Acceptable Use Policy
In short: Today Vaartix is for transactional email: login codes, password resets, receipts and account notifications that a recipient expects because of their own relationship with you. Marketing and promotional email is not supported yet and must not be sent through the transactional API. Unsolicited bulk email, cold outreach and bought or scraped lists are never allowed. Accounts whose bounce or complaint rates rise above our limits are paused automatically.
Report abuse to [email protected]. See also how Vaartix protects deliverability.
1. Who this applies to
This policy applies to everyone who uses Vaartix ("you"), including your team members and any application that sends email with your API keys or SMTP credentials. Vaartix is a service provided by NAP Designs, India ("NAP Designs", "we", "us"). This policy forms part of our Terms of Service.
2. What Vaartix is for
Vaartix is built for transactional email: messages triggered by a recipient's action or relationship with your product. Examples:
- One-time passwords, login links and verification emails
- Order confirmations, receipts and invoices
- Password resets and security alerts
- Account, billing and service notifications
Every recipient must have a direct relationship with you: they signed up for your product, made a purchase, or asked for the message. Marketing, newsletters and other promotional email are not supported yet and must not be sent through the transactional API or SMTP relay, even to people who opted in.
Marketing email is on our roadmap. When those features launch, they will require every recipient's explicit opt-in, and this policy will be updated with the rules that apply to them.
3. Prohibited content and practices
You must never use Vaartix to send, or help send:
- Marketing, promotional or newsletter email through the transactional API or SMTP relay, until marketing features launch.
- Unsolicited bulk email (spam), at any time.
- Unsolicited email to anyone who has no direct relationship with you, including cold outreach and sales prospecting of any volume.
- Email to purchased, rented, shared, scraped or harvested address lists.
- Phishing, credential harvesting, or messages that impersonate another person, brand, bank or government body.
- Malware, viruses, or links to files or sites that host them.
- Messages with false or misleading sender names, subject lines or headers.
- Content that is illegal in India or in the recipient's country, including fraud, scams, and content that infringes intellectual property.
- Gambling, betting, adult or sexually explicit content, or promotions for illegal drugs, weapons or counterfeit goods.
- Get-rich-quick, pyramid or multi-level marketing schemes, and unlicensed financial or investment offers.
- Harassment, threats, hate speech, or content that exploits minors.
You must also not:
- Try to bypass sending limits, suppression lists or account reviews, or open multiple accounts to do so.
- Trigger OTP or verification emails in bulk to addresses you don't own (including "OTP pumping").
- Probe, scan or attack Vaartix's systems, or interfere with other customers.
- Share your API keys publicly or let unauthorised parties send through your account.
4. Your responsibilities as a sender
- Permission: only email people who expect to hear from you, and keep a record of how they signed up.
- Accurate identity: send from a domain you own and have verified, with a sender name your recipients will recognise.
- Opt-out: any non-essential notification must include a clear way to stop receiving it, and you must honour requests promptly.
- List hygiene: don't retry addresses that bounce; we suppress hard bounces and complaints automatically, and you must not work around this.
- Healthy rates: keep your bounce rate below 2% and your spam complaint rate below 0.05%. Accounts above 4% bounces or 0.08% complaints are paused automatically (see section 5).
- Law: comply with applicable laws, including India's Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023, and the anti-spam laws of your recipients' countries.
5. How we enforce this policy
To protect deliverability for every customer, we monitor sending volumes, bounce and complaint rates, and content signals. Vaartix is an invite-only beta: a person reviews every new account before it can send. New accounts start at 100 emails a day, and the limit grows only with a clean sending history.
Automatic suspension
Bounces and spam complaints are processed as they arrive, and those addresses are added to your suppression list. Sending pauses automatically when either rate goes above its limit over the last 7 days, once you have sent at least 100 emails in that period:
| Signal (last 7 days) | Keep it below | Sending pauses above |
|---|---|---|
| Bounce rate | 2% | 4% |
| Spam complaint rate | 0.05% | 0.08% |
A paused account can't send until we have reviewed it. We are also alerted to sudden spikes in volume.
If we believe you have broken this policy, we may, with or without notice:
- Lower your sending limits or pause sending
- Ask you for information about your recipients and how they opted in
- Suspend or terminate your account
- Report illegal activity to the relevant authorities
Where possible, we'll tell you what happened and how to fix it before restoring sending.
6. Reporting abuse
If you received an unwanted or suspicious email sent through Vaartix, please forward it with full headers to [email protected] (or [email protected]). We review every report, usually within one working day, and pause the sending account while we investigate a credible report.
To report a security vulnerability in Vaartix itself, email [email protected].
7. Changes
We may update this policy as Vaartix grows. We'll post the new version on this page with a new date, and notify customers by email of significant changes.
8. Contact
Questions about this policy: [email protected].