Acceptable Use Policy

Effective: 7 September 2026 · Part of the Lath Terms of Service · Contact: abuse@trylath.com

Lath sends messages and signs people in on your behalf. Carriers, mailbox providers and identity providers hold us responsible for what you send. So these rules are not aspirations; they are enforced automatically where we can, and by suspension where we cannot.

1. You may only message people who agreed to hear from you

• Transactional messages (sign-in codes, receipts, security alerts, order updates) may go to anyone who has an account with you or has taken the action the message describes.
• Marketing or promotional messages may go only to people who gave you documented opt-in consent for that channel and that kind of content. Documented means you can show what they were told, when, and where. Lath records this for you when consent is collected through our forms or API, and our platform refuses a marketing send to any contact without a consent record.
• Purchased, rented, scraped, or shared lists are prohibited, on any channel, without exception.
• Consent for email is not consent for SMS. Consent for one product or sender is not consent for another.

2. You must honour opt-outs immediately

• Every marketing email must carry a working unsubscribe link. Lath adds one, and a List-Unsubscribe header, to every broadcast.
• Every SMS sender must honour STOP, STOPALL, UNSUBSCRIBE, CANCEL, END and QUIT, and respond to HELP. Lath handles these keywords automatically on every number we provide, and a STOP suppresses that number for that sender until the person opts back in.
• You may not send to a suppressed address or number, and you may not remove a suppression except when the person themselves opts back in.

3. Content you may not send

On any channel: anything unlawful; phishing, malware, or attempts to obtain credentials or payment details by deception; impersonation of another person, brand or authority; harassment or threats; content that infringes someone else's rights; deceptive subject lines or sender names.

On SMS in particular, US carriers prohibit, and Lath will suspend sending for:

• Sex: sexually explicit content, adult services.
• Hate: content that promotes hatred or discrimination against protected groups.
• Alcohol, Firearms, Tobacco (including vaping and cannabis): promotion or sale without age-gating and carrier-approved registration, which Lath does not offer at launch.
• Illegal drugs, gambling where not licensed, high-risk financial offers (payday loans, debt relief, cryptocurrency "opportunities"), get-rich-quick or work-from-home schemes, third-party lead generation or affiliate marketing, and any message sent on behalf of someone other than the registered brand.
• Public URL shorteners (bit.ly and similar) in SMS; use your own domain.

4. Sending identity

• You may send email only from domains you have verified with us, or from the default sender Lath provides. The default sender may not be used for marketing.
• You may send SMS only from numbers assigned to your account, registered under your business identity. Registration details you give us must be true and current.
• You may not spoof, rotate identities to evade filtering, or send from a number or domain registered for a different use case than the content you are sending.

5. Sign-in

• You may not use Lath's sign-in to collect credentials for a service you do not operate, to harvest identity-provider data beyond what is needed to sign the person in, or to sign in users under 13 (or under 16 where local law requires) without the consent the law requires.
• You must keep your API keys secret and rotate them if exposed. Actions taken with your key are yours.

6. Platform integrity

You may not probe, overload, or interfere with Lath; bypass rate limits or spending caps; use Lath to send security scans or bulk probes; resell Lath without our written agreement; or use Lath in violation of export laws or sanctions.

7. How we enforce

• Automatic refusals. A send that violates a rule we can check in code, such as a marketing message without consent, a suppressed recipient, or an unverified domain, is refused with the reason and the fix. Nothing is silently dropped.
• Automatic pauses. If a domain's bounce rate exceeds 2% or its complaint rate exceeds 0.1%, or a number's carrier error rate spikes, sending on that identity pauses and you are notified with the numbers.
• Suspension. For content violations, list violations, or repeated pauses, we may suspend sending or the account. We will tell you what we found and how to appeal, unless doing so would help an ongoing abuse.
• Reports. Anyone can report abuse to abuse@trylath.com. We investigate every report.

8. Changes

We update this policy as carrier and mailbox-provider rules change. Material changes are emailed to account holders 14 days before they take effect.