Policies & Rules

Sending limits, refund, abuse & privacy policies

These rules protect your email delivery, your domain and every business on EmailWorld. By using the platform you agree to them. Last updated: September 2026.

Sending limits

  • Free accounts: Receive mail, reply, and write only to people who emailed you first
  • Pro and Business: Up to 300 one-to-one messages per hour per address, once the address has finished warm-up
  • Daily: Active Pro and Business plans have no separate daily cap after warm-up. The hourly limit, warm-up, content checks and our email providers' own safeguards still apply, so sending is paced, not instant
  • Older accounts: Accounts without an active Pro or Business plan keep their original terms, including a 2,000-message daily ceiling on the older compose page and sending API
  • One recipient per message: One recipient per message — no bulk or Bcc sending
  • New address warm-up: New addresses send up to 20 messages a day for their first week, then grow gradually to the full hourly rate by day 30
  • Hourly pause: An address that reaches its hourly cap pauses automatically until the next hour
  • Cold email: Mass unsolicited email is never allowed, regardless of volume

Limits exist to protect everyone's delivery reputation. They are enforced automatically and cannot be raised for any account.

Conversation contacts

  • Contacts are created automatically from genuine messages received by your inboxes. Uploaded, bought, scraped or rented lists are not allowed.
  • A message to selected contacts is delivered privately, one recipient at a time. Recipients never see one another.
  • Every message uses your real mailbox and remains subject to content checks, warm-up and the hourly sending limit.
  • Free accounts may write only to genuine prior inbound senders. Paid accounts remain protected by the same anti-abuse controls.
  • High complaint or bounce rates pause sending automatically, and abuse is handled under the abuse policy below.

Abuse policy — never allowed

  • Spam, mass unsolicited email or purchased lists
  • Phishing, credential theft or fake login pages
  • Fraud, scams or anything that tries to steal money or information
  • Spoofing — impersonating a company, bank, government, brand or person
  • Malware, viruses or malicious downloads
  • Fake business, investment, employment or financial offers
  • Attempts to bypass EmailWorld sending limits or warm-up
  • Threats, harassment, hate or abusive content
  • Pornographic or sexually explicit content
  • Anything that damages EmailWorld's infrastructure or sender reputation

Enforcement & $500 abuse fine

We protect this service at all costs. Depending on severity, accounts that break the rules may be warned, restricted, suspended or permanently closed. Where possible, incoming mail keeps working so you can contact support.

Any customer who engages in abuse (spam, fraud, phishing, spoofing or limit bypass) may be charged a $500 abuse fine to cover the cost of damage to our infrastructure and sender reputation. By purchasing, you agree to this charge if you misuse the service.

Refund policy

Domain registration and completed hosting setup may be non-refundable where the law permits. When we register a domain we buy it for you from the registrar straight away, and the registrar usually cannot reverse it. The domain stays registered for its full registration period, as described under "Domain ownership" below. Nothing in this policy takes away any refund or cancellation rights you have under the consumer law where you live.

Abuse can suspend service. If an account is used for spam, scams or phishing, we may suspend or end the service. We tell you why, and you can appeal from your Settings page.

Pro and Business plans have no per-mailbox fees, so there is no separate mailbox refund. Monthly plan charges are handled under the rules above and your local consumer rights.

Older mailbox subscriptions: customers who bought individual mailboxes before plans existed keep their original terms — a $2 mailbox refund within 7 days of purchase for accounts in good standing (no spam or abuse, no high bounce rate or restriction, and no attempts to bypass sending limits or warm-up).

Domain ownership, renewal & lapsed accounts

Domains are held in EmailWorld's registrar account. Because your domain is paid for through a monthly subscription (or included in your plan), the domain is registered and managed inside EmailWorld's own registrar account, not a personal one. While your subscription is active you have full use of the domain — your mailboxes, DNS and website records all work as normal.

If you stop renewing, the domain stays with EmailWorld. When a subscription lapses and is not renewed, the domain does not transfer to you. It remains registered under EmailWorld for the rest of its paid registration period, and EmailWorld may keep, re-sell or release it after that.

Renewal grace period: when a renewal payment fails, your account enters a grace period and you are asked to renew. Incoming mail keeps working during grace where possible so you don't lose messages while you renew.

Lapsed account retention: accounts that remain unpaid for 30 days past their grace period are closed. All mailboxes, messages and conversation contacts on the account are permanently deleted and cannot be recovered. Renew before the 30 days run out to keep everything.

Privacy policy

What we collect: your name, email address, billing details (processed by our payment provider — we never see full card numbers), your business identity, and the messages and addresses you store in your mailbox so we can deliver your email.

How we use it: to provide your email service, process payments, register your domain, verify your identity, prevent abuse, and improve deliverability. We never sell your data and never read your mail for advertising.

Sharing: only with the partners required to run the service — our domain registrar, mail server infrastructure and payment provider — and only what each needs.

Retention & your rights: we keep account data while your account is active. You may request a copy or deletion of your personal data at any time by contacting support; we will honor it except where we must keep records for fraud prevention or legal reasons.

Security: we use encryption in transit and at rest, hashed API keys and strict access controls. No system is perfect, but protecting your data is a core part of protecting this service.

Questions about any policy? Contact support. Also see our Acceptable Use Policy.