Anti-spam Policy

The company SOOMA.COM – WEB SERVICES, LDA. has a zero-tolerance policy on the sending of unsolicited communications from its infrastructure. Non-compliance may result in immediate suspension of the account and in the civil and criminal liability of the user.

1. Anti-Spam Commitment

Sooma operates email infrastructure for tens of thousands of mailboxes in Portugal. The reputation of this infrastructure is an asset shared by all clients: a single abusive user can harm deliverability for everyone.

That is why fighting spam is at once a legal, technical and contractual commitment.

This policy applies to all Sooma services: mailboxes, aliases, forwarding, SMTP sending and Registered Email.

2. Definition of Spam

Spam means any unsolicited electronic communication, including:

• Emails sent without the recipient's prior consent for direct marketing purposes, outside the applicable legal exceptions (Article 22 of Decree-Law No. 7/2004, as currently in force)
• Communications sent after a removal request (opt-out)
• Communications with a false, forged or misleading sender identity (spoofing)
• Communications with misleading subject lines
• Communications without sender identification or without a working removal mechanism
• Automated collection of addresses (harvesting) and purchased or rented lists
• Bulk sending from individual mailboxes intended for normal use

3. Prohibited Use

It is expressly prohibited to use Sooma's infrastructure for:

• Sending spam, as defined above
• Phishing, distribution of malware or any fraudulent activity
• Forging headers, identities or third-party domains
• Sending content that is illegal under Portuguese and European law
• Circumventing technical sending limits or anti-abuse mechanisms

3.1. Sending limit

Each account is subject to a limit of 2,000 messages per day. This limit is intended to protect the reputation of the infrastructure and to contain the impact of compromised accounts. Higher needs, associated with legitimate high-volume use, must be submitted to Sooma in advance, and Sooma may propose a suitable solution, namely the DUO platform, designed for sending at scale.

4. Technical Measures

Sooma applies, by default and to all accounts:

• Sender authentication with SPF, DKIM and DMARC
• Anti-spam and anti-malware filtering of incoming and outgoing mail
• Monitoring of sending patterns and of IP and domain reputation
• Technical sending limits to prevent abuse of compromised accounts
• Authorised and blocked sender lists managed by administrators

5. Reporting Abuse

Anyone can report spam or abuse originating from Sooma's infrastructure to: abuse@sooma.com

Reports are reviewed as a priority. Whenever possible, include the original message with full headers.

6. Consequences of Non-Compliance

Depending on the severity, Sooma reserves the right to:

1. Notify the client and require immediate correction
2. Technically limit the account's sending capacity
3. Suspend the account or the domain, with immediate effect, in serious or repeated cases
4. Terminate the contract for breach, under Clause 12 of the Terms and Conditions, with no right to a refund of periods already invoiced. The 60-day commercial guarantee cannot be invoked by a Client whose account is suspended or terminated for breach of this policy, without prejudice to the mandatory rights of consumers
5. Report to the competent authorities when the conduct constitutes an offence

Suspension for breach of this policy does not give rise to any right to compensation.

7. Legal Framework

This policy falls within the framework of, among others:

• Regulation (EU) 2016/679 (GDPR)
• Decree-Law No. 7/2004 of 7 January (electronic commerce), in particular Article 22, which makes advertising communications by email subject to the recipient's prior consent, and the regime of the national opt-out list maintained by the Directorate-General for Consumers (Direção-Geral do Consumidor) (Decree-Law No. 62/2009)
• Law No. 41/2004 of 18 August (privacy in electronic communications), regarding the security of processing and the protection of traffic data
• The network and service security and integrity obligations applicable to Sooma, including the regime resulting from Directive (EU) 2022/2555 (NIS2) and its national transposition

8. Related Documents

This policy forms part of Sooma's Terms and Conditions of Use, in particular Clauses 9 (sending limits and abusive use), 11 (late payment) and 12 (duration, termination by notice and termination for cause), and is to be read together with the Privacy Policy.

8.1. Contacts

Abuse reports: abuse@sooma.com
Customer support: support@sooma.com
General contact: hello@sooma.com
Phone: 210 205 164