Legal
Acceptable Use Policy
Last updated 1 August 2026
MastroSDR is a cold outreach tool. Used well, that means a relevant message to someone with a genuine business reason to hear from you. Used badly, it is spam, and it damages your domain, our platform and the people receiving it. This policy is the line.
MastroSDR is built for sending to US businesses. The GDPR and PECR require consent before a commercial email and this product cannot capture it, so any recipient MastroSDRcan place in the UK or an EU member state is refused at send time. Canada’s CASL also requires consent, but it treats an address a company published on its own website as implied consent, so a Canadian recipient is sent to only when the prospect records that page and is refused otherwise. That check reads a published address or a country domain, so it catches what it can see and nothing more: a recipient it cannot place is still sent to, and the obligation for that person is yours.
You must
- Send only from a mailbox you have connected and signed into.
- Identify yourself and your company honestly in every email.
- Keep a working unsubscribe link in every message. MastroSDR adds one; do not try to defeat it.
- Honour every opt-out immediately and permanently.
- Include a real physical postal address.
- Have a lawful basis for contacting each recipient under the rules that apply to them, including CAN-SPAM and, for anyone the send-time check could not place, CASL, GDPR and PECR.
- Keep your prospect lists sourced legitimately and reasonably current.
You must not
- Send to purchased, scraped or rented lists you cannot account for.
- Use false or misleading sender names, subject lines or reply-to addresses.
- Contact anyone on your do-not-contact list, or try to circumvent it.
- Send to addresses that have hard bounced.
- Send unsolicited email to consumers where the law requires prior consent.
- Send phishing, malware, fraud, adult content, or promotions for illegal products or services.
- Harass, threaten or repeatedly contact someone who has asked you to stop.
- Impersonate another person or business.
- Use the platform to test or launder sending reputation for a third party.
Automation and agents
You may drive MastroSDR with your own software or an autonomous agent through our API. That does not change anything above: you remain responsible for every message an agent sends under your key, exactly as if you had clicked send yourself.
Grant agents the narrowest scope that does the job. If an agent only needs to draft, do not give it messages:send.
Telling people a machine is answering
Where MastroSDR answers a person without you reading it first, it says so. The voice agent opens every call by naming itself. A scheduling reply sent without your approval carries a line saying an AI assistant handled it and that a person will read a reply.
You must not remove or obscure those lines, and you must not tell a recipient a machine is a person. This is our obligation under Article 50 of the EU AI Act and yours under this policy.
How we enforce this
Hard bounces found in your connected mailbox are added to your do-not-contact list automatically and cannot be removed. Sustained abuse of this service may result in your account being suspended.
Reporting abuse
If you received an unwanted email sent through MastroSDR, use its unsubscribe link and, if the sender ignores it, tell us at abuse@mastrosdr.com. Include the full message headers if you can.