Terms and Acceptable Use

Service use

Users may use LoftBox to create agent mailboxes, send operational messages, receive replies, process webhook events, and inspect delivery logs for legitimate business or service workflows.

Users are responsible for configuring domains, DNS records, webhook endpoints, API keys, agent identities, and internal permissions correctly.

Verified domains and identity

• Outbound sending requires domain ownership verification and sender alignment.
• Users must not impersonate another organization, brand, person, or domain.
• Users must keep API keys, webhook secrets, SMTP credentials, OAuth credentials, and delivery tokens secure.

Prohibited use

• Bulk unsolicited email, spam, purchased lists, scraped recipients, lead-harvesting, or deceptive campaigns.
• Phishing, malware, credential theft, fraud, harassment, illegal content, or attempts to bypass delivery trust controls.
• Sending from domains the user does not own or is not authorized to operate.
• Using LoftBox as a public SMTP relay, traffic laundering path, or reputation-hiding service.

Report and safety controls

LoftBox may apply rate limits, message holds, manual review, delivery checks, account restrictions, or suspension when usage creates deliverability, security, compliance, or misuse risk.

Bounces, complaints, blocklist signals, delivery review findings, and user reports may be used to restrict or terminate sending privileges.

Customer responsibilities

• Send email only to recipients where the user has a valid basis to communicate.
• Honor unsubscribe, opt-out, privacy, deletion, and compliance requests that apply to the user's workflow.
• Monitor agent behavior, webhook delivery, delivery failures, and recipient complaints.
• Keep message content, agent instructions, and automation within legal and delivery-acceptable boundaries.

Contact

Questions and user reports can be sent to [email protected].