Email Acceptable Use Policy

This Email AUP applies to all email sent through sites.soliddigital.com by Solid Digital, LLC, customers, agencies, and their authorized users. It supplements the Terms of Service and applies whether sending is manual, automated, managed, API-based, or triggered by a website form. “Client” includes the business whose identity and recipient list are used.

01

Permitted Email and U.S. Recipients

Use the Service only for legitimate, authorized transactional messages and permission-based marketing to recipients reasonably verified as located in the United States. Do not send to known non-U.S. recipients or recipients whose country is unknown. “U.S. recipient” means a person or business contact ordinarily located in the 50 United States or District of Columbia, based on current, reasonably reliable information; citizenship and the location of the email provider's servers do not determine eligibility. U.S. territories and other locations require separate written approval and legal review.

Collect and retain the source and date of the recipient's country information, such as a recipient-provided country or an existing customer address. Do not infer U.S. location solely from an email domain, language, IP address, or a client's general statement that its customers are American. Correct or suppress a record if you learn it is inaccurate. Client attestations supplement recipient-level evidence; they do not replace it. A recipient traveling abroad is not reliably detectable; report known changes in ordinary location. Geographic eligibility does not establish permission to send.

02

Permission Standard

Marketing requires an affirmative, documented opt-in identifying the Client and the type of email requested. This platform rule is intentionally stricter than the minimum that may apply to some U.S. commercial email. Permission to hear from one Client is not permission to hear from an agency, its other clients, affiliates, or list purchasers. Do not treat a public address, business card, purchased product, website visit, or downloaded list as automatic marketing permission. Consent must not be prechecked, deceptive, or obtained through coercion. Retain the address, date, source, disclosure shown, and confirmation evidence where used. The Service requires confirmed (double) opt-in for every new subscriber from signup forms and manual additions: an address receives one confirmation message and joins the list only after the recipient confirms. An imported list may skip confirmation only when the person importing it signs, in the Service, a statement that everyone in the file already gave the Client permission to send them marketing email, that the list was not bought, rented, scraped, appended or shared, that its people signed up or received the Client's email within the last 12 months, and that unsubscribed, bounced and objecting addresses were removed. The Service records the signed statement, the signer, the time, the network address and a fingerprint of the file. The Client is responsible for that consent and must produce its evidence on request. Solid Digital may also accept an imported list as already confirmed on documented proof of prior opt-in. Every other import is confirmed by each recipient. Unconfirmed addresses are deleted after 30 days.

Transactional email must be reasonably necessary to fulfill a recipient's request or an existing transaction or relationship, such as a requested password reset, receipt, or service notification. Do not label promotional email transactional to bypass permission or suppression controls. Mixed messages require review and must satisfy marketing requirements unless their classification is confirmed otherwise. An unverified signup must not trigger a sequence of promotional messages.

03

Prohibited Practices

Do not use purchased, rented, scraped, harvested, appended, guessed, or third-party shared marketing lists. Do not send unsolicited bulk outreach, spam, phishing, impersonation, malware, fraudulent offers, harassment, unlawful threats, or content that infringes rights. Do not mislead recipients through forged headers, deceptive subject lines, false reply/forward indicators, or concealed identities. Do not use the Service for credential theft, unlawful discrimination, illegal goods or services, or content prohibited by applicable AWS policies. Do not evade limits, use compromised accounts, rotate domains to escape enforcement, remove required disclosures, or reimport suppressed contacts to resume prohibited sending.

04

Sender Identity and Content

Use an approved, authenticated domain that the Client controls or is authorized to use. Display an accurate Client identity and a monitored reply or contact channel. Marketing must include the Client's valid physical postal address, a clear unsubscribe link, and advertising identification where legally required. The Client must approve claims, offers, links, landing pages, branding, and required disclosures. Solid Digital's involvement must not obscure the business on whose behalf the message is sent. Configure SPF, DKIM, and DMARC appropriately before production sending and follow applicable mailbox-provider requirements.

05

Unsubscribe and Suppression

Provide a free, clear unsubscribe mechanism that requires no account login, fee, or unnecessary personal information. Offer an option to stop all marketing from that Client, even if topic preferences are also available. Apply opt-outs immediately in the sending workflow and before any later marketing send; in all cases comply with applicable legal deadlines. Keep the mechanism functional for at least 30 days after the marketing message. The Service adds a visible unsubscribe link and one-click unsubscribe headers to every marketing message, applies an opt-out immediately for that Client, and its unsubscribe links do not expire. Opt-outs received another way can be recorded in the Service and are applied the same way. Route requests received through replies, support, or offline channels into the same suppression process promptly.

Suppress hard-bounced addresses and spam complaints promptly. Do not send additional marketing while suppression status is unresolved. Resubscription requires a new affirmative request from the recipient and review of the suppression reason; a new opt-in does not justify overriding an invalid address or unresolved abuse block. A marketing opt-out does not prevent a genuinely necessary transactional message, but that message must contain no unrelated promotion. Maintain Client-specific preferences and separate platform safety blocks without revealing another Client's recipient activity.

06

Forms, Automation, and Tracking

Protect public forms against bots and email bombing through suitable validation, rate limits, abuse controls, and confirmation steps. Do not allow arbitrary public input to become outbound subjects, recipients, or message bodies without appropriate controls. Record the approved purpose, trigger, recipient source, and template version for each automation. Tracking of opens, clicks, devices, or links requires appropriate notices and any required permission. Do not enable tracking until the Client has approved it and applicable privacy requirements have been assessed. In the Service, per-recipient click tracking is off by default and only the Client's approver can turn it on; open tracking is not offered. Links to the Client's own website carry campaign tags so visits appear in the Client's aggregate website analytics. To limit abuse of public forms, the Service sends at most one confirmation message per address per day and caps confirmations per Client per hour.

07

Monitoring and Cooperation

We may review sending patterns, samples, consent evidence, complaints, and delivery events as reasonably needed to provide and protect the Service. Keep lists current, remove invalid addresses, and investigate unusual volumes or reputation changes. We may impose customer-specific volume, bounce, complaint, and engagement limits and pause sending before upstream-provider limits are reached. The Service also ramps up daily sending for newly verified domains, re-checks each recipient's subscription, eligibility and suppression status immediately before sending, holds the rest of an import when its confirmation messages bounce excessively, sends a campaign to only the first part of a signed (attested) import and holds the rest of that list when those messages bounce or draw complaints, and pauses a Client's sending automatically when bounces or complaints exceed internal thresholds. We do not promise that any numerical rate is a safe harbor. Provide requested permission, country, and authorization evidence within two business days or sooner where reasonably required for an urgent incident. Stop disputed activity while we investigate.

08

Enforcement and Reporting

We may reject, throttle, quarantine, suspend, or terminate activity under the Terms, including immediately for serious abuse or upstream restrictions. We will give notice and a remediation opportunity when practicable. Reinstatement requires satisfactory corrective action and is subject to provider approval when applicable. Report suspected abuse to hello@soliddigital.com (subject line "Abuse report"). Send privacy requests to privacy@soliddigital.com.

This policy does not transfer or eliminate either party's legal responsibilities. U.S.-only targeting does not make otherwise unlawful email lawful or guarantee exemption from laws outside the United States.