Acceptable use policy

Mailbox authorization

• Connect only a Gmail account you own, or one you have clear permission from the owner to use.
• Do not connect a mailbox using credentials that were shared with you for another purpose.
• Do not attempt to access, read, or send from a mailbox connected by another member.

Sending mail

Mail sent through Unified E box comes from a real person’s Gmail account, and the consequences of misuse fall on that account. The following are prohibited:

• Spam, unsolicited bulk mail, and any sending that breaches anti-spam law such as CAN-SPAM, GDPR, or CASL.
• Phishing, fraud, or any attempt to obtain credentials, payment details, or personal data by deception.
• Impersonating another person or organization, or forging headers to disguise the origin of a message.
• Distributing malware, ransomware, or malicious links or attachments.
• Harassment, threats, hate speech, or content that sexualizes minors.
• Any use that would breach Gmail’s own sending policies or Google’s terms.

Platform integrity

• Do not probe, scan, or test the security of the service without our written permission, other than to report a vulnerability responsibly.
• Do not attempt to circumvent authentication, authorization, or rate limits.
• Do not scrape the service, or automate it in ways that place disproportionate load on it or on Google’s APIs.
• Do not reverse engineer the service except to the extent that restriction is unenforceable by law.
• Do not use the service to build a competing product from data obtained through it.

Handling other people’s data

Mail contains personal data about the people you correspond with. Treat it accordingly: do not export, publish, or redistribute someone’s correspondence without a lawful basis, and do not use the service to compile data about people for a purpose they would not expect.

Enforcement

Where we find a breach, our response is proportionate: it may be a warning, suspension of a connected mailbox, suspension of an account, or termination. Serious cases, including illegal activity, may be reported to the relevant authorities. Where a breach involves Gmail, we may also need to act to protect our standing with Google, since a pattern of abuse can affect every member of the platform.

Reporting misuse

Report suspected misuse to security@uniebox.vercel.app. Include enough detail to identify what happened. Security vulnerabilities should go to the same address; see the security page for what to include.