Sending rules and acceptable use

1. Only people who agreed

Sends only to people who agreed to receive its email.
Never uses address lists that were bought, rented, taken from another business or scraped from the internet.
Can show when and how each person gave consent.
Where it sends commercial electronic messages, meets its legal duties itself, including those of Türkiye's Message Management System (İYS).

Asks the business, on every list upload, to confirm that these people gave consent, and keeps that confirmation with who gave it, when and from which IP address.
Sends a confirmation email to every new address that comes in through a sign-up form; nobody joins the list without confirming. Only we can switch this step off for an account, and then with a daily cap.
Records every sign-up, confirmation and refusal from a form with the text shown, the time and the IP address.
Checks uploaded addresses: nothing is sent to addresses that are malformed, cannot receive email or have bounced for good before.

Adds to every campaign and automated series email a visible unsubscribe link and the one-click unsubscribe header mailbox providers use (List-Unsubscribe with List-Unsubscribe-Post).
Applies the unsubscribe at once and takes the person off all of that business's lists.
Changes nothing when the link is merely opened; the person presses a button on the page. So security software that scans email cannot unsubscribe anyone by mistake.
Lets only the person undo it, from the same page. The business cannot re-subscribe anyone.
Keeps unsubscribe links working even after the business's account is closed.

When an email bounces for good, the address is removed from that business's sending at once.
When temporary failures repeat over several campaigns in a row, the address is removed too.
A person who marks the email as spam is removed from all of that business's lists at once.
Addresses found not to exist are remembered for a while, not as the address but as a fingerprint made with a secret key, and are skipped in other businesses' sends too.
If bounces or complaints pass a set level while a campaign is sending, the campaign pauses itself. If the checks after a send, or the account's recent sends, show the same, all of the account's sending stops. Stopped sending does not resume until we have reviewed it and allowed it.

Sends from its own domain, preferably a subdomain.
Shows its business name and postal address in its emails.
Uses a real reply address that someone reads.
Does not mislead in the sender name or subject line; says clearly who it is and what it is sending.

Keeps sending locked until the business has proven it owns the domain and the domain's DKIM, SPF and DMARC records check out. If the records break later, sending stops.
Refuses sender and reply addresses that take no replies, such as “no-reply”.
Adds the business's name and postal address to the bottom of every email. An account that has not entered its identity cannot send.
Gives every business its own separate space inside Amazon SES, so that one business's problems are tracked apart from the others.

Starts a new sender domain with small daily amounts. It grows step by step after days without trouble; a domain left unused for a long time is scaled back again.
Sets every account's sending limits.
Unless agreed otherwise, sends campaigns during daytime hours on the sender's clock.

Does not send a new account's first campaigns without our approval.
Holds risky-looking sends for approval later on too: a domain that has never sent, an audience much larger than before, many addresses that have never been emailed, a problematic list upload, a previous campaign that went badly, or suspicious links.
Can put all of an account's campaigns under approval when needed, and can ease this review for a business it knows well; the rules on this page still apply to that business.
Treats an approval as valid for the content and audience size it was given for. If the content changes or the list grows clearly, the campaign waits for approval again.
Stops a send for content faults such as sample text left unchanged.

Sends nothing unlawful, misleading or that infringes others' rights.
Sends no deceptive email such as phishing, malware, fake invoices or fake delivery notices.
Does not impersonate another person or brand.
Does not promote illegal goods or services, unlicensed gambling, or counterfeit or fake goods.
Keeps its email within Turkish law and the Amazon Web Services Acceptable Use Policy.