In short
- Zero tolerance for spam — permission-based email only.
- You send through your own Gmail, Outlook, Yahoo or SMTP — never shared Devlo servers.
- Every campaign has an unsubscribe link and a one-click unsubscribe header.
- Unsubscribes are permanent and never re-imported.
- Hard bounces stop automatically; sending is paced and capped.
- Abuse leads to warning, pause, suspension or closure.
1. Our position: zero tolerance
Devlo does not allow spam, in any amount, for any reason. Spam means email sent to people who did not ask to receive it — whatever the content, and whether it is one message or a million.
This policy is part of our Terms of Service. It applies to every Devlo account, every team member in it, and everything sent with the app — campaigns, single emails from the inbox, and automated messages.
2. What counts as spam
Spam is not about how many emails you send or what they say — it is about permission. These examples show the difference:
Allowed
- A monthly newsletter to people who signed up on your website.
- A sale announcement to customers who bought from you and did not opt out.
- A webinar invitation to people who registered for your last webinar.
- A reply, quote or invoice to someone who wrote to you.
- A “do you still want our emails?” message to quiet subscribers.
Not allowed
- A list of 10,000 “business owners” bought from a data seller.
- Emails found on websites or LinkedIn and added to a campaign.
- Contacts from a partner or a previous employer’s customer list.
- Re-adding people who unsubscribed because “they are good leads”.
- A cold outreach blast to people who never heard of you.
3. How Devlo sends email
Devlo is software, not a bulk-mail network. Devlo does not sell sending capacity and has no shared pool of servers or IP addresses that customers send through.
- Every campaign is sent through a mailbox or SMTP server the customer connects and owns — for example Gmail or Google Workspace, Outlook or Microsoft 365, Yahoo Mail, Zoho Mail, iCloud Mail, a mailbox on their own domain, or their own account with an email-sending service.
- Each email leaves under the customer’s own address and domain, signed by their own provider. Recipients, mailbox providers and blocklists see exactly who sent it.
- The customer’s provider applies its own sending limits, spam checks and terms on top of this policy — so a spammer cannot hide behind Devlo, and one customer’s mistakes cannot damage another customer’s delivery.
- Devlo’s own mail server sends only account messages such as sign-up confirmations and password resets — never customer campaigns.
4. Permission first
You may only email people who have clearly agreed to hear from you, in a way that meets the law where they live — including UK GDPR and PECR, EU GDPR and ePrivacy rules, CAN-SPAM in the US and CASL in Canada.
- Accepted: people who signed up on your website or in person, customers who bought from you and were told they would get emails (and could opt out), and people who asked to be contacted.
- Recommended: double opt-in — a confirmation email before someone is added.
- Records: keep how and when each contact agreed. We may ask to see it.
- Scope: email people only about what they agreed to. Consent for one business does not carry over to another.
5. Lists you may not use
- bought, rented, shared, traded or “opt-in” lists from third parties;
- addresses scraped or harvested from websites, directories, search engines or social media;
- contacts from a business card scan, event list or partner without clear consent to your emails;
- role addresses that never opted in, such as info@ or sales@ of other companies, where the law requires consent;
- old lists of people you have not emailed for a long time, until they confirm they still want to hear from you;
- lists that include addresses of people who unsubscribed elsewhere.
6. What every email must include
- a sender name and email address that truly identify you or your business;
- a subject line that honestly matches the content — no false “Re:” or “Fwd:”, and no misleading urgency;
- a clear, working unsubscribe link — Devlo adds one to every campaign automatically; you must not remove, hide or break it;
- your postal business address, where the law requires it (for example under CAN-SPAM);
- content the recipient would recognise as coming from the business they signed up with.
7. Content that is never allowed
- phishing, or anything that asks for passwords, card details or other credentials under false pretences;
- malware, or links to malware or to compromised websites;
- deceptive offers, fake invoices, fake prizes, chain letters, pyramid or Ponzi schemes;
- misleading health, financial or “get rich quick” claims;
- illegal goods or services, hate speech, harassment, threats, or content that exploits children;
- content that infringes someone else’s copyright, trademark or privacy;
- tricks to beat spam filters or hide the sender — such as hidden text, link shorteners used to disguise destinations, or spoofed headers.
8. Businesses we do not serve
Because they carry a high risk of unwanted or harmful email, Devlo may not be used to promote:
- affiliate marketing, lead selling or list brokering;
- adult content or escort services;
- unlicensed gambling, betting or lotteries;
- payday loans, debt relief, credit repair or “guaranteed” financing;
- cryptocurrency, forex or investment schemes promising returns;
- prescription drugs, unapproved supplements or weight-loss products;
- weapons, drugs or other regulated products sold without the required licence;
- work-from-home or multi-level marketing schemes.
If you are unsure whether your business fits, ask us at [email protected] before sending.
9. Sending limits and pacing
- Campaigns are sent in paced batches, not all at once, so they look like a person sending — not a blast.
- An hourly cap per sending domain stops a campaign from going faster than your mailbox can safely send.
- Each plan has a daily sending limit for campaigns.
- Your provider’s own limits always apply as well — for example, a personal Gmail account allows far fewer emails per day than an email-sending service.
- You must not try to get round these limits, for example by opening several accounts.
10. Mailbox provider rules
Gmail, Yahoo and Outlook set rules for anyone sending in bulk to their users, and you must follow them. In short:
- authenticate your domain with SPF, DKIM and DMARC — Devlo checks these for you before a campaign starts;
- offer one-click unsubscribe and act on it quickly — Devlo adds the one-click unsubscribe header to every campaign email and removes the contact at once;
- keep spam complaints low — Google asks bulk senders to stay below 0.3% and recommends below 0.1%;
- do not impersonate another sender’s domain.
11. Unsubscribes, bounces and complaints
- Unsubscribes are processed straight away and are permanent: the contact is left out of your sends and is not added back when you import a list again.
- Hard bounces (addresses that do not exist) stop receiving your campaigns automatically; repeated soft bounces do too.
- Complaints: if someone marks your email as spam or asks you to stop in any way, remove them. Do not re-add unsubscribed, bounced or complaining contacts by hand.
12. Healthy sending standards
High bounce or complaint rates are the clearest sign that a list was not collected with permission. Each campaign should stay within these limits:
- spam complaints: below 0.1%;
- hard bounces: below 2%;
- unsubscribes: below 1% as a rule — more suggests people did not expect your email.
Use Re-engagement to find contacts who have stopped opening, ask them once if they still want your emails, and stop emailing those who do not answer.
13. Monitoring and enforcement
We review accounts when we see signs of abuse — such as high bounce or complaint rates, reports from recipients, mailbox providers or blocklists, or content that breaks this policy. Depending on how serious it is, we may:
- Warn you and ask how a list was collected;
- Pause sending until the problem is fixed;
- Remove contacts or content that break this policy;
- Suspend or close the account — without refund for serious or repeated breaches;
- Report illegal activity to the authorities.
We may act without warning when there is immediate harm, such as phishing or malware.
14. Common questions
Is Devlo a bulk email service?
No. Devlo is software for writing, sending and measuring email. It does not provide sending servers or IP addresses: every campaign goes out through a mailbox or SMTP account the customer connects and owns.
Can I import a list I bought, or one I found online?
No. Bought, rented and scraped lists are never allowed, whatever the seller says about “opt-in”. Accounts that use them are paused or closed.
Does Devlo add an unsubscribe link for me?
Yes. Every campaign email gets a visible unsubscribe link and the one-click unsubscribe header. You must not remove or hide them.
What happens when someone unsubscribes?
They are left out of all your campaigns straight away, and a later import will not add them back.
What if many emails bounce or people complain?
Bounced addresses stop receiving campaigns automatically. If bounce or complaint rates are high, we contact you, ask how the list was collected, and may pause sending until it is cleaned.
Can I send cold emails?
Not as campaigns. Devlo campaigns are for people who agreed to hear from you. A personal one-to-one email from your inbox to a business contact must still follow the law where they live.
Who is responsible for the emails I send?
You are — as the sender and the owner of the list and the mailbox. Devlo provides the tool and the safeguards, and acts when this policy is broken.
15. Report abuse
Received an unwanted email sent with Devlo? Forward it to [email protected] with “Abuse” in the subject, including the full message if you can. We look into every report, and you can always use the unsubscribe link in the email to stop getting more from that sender.
16. Changes to this policy
We may update this policy as laws and mailbox provider rules change. The date at the top shows the latest version; account holders are told about important changes by email.