Outbound is a privilege.
Not a right.

01 · Purpose

Paitho is a research-and-review tool for cold outbound. The whole product is built on a bet: that a draft written from real research, reviewed by a human, sent at human cadence, is worth more than a thousand templates dropped into burner inboxes. That bet only holds if the people using the tool actually do the review.

This Acceptable Use Policy ("AUP") sets out the conduct we require from every operator on the platform. It is incorporated into the Terms of Service by reference. Violation of this AUP is a material breach of the Terms.

02 · Prohibited uses

You may not use the Service, directly or indirectly, to do any of the following:

• Send to lists you do not have a legitimate basis to contact. You must have a documented basis (legitimate interest, opt-in, prior business relationship) to email each recipient. Scraped lists from data brokers without verification do not qualify.
• Pure spam. Unsolicited bulk messages with no per-recipient research, qualification, or grounding. If your draft could be sent verbatim to a hundred recipients, it is spam.
• Phishing, fraud, or malware distribution. Including credential harvesting, fake invoices, financial scams, malicious attachments, or links to compromised infrastructure.
• Harassment, hate speech, or threats. Including content that incites violence, targets individuals or groups based on protected characteristics, or is intended to intimidate.
• Mass-blast templates without per-lead grounding. Using the Service to bypass its review step by approving identical or near-identical drafts at scale. This is the violation that matters most to us — it directly contradicts the manifesto and the entire reason this tool exists.
• Bypassing unsubscribe or opt-out signals. Continuing to email recipients who have opted out, suppressed your sender, or marked your prior messages as spam. Suppression lists must be honoured across all sender identities you use through Paitho.
• Faking sender identity. Forging the From, Reply-To, or other header fields to misrepresent who is sending. Pretending to be a customer, employee, or known acquaintance of the recipient.
• Using Paitho to attack other systems. Including denial-of-service attacks, credential stuffing, scraping at unreasonable rates, or any activity designed to degrade or compromise third-party services.
• Circumventing platform controls. Including operating multiple accounts to evade volume limits or suspensions, or using the Service in ways designed to defeat security or compliance mechanisms.
• Illegal content or activity. Including but not limited to controlled substances, weapons, sexually explicit material, gambling where prohibited, or any activity unlawful in the recipient's jurisdiction.

03 · Required compliance

You are responsible for ensuring that your use of the Service complies with all applicable laws and regulations, including without limitation:

• CAN-SPAM Act (United States) — accurate header information, non-deceptive subject lines, identification as commercial, valid physical postal address, clear and conspicuous opt-out, and honouring opt-out within ten (10) business days.
• CASL (Canada) — express or implied consent, clear sender identification, functional unsubscribe mechanism, and additional restrictions on commercial electronic messages.
• GDPR / UK GDPR (European Union, United Kingdom) — lawful basis for processing recipient personal data (typically legitimate interest with documented balancing test), data-subject rights, and breach reporting.
• ePrivacy Directive and national implementations (EU) — additional consent requirements for marketing emails to natural persons in certain jurisdictions.
• Local equivalents in jurisdictions where you do business or where your recipients are located (e.g. Australia's Spam Act, Brazil's LGPD, Singapore's PDPA).

Paitho provides tooling to help you comply (suppression lists, unsubscribe tokens, sender identity controls, audit logs). Compliance with applicable law remains your responsibility.

04 · Domain reputation

The Service requires you to connect and send from sending domains that you own and control. You must:

• Verify ownership of each sending domain via the DNS-record verification flow in the Service before sending.
• Maintain valid SPF, DKIM, and DMARC records for each sending domain.
• Use sender addresses that correspond to real human identities at your organisation.

Paitho reserves the right, in its sole discretion, to refuse to send from any domain that: (i) appears on widely-recognised spam blocklists; (ii) has been associated with prior abuse on the Service; (iii) is registered in a manner suggesting throwaway or burner use; or (iv) is owned by a third party without that party's authorisation.

05 · Volume guidelines

Paitho enforces per-sending-domain throughput caps designed to mimic the cadence of a senior human sales rep, not a bulk email platform. Default caps include limits on:

• Approved drafts per sender per day.
• Time-of-day distribution (caps on overnight or out-of-hours sending).
• Per-recipient frequency (no more than one initial outreach plus three follow-ups in any 60-day window without re-qualification).
• New-sender ramp (gradual increase for newly-verified domains).

Exact caps are documented in your account settings and may be tuned per plan. Requests to raise caps are evaluated case by case and require demonstrated reply-rate quality, low complaint rate, and clean blocklist status. If your business model requires volumes that exceed these caps, Paitho is not the right tool for you.

06 · Reporting abuse

If you have received a message you believe was sent in violation of this AUP, or if you have observed conduct on the Service you believe is abusive, please report it to abuse@paitho.ai with the following information where available:

• The full email message including all headers.
• The sender address and (if known) the sending domain.
• A description of why you believe the message violates this AUP.
• Your contact information (we will keep it confidential to the extent permitted).

Paitho's abuse team will acknowledge reports within twenty-four (24) hours and will investigate promptly. We may share necessary information with the operator's account contact and with law enforcement where required.

07 · Enforcement

When we identify a suspected violation of this AUP, we follow a graduated enforcement process, except where the violation is severe enough to warrant immediate termination (e.g. phishing, fraud, malware, illegal content):

Paitho reserves the right to skip steps and proceed directly to suspension or termination where the violation is serious, ongoing, or poses a material risk to the Service, other customers, or the public.

08 · The honest part

Operators who use Paitho the way it was designed — to research a small number of accounts well, to write specific drafts, to review honestly before sending — get better reply rates, cleaner sender reputation, and a tool that gets sharper over time as it learns their voice. Operators who try to use Paitho as a volume engine get throttled, then warned, then removed. Both outcomes are by design.

If you are unsure whether your intended use is acceptable, ask first: legal@paitho.ai. We would rather have a five-minute conversation now than terminate your account in three weeks.