Acceptable Use Policy

Oakstack runs shared infrastructure: every customer's email and texts go out through the same providers, and every customer's jobs and webhooks run on the same servers. This policy keeps that infrastructure trustworthy for everyone. It is part of our Terms of Service. If you aren't sure whether something is allowed, ask us at support@oakstack.dev before you do it.

Email

Oakstack email is for messages people expect to receive from you.

• Only email people who have a relationship with you and gave you their address: they signed up for your app, bought something, asked to be contacted, or are on your team.
• Never send to purchased, rented, borrowed, scraped, or harvested lists, or to addresses generated or guessed.
• Transactional email (receipts, invoices, account notices, password resets, alerts the recipient set up) is the main use. Marketing email is allowed only to people who opted in, and it must include a working one-click unsubscribe (honored right away) and your physical postal address, as laws like CAN-SPAM, CASL, and GDPR require.
• Send only from domains you own and have verified with us. Don't impersonate another person, brand, or organization, and don't use misleading From names, subject lines, or headers.
• No phishing, malware or links to it, deceptive offers, illegal content, or content that harasses or threatens anyone.
• Keep your lists clean. Addresses that hard-bounce or mark your email as spam are added to your suppression list automatically, and you must not try to get around it (for example by changing the address format or sending from another workspace).

Automatic limits. New senders have daily limits that rise over their first month. If more than 5% of your recipients bounce, or more than 0.1% mark your email as spam, live sending is paused automatically until a person at Oakstack has reviewed it with you. Free accounts can only email members of their own workspace.

Text messages (SMS)

Text messages are held to stricter rules than email, by law and by the carriers.

• Only text people who agreed to get texts from you, and only about what they agreed to. Keep a record of when and how each person agreed. Laws like the TCPA (US) and CASL (Canada) apply to every text you send through Oakstack.
• The business details you give for your number's carrier review must be true and must be yours. Don't send texts unrelated to the use you described.
• Honor opt-outs. Replies like STOP are handled automatically; don't try to get around them, and include opt-out wording (“Reply STOP to opt out.”) in the first text you send anyone.
• No texts about cannabis, firearms, gambling, payday or high-risk loans, debt collection, or third-party lead generation, and no content that is sexual, hateful, deceptive, or illegal. Carriers block these categories.
• Don't text outside 8am to 9pm in the recipient's time zone unless they asked.

Automatic limits. If more than 5% of the people you text reply STOP, or carriers filter more than 5% of your texts as spam, live texting is paused automatically until a person at Oakstack has reviewed it with you. Free accounts can't send live texts.

Scheduled jobs, webhooks, and PDFs

• Only point scheduled jobs and webhook forwarding at servers you own or are authorized to use. Don't use Oakstack to load-test, scan, probe, or attack any system.
• Don't use inbound webhook URLs or inbound email addresses to collect data you aren't allowed to collect.
• Don't render PDFs of content that is illegal, infringes someone's rights, or is meant to deceive (for example fake invoices or forged documents).

Everything

• Don't try to get around plan limits, rate limits, or security controls.
• Don't access other customers' data, test our security without written permission, or interfere with the service.
• Don't resell Oakstack as your own service without our written agreement.
• Follow the laws that apply to you and your recipients.

What happens if this policy is broken

Depending on how serious it is, we may warn you, pause the affected feature (for example email sending), suspend your workspace, or close your account. For abuse that harms others or our sending reputation, we may act first and talk afterwards. Report abuse you see coming from Oakstack to support@oakstack.dev.