Acceptable Use Policy

1. Core rule

You may use Zorren only to contact people who have a genuine relationship with your own business or who have lawfully opted in to hear from your business.

You must not use Zorren to contact people with no prior relationship to your business.

You must not use Zorren to promote another business, sell third-party offers, generate leads for someone else, or send cold outreach.

2. Permission-based sending only

You may send broadcasts only to people who:

• submitted an enquiry to your business;
• subscribed through your form or capture page;
• booked with your business;
• purchased from your business;
• are existing customers of your business;
• asked to receive updates from your business;
• otherwise gave valid consent, permission, or lawful authority for you to contact them.

You must be able to show evidence of consent, permission, or relationship if Zorren, a regulator, an email provider, or another lawful authority asks for it.

You are responsible for making sure your contact collection and sending comply with the laws that apply to you and your recipients.

Any optional opt-in field mapping or permission record in Zorren helps you retain evidence. It does not replace your responsibility to determine whether you may lawfully contact a person. Zorren may request supporting evidence at any time.

3. Prohibited lists

You must not use Zorren with:

• purchased lists;
• rented lists;
• scraped lists;
• harvested contacts;
• guessed email addresses;
• enriched databases;
• brokered lists;
• third-party lead lists;
• public-directory contacts;
• contacts collected from LinkedIn, social media, websites, review platforms, or search results without direct permission;
• co-registration lists where the recipient did not clearly consent to hear from your specific business;
• any list where you cannot prove the person has a lawful relationship with your business or gave valid permission.

If you did not collect the contact directly, and the person would not reasonably expect to hear from your business, do not upload, add, or email them through Zorren.

4. Allowed sending examples

Zorren is intended for practical service-business updates.

Allowed examples include:

• a tattoo studio emailing past enquirers about available booking spots;
• a barber emailing regular customers about open appointments this week;
• a salon emailing subscribers about new availability or service updates;
• a clinic emailing existing clients about appointment openings;
• a trade business emailing past enquiries about seasonal availability;
• a studio emailing people who asked to be notified when bookings reopen;
• a service business emailing customers about relevant changes to services, hours, or availability.

Broadcasts should relate to your own services, your own availability, your own business updates, or the relationship the recipient already has with your business.

5. Prohibited sending purposes

You must not use Zorren for:

• cold email;
• affiliate offers;
• third-party promotions;
• lead generation for other businesses;
• political campaigning or fundraising;
• financial promotions;
• investment claims;
• crypto offers;
• multi-level marketing or pyramid schemes;
• payday lending;
• gambling;
• adult services;
• weapons;
• illegal products or services;
• misleading health, income, financial, or business claims;
• anything unrelated to your own business relationship with the recipient.

6. Prohibited business types and high-risk categories

You must not use Zorren for any of the following unless Zorren gives written approval:

• illegal goods or services;
• weapons or weapon sales;
• adult services;
• crypto investment schemes;
• financial promotions or investment claims;
• high-risk finance;
• payday lending;
• multi-level marketing, pyramid schemes, or similar schemes;
• gambling;
• supplements or medical claims;
• debt collection;
• political organisations, political campaigning, or political fundraising;
• charities or fundraising;
• legal claims, compensation claims, or claims management leads;
• lead-generation arbitrage;
• any business model that creates elevated legal, regulatory, recipient harm, provider, or platform reputation risk.

If your business falls into one of these categories, contact legal@zorren.app before using Zorren. Zorren may approve or refuse access at its discretion.

7. Content standards

You must not send, collect, upload, link to, or promote content that is:

• unlawful;
• deceptive;
• misleading;
• fraudulent;
• abusive;
• harassing;
• threatening;
• hateful;
• sexually explicit;
• exploitative;
• defamatory;
• infringing someone else's rights;
• impersonating another person or business;
• designed to mislead recipients about who you are;
• designed to evade spam filters;
• malware, phishing, spyware, credential theft, or suspicious downloads;
• likely to damage Zorren's sending reputation, infrastructure, customers, providers, or recipients.

You must not use misleading subject lines, sender names, reply-to addresses, postal addresses, links, branding, or claims.

8. Commercial and transactional message separation

Zorren broadcasts are treated as commercial emails.

You must not use Zorren to disguise promotional content as a transactional or purely service-based message.

You must not try to avoid consent, unsubscribe, identification, or spam-law requirements by labelling a marketing broadcast as a receipt, confirmation, reminder, service notice, or other transactional message.

9. Unsubscribe and suppression rules

Every Zorren broadcast includes an unsubscribe link and your saved postal address.

You must not:

• remove, hide, obscure, or interfere with unsubscribe links;
• tell recipients to ignore the unsubscribe link;
• re-add unsubscribed contacts manually;
• re-import unsubscribed contacts;
• use another account to email suppressed contacts;
• contact people through Zorren after they have unsubscribed, bounced permanently, or complained;
• use other tools to bypass suppression where doing so would be unlawful;
• encourage recipients to resubscribe after they have withdrawn consent where doing so would breach applicable law.

If someone unsubscribes, complains, or is suppressed, respect that.

10. Bounce, complaint, and reputation rules

You must keep your list clean and current.

Zorren may pause, throttle, restrict, review, or suspend sending if your account shows signs of elevated risk, including:

• high bounce rates;
• spam complaints;
• unusual unsubscribe spikes;
• stale imported lists;
• suspicious manual adds;
• suspicious sending patterns;
• provider warnings;
• blocklist risk;
• poor list quality;
• recipient harm;
• damage or likely damage to Zorren's sending reputation.

Zorren is not required to publish or disclose exact operational thresholds.

11. Manual add and import rules

If you manually add or import contacts, you confirm that:

• each contact has a genuine relationship with your business or gave valid permission;
• you are legally allowed to email each contact;
• the list was not purchased, rented, scraped, harvested, guessed, enriched, or obtained from a third-party lead source;
• you can prove consent, permission, or relationship if required;
• the contacts are current enough that emailing them is reasonable and lawful.

Do not import stale contacts unless you have a valid reason to believe they still expect to hear from your business.

Avoid role-based email addresses unless you have clear permission. Examples include info@, admin@, support@, sales@, hello@, and bookings@.

12. Sensitive data and custom fields

Zorren is not designed for sensitive personal information.

You must not collect, upload, import, or store sensitive personal information through Zorren unless you are legally permitted to do so, it is necessary for your business, and you accept full responsibility for that data.

Sensitive personal information may include:

• health information;
• medical details;
• government identifiers;
• financial account information;
• children's information;
• criminal record information;
• biometric information;
• highly sensitive appointment details;
• any other information treated as sensitive under applicable law.

If Zorren reasonably believes sensitive personal information creates legal, security, platform, provider, or recipient risk, Zorren may require you to remove it, restrict access, disable a form, or suspend your account.

13. Customer website snippet rules

If you install the Zorren snippet on your own website, you must:

• install it only on a website you own or control;
• map only the fields needed for Zorren;
• use lawful form fields;
• provide any required privacy notices;
• use any required consent wording;
• make sure your website form is lawful;
• not use the snippet to collect hidden, unrelated, or excessive data;
• not alter, tamper with, reverse engineer, or misuse the snippet;
• not use the snippet to bypass Zorren's limits, consent rules, suppression rules, or compliance controls.

You are responsible for your own website, forms, consent notices, privacy notices, and snippet implementation.

14. Technical abuse

You must not:

• probe, scan, or test Zorren systems without permission;
• bypass authentication, limits, rate limits, billing controls, plan limits, or access controls;
• reverse engineer, modify, or interfere with Zorren code or infrastructure;
• scrape Zorren;
• abuse APIs, endpoints, capture pages, forms, unsubscribe links, or webhooks;
• flood capture endpoints with fake submissions;
• create fake accounts or contacts using bots or automation;
• upload or transmit malware;
• interfere with email tracking, suppression, bounce, complaint, or unsubscribe systems;
• use Zorren in a way that disrupts, degrades, or harms the service.

15. Identity and sender accuracy

You must be honest about who you are.

You must not use false or misleading:

• business names;
• sender names;
• reply-to addresses;
• postal addresses;
• contact details;
• domains;
• links;
• branding;
• logos;
• subject lines;
• message content;
• claims or offers.

Your account information, sender identity, and postal address must accurately represent your business.

16. Enforcement

Zorren may take action if we believe this policy, the Terms of Service, law, provider rules, recipient trust, or platform reputation may be at risk.

Actions may include:

• warning you;
• asking for evidence of consent, permission, or relationship;
• asking you to clean or remove a list;
• pausing sending;
• throttling sending;
• restricting manual adds or imports;
• disabling broadcasts;
• disabling a hosted capture page;
• disabling snippet access;
• cancelling scheduled broadcasts that have not yet sent;
• suspending your account;
• terminating your account;
• reporting unlawful or abusive activity where appropriate.

Zorren is not required to give prior notice before taking action, especially for serious abuse, security risk, legal risk, provider risk, or platform reputation risk.

If your account is suspended or terminated, any scheduled broadcasts that have not yet been sent will not be delivered.

Zorren may share information about abusive accounts with email infrastructure providers, law enforcement, regulators, or other relevant parties where legally required or reasonably necessary to prevent harm, investigate abuse, protect recipients, protect infrastructure, or comply with applicable law.

17. Abuse reporting

Anyone can report suspected abuse by contacting legal@zorren.app.

Please include enough information for Zorren to review the issue, such as the sender, message, email headers if available, links, screenshots, dates, and why you believe the activity is abusive or unlawful.

Zorren will review abuse reports submitted to legal@zorren.app, but cannot guarantee response times or specific outcomes.

Zorren is not obligated to disclose actions taken in response to an abuse report.

18. Changes to this policy

Zorren may update this Acceptable Use Policy from time to time to protect recipients, customers, infrastructure, email deliverability, service providers, or to comply with law.

If we make material changes, we will take reasonable steps to notify customers, such as by email, dashboard notice, or updating the date at the top of this policy.

Your continued use of Zorren after changes take effect means you accept the updated policy.