This Policy governs use of Swarmhit’s SaaS platform, APIs, infrastructure, Connected Accounts, data features, white-label functionality, and related Services. It forms part of the Terms of Service.
1. Purpose
Swarmhit is designed for responsible business outreach and related workflows. Customers must use the Services in a manner that respects recipients, Connected Accounts, third-party platforms, and applicable law.
2. Legal compliance
Customer is responsible for identifying and complying with laws and rules applicable to its recipients, content, industry, and location, including privacy, direct marketing, anti-spam, consumer protection, telecommunications, employment, sanctions, and platform requirements.
Depending on the circumstances, relevant rules may include GDPR and ePrivacy requirements, the United States CAN-SPAM Act, Canada’s Anti-Spam Legislation, United States state privacy laws, and comparable local laws.
Access to a professional profile or business email does not by itself establish consent or another lawful basis for outreach.
3. Required outreach practices
Customer must:
- use accurate sender and organization information;
- avoid false, deceptive, or misleading identities, claims, subject lines, and content;
- send only communications that Customer reasonably believes are lawful and relevant to the recipient;
- provide notices and identification required by law;
- include a clear and functional opt-out or objection method where required;
- honor opt-outs, objections, platform blocks, and suppression requests promptly;
- maintain suppression records and avoid re-contacting recipients in violation of their request;
- use reasonable volumes, frequency, targeting, and timing;
- keep evidence of consent or another lawful basis where required;
- monitor campaigns, replies, complaints, and downstream users for abuse.
4. Prohibited messaging and content
Customer must not use the Services to send, facilitate, promote, or support:
- unlawful spam or indiscriminate bulk messaging;
- phishing, credential theft, malware, ransomware, or malicious code;
- fraud, scams, pyramid schemes, impersonation, or deceptive practices;
- threats, harassment, bullying, stalking, exploitation, or incitement of violence;
- illegal goods or services;
- content that unlawfully discriminates based on protected characteristics;
- content that violates intellectual property, confidentiality, privacy, publicity, or other third-party rights;
- sexual exploitation, abuse material, or content involving minors;
- evasion of sanctions, export controls, identity checks, or legal restrictions;
- any activity likely to cause material harm to recipients, Connected Accounts, platforms, or Swarmhit.
5. Data sourcing and targeting
Customer must not upload or use data obtained unlawfully or in breach of enforceable confidentiality or access restrictions.
Purchased, scraped, enriched, licensed, or publicly available data may be used only where Customer has assessed the source, rights, notice obligations, accuracy, and lawful basis for the intended use.
Customer must not use sensitive personal data, inferred vulnerabilities, or protected characteristics for exploitative, discriminatory, or unlawful targeting.
6. Platform and account integrity
Customer must not:
- connect an account without the account holder’s authorization;
- misrepresent account ownership or identity;
- share, transfer, rent, or resell Connected Accounts except through a Swarmhit feature or plan that expressly permits it;
- bypass throttling, rate limits, safety controls, account limits, technical restrictions, or verification measures;
- use bots, scripts, or tools outside supported functionality to interfere with the Services;
- create excessive Accounts or use multiple Accounts to evade enforcement;
- probe, scan, or test Swarmhit systems without written authorization;
- use the Services in a way that degrades reliability for others.
7. APIs, infrastructure, and downstream users
Infrastructure, API, embedded, white-label, and reseller Customers must maintain an abuse-prevention program appropriate to their use. At minimum, they must:
- bind downstream users to enforceable terms consistent with this Policy;
- provide accurate privacy and sender disclosures;
- implement access controls and protect credentials;
- monitor complaints, sending patterns, and unusual activity;
- suspend or restrict abusive users promptly;
- cooperate with Swarmhit investigations;
- preserve relevant records when reasonably required for security or legal purposes.
Customer is responsible for violations by its applications, agents, clients, and downstream users.
8. Safeguards and limits
Swarmhit may apply limits based on plan, Connected Account history, risk signals, technical conditions, platform behavior, or recipient complaints. Customer must not treat a configured maximum as a guarantee that the activity is lawful or safe for a particular account.
Swarmhit may reduce volume, delay actions, require verification, disable a feature, or suspend access to protect recipients, platforms, Connected Accounts, or the Services.
9. Investigations and enforcement
Swarmhit may investigate suspected violations and request information reasonably necessary to assess compliance. Failure to cooperate may result in restriction or suspension.
Depending on severity and history, Swarmhit may warn Customer, limit campaigns, block content, disable integrations, suspend Connected Accounts, suspend or terminate the Account, preserve relevant evidence, or report activity to a platform or authority where legally required or necessary to prevent harm.
Serious violations may result in immediate termination without refund, subject to mandatory law.
10. Reporting abuse
To report suspected spam, abuse, unlawful content, or misuse of Swarmhit, email contact@swarmhit.com and include available sender, message, date, profile, and campaign information. Do not send passwords or unnecessary sensitive data.
11. Changes to this Policy
Swarmhit may update this Policy to reflect changes in law, platform rules, risk, or Services. The current version will show its last-updated date.