Bossreach · Terms of Service · Privacy Policy · Data Processing Addendum · Subprocessors · Acceptable Use Policy

Acceptable Use Policy

Applies to: Bossreach (bossreach.io), Bossreach CMS and every site managed through it. Part of the Bossreach Terms of Service.
Last updated: October 11, 2026

Bossreach sends email and publishes websites on your behalf. Your use affects our sending reputation and every other customer's, so these rules are strict.

1. Email and outreach rules

You must:

1. Follow every law that applies to your messages, including the US CAN-SPAM Act, Canada's CASL, the EU/UK GDPR and ePrivacy/PECR rules, and state laws.
2. Only email people you have a lawful basis to contact. For people in the EU, UK and Canada, that usually means consent or a narrow business-to-business exception: check before you send.
3. Use accurate "From" names, reply-to addresses and subject lines. No deceptive headers or subject lines.
4. Include a working unsubscribe link and your valid physical postal address in every commercial email. Bossreach adds both automatically; do not remove them.
5. Honour opt-outs immediately (Bossreach does this automatically through its suppression list) and never re-add an unsubscribed address.
6. Stop sending if your bounce or complaint rates go above the limits we show in the product (target: bounces under 2%, spam complaints under 0.1%).

You must not:

• buy, rent or use purchased email lists, or harvest addresses with software in a way the law forbids;
• send to role or trap addresses you have no reason to contact, or to anyone who has asked not to be contacted;
• send malware, phishing, or messages that impersonate another person, brand or organisation;
• send messages about illegal products, adult content, gambling, payday loans, crypto or investment schemes, or other categories we list in the product as not allowed;
• use Bossreach to contact children or to target people by sensitive characteristics.

2. Data rules

• Do not upload sensitive data (health, biometric, government IDs, financial account numbers, precise location, children's data) unless we agree in writing.
• Only upload contact data you are allowed to use. If you scrape or buy data, you are responsible for its lawful source.
• Respond to people's privacy requests about data you control. We give you tools to export and delete contacts.

3. Website (CMS) rules

Sites you publish through Bossreach CMS must not host illegal content, infringe intellectual property, make false claims (for example invented reviews or testimonials, fake stock levels or fake certifications), collect payment details or passwords under false pretences, or impersonate anyone. You must have the rights to every image, logo, font and testimonial you publish, and permission from any customer whose logo or quote you show.

4. Platform rules

Do not: probe, scan or test our systems for vulnerabilities without written permission; get around usage limits; share accounts across organisations; resell Bossreach without an agreement; or use Bossreach outputs or data to build a competing product or to train AI models.

5. Enforcement

We may pause sending, unpublish a site, or suspend an account to protect recipients, our sending reputation or the law, with notice where reasonable. Repeated or serious violations lead to termination under the Terms of Service.

Report abuse: privacy@bossreach.io

Changes log

Bossreach is operated by Final Boss Games · [mailing address] · privacy@bossreach.io