Acceptable use policy

This policy applies to every use of the Elmetry website, console and API: by you, your team members, and anyone you allow to use the service, including your own customers when you build our service into yours. You are responsible for their compliance as if it were your own.

• Spam: sending, or preparing to send, bulk or unsolicited messages to people who have not asked for them.
• Phishing and smishing: messages or landing pages that try to obtain passwords, card details, one-time codes or other information by deception.
• Fraud and scams, including fake delivery, tax, bank, prize, investment or job messages, and any other offence under the Fraud Act 2006 or equivalent law elsewhere.
• Impersonation: using a Sender ID, brand name, domain or number that you are not entitled to use, or that is designed to look like someone else's.
• Unconsented marketing: electronic marketing to individuals without the consent or "soft opt-in" that PECR (regulations 22 and 23) or the destination's law requires, or failing to identify the sender and give a free, simple way to opt out.
• Filter evasion: using checks to test, tune or rotate Sender IDs, URLs or content so that unwanted, deceptive or unlawful messages get past spam filters, or to find out which variants are not yet flagged.
• Malware and harmful links: URLs that lead to malware, unwanted software, credential harvesting or drive-by downloads.
• Grey routes: bypassing networks' termination charges or controls, including SIM boxes and unauthorised interconnects.
• Illegal or harmful content: content that is unlawful, that exploits children, that incites violence or hatred, or that harasses, threatens or defames anyone.
• Any other activity that breaks the law, a regulator's rules or the rules of a network or messaging platform that applies to your traffic.

• Use only Sender IDs and numbers you own or are authorised to use, and register them wherever the destination country or network requires it.
• Hold and be able to show evidence of consent (or another lawful basis) for every recipient.
• Honour opt-outs such as STOP promptly and in every case before sending that person another marketing message, and keep suppression lists up to date.
• Make clear who the message is from, and keep the content and landing page consistent with that sender.
• Respect each destination's quiet hours, content restrictions and registration rules.

• Do not probe, scan or test the security of the service, or load-test it, without our written permission.
• Do not get around rate limits, quotas, billing or access controls, including by spreading traffic across several accounts or keys.
• Do not share logins or API keys outside your organisation, or use another customer's credentials.
• Do not copy, reverse engineer, scrape or resell the service or its results as a data set, except as the Terms of Service allow.
• Do not upload files containing malware, or content designed to disrupt the service.

Submit only Sender IDs, URLs, numbers and content that you have the right to process for this purpose. Do not include special category data (such as health data), criminal offence data or data about children in submissions unless it is strictly necessary and you have a lawful basis for it. Our Data Processing Agreement sets out how we handle personal data in submissions.

• We may review use of the service, including submitted items, when we have reason to suspect a breach of this policy.
• We may refuse a submission, revoke an API key, suspend a team member or the account, or end the agreement, as the Terms of Service allow. Where the risk allows, we will warn you first and give you a chance to explain or fix the problem.
• Checks already carried out are not refunded when an account is suspended or closed for a breach of this policy.
• We may report suspected crime to the police or Action Fraud, and share information with regulators (such as Ofcom and the ICO), networks and messaging platforms where the law allows it, to stop harm to others.

Report suspected misuse to [email protected], with the Sender ID, number or URL involved and when you saw it. In the UK you can also forward a suspicious text message to 7726 free of charge, and report fraud to Action Fraud.

Version

2026-10

Effective date

1 October 2026

We update this policy as laws, network rules and abuse patterns change, and tell account holders of material changes as the Terms of Service describe.

Terms of Service

2026-11

Privacy Notice

2026-11

Data Processing Agreement

2026-11

Sub-processors

2026-10

Complaints Procedure

2026-10

Accessibility Statement

2026-10