten service reliability, create legal/security risk or harm third parties. Where appropriate we may preserve limited evidence needed for security, dispute handling or legal compliance.

If you are unsure whether a workflow is allowed, ask Support before deploying it at scale.