CopyLoop Acceptable Use Policy

Last Updated: March 28, 2026

This Acceptable Use Policy (the “Policy”) describes the rules and restrictions that apply to your use of the products, services, and websites (collectively, the “Services”) provided by Member Loop, LLC d/b/a CopyLoop (“CopyLoop,” “we,” “us,” or “our”). By using the Services, you (“Customer,” “you,” or “your”) agree to comply with this Policy. This Policy is incorporated into and forms part of the CopyLoop Terms of Service. Capitalized terms not defined herein have the meanings given to them in the Terms of Service.

You are responsible for ensuring that all users within your workspace, including any team members, contractors, or agents acting on your behalf (“Authorized Users”), comply with this Policy. Violations of this Policy may result in suspension, limitation, or termination of your access to the Services, at our sole discretion, without liability to you.

1. Spam Policy

You may not use our Services to send unsolicited messages or spam, whether in bulk or individually.

• “Unsolicited” means that the recipient has not provided consent to receive messages from you.
• “Bulk” means that a message is sent as part of a larger collection of messages, all having materially similar content.
• “Spam” is any unsolicited message sent via email or any other channel supported by the Services.

You may not use the Services to send:

• (a) spam messages in violation of any applicable laws, including but not limited to the CAN-SPAM Act (United States), CASL (Canada), the Privacy and Electronic Communications Regulations (United Kingdom), the ePrivacy Directive and GDPR (European Union), or any other applicable anti-spam legislation;
• (b) spam messages to addresses obtained through internet-based harvesting, scraping, or automated collection methods; or
• (c) spam messages to addresses that are incomplete, inaccurate, or fabricated.

2. Consent and List-Gathering

2.1 Prohibited List Sources

You are prohibited from sending messages through the Services to:

• Email addresses or other contacts that are purchased, rented, borrowed, scraped, appended, or obtained from any third-party source where the contacts have not provided direct consent to receive communications from your business;
• Voter registration lists, survey or event registration lists, or any other publicly available data sets repurposed for marketing communications;
• Distribution lists, role-based addresses (e.g., info@, sales@), publicly available contacts, or media email addresses;
• Individuals who have previously unsubscribed from or opted out of your messaging program(s).

2.2 Consent Requirements

• You must obtain affirmative opt-in consent from each recipient before sending marketing or promotional communications through the Services.
• You must maintain records of consent sufficient to demonstrate compliance with applicable laws upon request by CopyLoop.
• Where applicable law requires enhanced consent (e.g., double opt-in, express written consent), you must comply with such requirements.

2.3 Collection Practices

You may not use the Services to harvest or otherwise collect information about individuals without their knowledge and consent.

3. Sender Identification and Integrity

Prohibited activity includes, but is not limited to:

• Snowshoeing: Evading, or attempting to evade, spam filtering and detection mechanisms, including the practice of distributing messages across multiple domains, IP addresses, or brands to dilute reputation metrics or evade filters.
• Waterfalling: List cleaning across multiple email service providers with the intention of purging bounces, complaints, and unengaged recipients before sending through CopyLoop.
• Misrepresentation: Misrepresenting your sender information, identity, or organizational affiliation in message headers, “From” fields, or reply-to addresses.
• Obfuscating Unsubscribe: Preventing, hiding, or obfuscating unsubscribe or opt-out functionality, or failing to honor unsubscribe requests within the timeframes required by applicable law.
• Deceptive Subject Lines: Using false, misleading, or deceptive subject lines designed to mislead recipients about the content or purpose of a message.

4. Email Sending Thresholds and Deliverability

CopyLoop sends email on your behalf through shared sending infrastructure (Amazon Web Services Simple Email Service). Maintaining the reputation and deliverability of this shared infrastructure is essential for all customers. Accordingly:

4.1 Performance Thresholds

You must maintain the following metrics for your email sending activity:

• Bounce Rate: Your hard bounce rate must remain below 2% of total messages sent. A hard bounce indicates an invalid, closed, or non-existent email address.
• Complaint Rate: Your spam complaint rate must remain below 0.1% of total messages sent. A complaint is recorded when a recipient marks your message as spam or junk.
• Unsubscribe Rate Monitoring: While not a strict threshold, persistently elevated unsubscribe rates may indicate list quality issues and will be reviewed.

4.2 Enforcement

If your sending activity exceeds these thresholds, CopyLoop may, at its sole discretion:

• Notify you and provide a remediation period to correct the issue;
• Temporarily suspend or throttle your email sending capabilities;
• Require you to implement list hygiene measures, such as re-confirmation campaigns, before resuming sending;
• Permanently suspend your email sending capabilities if violations are repeated or severe.

4.3 List Hygiene

You are responsible for maintaining clean and current email lists. This includes:

• Promptly removing hard bounces and invalid addresses from your contact lists;
• Honoring all unsubscribe requests within the timeframes required by applicable law (and in no event later than 10 business days);
• Regularly reviewing and removing unengaged contacts;
• Not re-adding contacts who have previously been suppressed due to bounces, complaints, or unsubscribe requests.

5. Email Authentication Requirements

Before sending email through the Services, you must properly configure and maintain the following email authentication records for each sending domain:

• SPF (Sender Policy Framework): A valid SPF record authorizing CopyLoop’s sending infrastructure to send email on behalf of your domain.
• DKIM (DomainKeys Identified Mail): DKIM signing must be enabled and properly configured using the DNS records provided by CopyLoop.
• DMARC (Domain-based Message Authentication, Reporting, and Conformance): A DMARC policy must be published for each sending domain. CopyLoop recommends a policy of p=quarantine or p=reject but at minimum requires a published DMARC record (p=none with reporting enabled).

CopyLoop may restrict or suspend email sending for domains that do not meet these authentication requirements or whose authentication records become invalid.

6. Domain Warmup and New Account Sending

6.1 Warmup Requirements

New sending domains and accounts must follow a graduated warmup schedule to establish a positive sender reputation. CopyLoop may:

• Impose daily or hourly sending limits on new accounts or newly verified sending domains;
• Automatically throttle sending volume for accounts that have not completed the warmup process;
• Require that new accounts demonstrate acceptable bounce and complaint rates at lower volumes before increasing sending limits.

6.2 Sending Limits

CopyLoop reserves the right to set and adjust sending limits for any account at any time based on account age, sending reputation, historical performance, or other factors relevant to maintaining infrastructure health. You agree not to circumvent, bypass, or attempt to evade any sending limits imposed by CopyLoop.

7. AI Features Usage

CopyLoop provides AI-powered content generation features, including brand voice content generation, email copy generation, and content optimization powered by third-party AI models. The following rules apply to your use of these features:

7.1 Customer Responsibility for AI Outputs

• You are solely responsible for reviewing, editing, and approving all AI-generated content before publishing, sending, or otherwise distributing it.
• AI-generated content is provided as a starting point and suggestion. CopyLoop does not guarantee the accuracy, completeness, legality, or appropriateness of any AI-generated output.
• You must ensure that all AI-generated content complies with applicable laws, regulations, and industry standards before use.

7.2 Prohibited Uses of AI Features

You may not use the AI content generation features to:

• Generate content that is intentionally deceptive, misleading, or designed to impersonate another person, brand, or entity without authorization;
• Generate content that constitutes or facilitates phishing, social engineering, fraud, or any other illegal activity;
• Generate content that promotes hate speech, violence, discrimination, or harassment;
• Generate content that is obscene, sexually explicit, or depicts the exploitation or abuse of minors;
• Generate content intended to manipulate public opinion through disinformation or synthetic media;
• Attempt to extract, reverse-engineer, or circumvent the safety measures or content policies of the underlying AI models;
• Generate content that infringes upon the intellectual property rights of third parties.

7.3 Brand Voice and Document Training

When you upload documents or provide content to train your brand voice model, you represent and warrant that you have all necessary rights, licenses, and permissions to use such content for that purpose. CopyLoop is not responsible for verifying the ownership or licensing status of content you provide for brand voice training.

8. Prohibited Content

You may not use the Services to create, store, transmit, distribute, or facilitate:

• Hate or Discrimination: Content that encourages, promotes, or facilitates hate, violence, or discrimination against individuals or groups based on race, ethnicity, national origin, religion, gender, gender identity, sexual orientation, disability, age, or any other protected characteristic.
• Illegal Activities: Content that encourages, promotes, or facilitates any unlawful activity, including but not limited to activities that violate local, state, national, or international laws (e.g., fraud, identity theft, trafficking in controlled or illegal substances, child exploitation, or money laundering).
• Deception, Phishing, and Harm: Content that impersonates another person or entity, misrepresents your affiliation, or employs deceptive practices such as spoofing, phishing, or misleading header information. Content that is materially false, inaccurate, or misleading in a way that could cause harm, damage, or confusion, including the distribution of malware, viruses, or other harmful code.
• Obscene or Offensive Material: Content that is obscene, sexually explicit, pornographic, or otherwise inappropriate.
• Fraudulent Content: Content intended to deceive recipients, including fake offers, counterfeit goods, pyramid schemes, or scam-related materials.
• Content Targeting Children: Content designed to interact with, market to, or collect information from children under the age of 13 (or under 16 in the European Economic Area or United Kingdom).

9. Restricted Products and Services

You may not use the Services to offer, promote, or market products or services related to:

• Illegal or restricted activities, such as escort services, mail-order brides, spouse-finding services, and similar offerings;
• Multi-level marketing (MLM), network marketing, or referral marketing recruitment schemes, including home party recruitment;
• Get-rich-quick, work-from-home, and make-money-online schemes;
• Sale or purchase of social media engagement (followers, likes, views, etc.);
• High-risk financial services, including but not limited to debt relief, credit repair (including collection and forgiveness), payday loans, short-term high-interest loans, and third-party lending arrangements;
• Cryptocurrencies, initial coin offerings (ICOs), decentralized finance (DeFi) products, non-fungible tokens (NFTs), and related crypto services, products, or information;
• Data brokers, list brokers, list rental services, or the sale or transfer of lists of email addresses, phone numbers, or other personal data;
• Lead generation services, including any business that involves sharing, selling, or monetizing consumer data or opt-in information;
• Affiliate marketing as the primary purpose of communications, including messages where you have no direct relationship to the promoted product or service other than through affiliate commissions or links;
• Gambling services or products, including but not limited to online poker, casino games, lotteries, sports betting, daily fantasy sports, and betting tips services;
• Prescription medications, pharmaceutical products or services, medical therapies, telehealth services, and related technologies, products, or services;
• Weapons, ammunition, explosives, or content promoting the manufacture or sale thereof.

CopyLoop reserves the right to evaluate and restrict additional use cases at any time, including in accordance with the policies and compliance standards of our infrastructure providers.

10. Data Restrictions

10.1 Prohibited Data Types

You may not solicit, store, process, send, or transmit any of the following types of data or information through the CopyLoop platform:

• (a) Any information defined under Regulation (EU) 2016/679 (EU GDPR) or the United Kingdom General Data Protection Regulation as a “special category of personal data,” including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a person’s sex life or sexual orientation;
• (b) Medical records or health information, including Protected Health Information (“PHI”) as defined in the Health Insurance Portability and Accountability Act (“HIPAA”);
• (c) Non-public government identification numbers or financial account information, including: (i) Social Security numbers (or local equivalents), passport numbers, driver’s license numbers, or similar government-issued identifiers; or (ii) financial account numbers, including credit card numbers, debit card numbers, bank account numbers, or security codes;
• (d) Information relating to children under the age of 13 (or under 16 in the European Economic Area or United Kingdom);
• (e) Authentication credentials, passwords, or security tokens belonging to third parties.

10.2 Data Security

You are responsible for implementing appropriate measures to protect any data you process through the Services, including encryption of data in transit and compliance with applicable data protection laws and regulations.

11. CRM Data and Third-Party Integrations

11.1 Customer Responsibility

When you connect third-party CRM systems (such as Salesforce or HubSpot) to CopyLoop or otherwise sync contact data into the platform, you represent and warrant that:

• You have all necessary rights, consents, and legal bases to transfer and process such data through the Services;
• All synced contacts have provided appropriate consent to receive communications from you, as required by applicable law;
• You will not sync or import contacts who have opted out of, unsubscribed from, or otherwise withdrawn consent for your communications;
• You comply with all terms of service and acceptable use policies of the third-party CRM provider from which data is synced.

11.2 Data Accuracy

You are responsible for ensuring the accuracy and currency of all contact data synced into CopyLoop. CopyLoop is not responsible for verifying the accuracy, consent status, or compliance of data imported from third-party systems.

11.3 Suppression and Compliance

CopyLoop maintains suppression lists for bounced, unsubscribed, and complained-about addresses. You may not re-import or otherwise circumvent suppression of contacts that have been suppressed within the CopyLoop platform.

12. Document Upload and Brand Voice Training

12.1 Permitted Use

CopyLoop allows you to upload documents (including PDFs, DOCX files, and other supported formats) for the purpose of training your brand voice model and providing context for AI-generated content.

12.2 Prohibited Uploads

You may not upload to the CopyLoop platform:

• Content that you do not own or for which you do not have the necessary rights, licenses, or permissions to use;
• Content that infringes upon the intellectual property rights of any third party, including copyrighted material used without authorization;
• Content that contains malware, viruses, or other harmful code;
• Content that is illegal, obscene, defamatory, or otherwise violates this Policy;
• Content containing the types of sensitive or prohibited data described in Section 10 of this Policy.

12.3 Responsibility

You are solely responsible for all content you upload to the platform. CopyLoop does not review uploaded content for legal compliance or intellectual property clearance and assumes no liability for your uploaded materials.

13. Use of CopyLoop Platform

13.1 General Restrictions

• You may not use the Services in a manner designed to avoid or circumvent fees, billing, or other charges that CopyLoop would otherwise be entitled to collect.
• You may not infringe on the intellectual property rights of others, including through the unauthorized use or sharing of copyrighted content or trademarks via the Services.
• You may not interfere with, disrupt, or attempt to gain unauthorized access to the Services, other customers’ accounts or data, or any systems or networks connected to the Services.
• You may not reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code or underlying algorithms of the Services.
• You may not use automated means (bots, scripts, crawlers) to access or interact with the Services except through APIs expressly provided by CopyLoop for that purpose and in compliance with any applicable rate limits and documentation.

13.2 Account Security

You are responsible for maintaining the security of your account credentials and for all activity that occurs under your account. You must promptly notify CopyLoop of any unauthorized access to or use of your account.

14. Consequences of Violations

14.1 Monitoring

We have the right, but not the obligation, to monitor or investigate your use of the Services at any time for compliance with this Policy, our Terms of Service, or any other agreement between you and CopyLoop governing your use of the Services.

14.2 Enforcement Actions

In accordance with our Terms of Service, CopyLoop shall be entitled, without liability to you, to take any of the following actions at any time in the event that CopyLoop determines, in its sole discretion, that you have violated any part of this Policy, whether within or outside of your use of the Services, or that you have authorized or assisted others in doing so:

• Issue a warning and require corrective action within a specified timeframe;
• Temporarily suspend or throttle specific features of your account, including email sending capabilities;
• Immediately suspend your entire account;
• Permanently terminate your account and access to the Services;
• Remove or disable access to any content that violates this Policy.

14.3 Reporting

We reserve the right to report any illegal activities to the relevant law enforcement authorities, regulatory bodies, or other appropriate parties, and to cooperate fully with any resulting investigations. We may also share information with third parties as necessary to investigate or prevent violations of this Policy.

14.4 No Waiver

Our failure to enforce any provision of this Policy at any time does not waive our right to enforce that or any other provision in the future.

15. Compliance with Laws

You are responsible for complying with all applicable laws and regulations in connection with your use of the Services, including but not limited to:

• The CAN-SPAM Act (United States);
• The Telephone Consumer Protection Act (TCPA) (United States);
• Canada’s Anti-Spam Legislation (CASL);
• The General Data Protection Regulation (GDPR) (European Union);
• The United Kingdom General Data Protection Regulation (UK GDPR);
• The Privacy and Electronic Communications Regulations (PECR) (United Kingdom);
• The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA);
• Any other applicable data protection, privacy, electronic communications, or consumer protection laws in any jurisdiction where your recipients are located.

16. Changes to This Policy

We may update this Policy from time to time by posting an updated version at https://copyloop.com/legal/acceptable-use. Any such updates will be effective upon posting. When we update this Policy, the “Last Updated” date above will be revised to reflect the date of the most recent version. Your continued use of the Services after any modification constitutes your acceptance of the modified Policy. We encourage you to review this Policy regularly.

17. Contact Information

If you have questions about this Policy or wish to report a violation, please contact us:

• Abuse Reports: abuse@copyloop.com
• General Legal Inquiries: legal@copyloop.com
• Website: https://copyloop.com/legal/acceptable-use

Member Loop, LLC d/b/a CopyLoop

This Acceptable Use Policy is effective as of the “Last Updated” date set forth above.