GalSol Anti-Spam Policy

1 Scope

This policy applies to every GalSol feature that sends email on your behalf through your connected Google account — the Mail Tool, the Combined Tool (certificate delivery), and GS Forms confirmation notifications. It does not apply to collaboration or Event Planner invite emails, which are 1:1 functional notifications triggered directly by an action you took (inviting a specific named person), not bulk or commercial mail.

2 Accepted Consent Bases

Before sending, GalSol requires you to declare which of the following describes your recipients. There is no option to declare a purchased, rented, or brokered list — see Section 3.

GS Form respondents — people who responded to your own GS Form, which discloses directly on the form that they may receive email from you.

Existing customers or contacts — people you already have a relationship with, provided they're given a way to opt out.

Event attendees — people who gave you their email directly, such as at registration or check-in.

Other — any other legitimate basis, which you must describe at the time of sending.

3 Prohibited Recipient Lists

Purchased, rented, scraped, or brokered email lists are never permitted on GalSol, regardless of where they came from or how they're described. There is no such thing as a legitimately bought opt-in list. Using GalSol to send to such a list is a violation of our Terms of Service and this policy, and will result in account suspension.

• Purchased or rented lists — any list acquired from a data vendor, list broker, lead seller, or "verified database", however it is marketed.
• Scraped or harvested addresses — addresses collected by crawling websites, social media, directories, WHOIS records, or public forms you do not own.
• Guessed or generated addresses — dictionary attacks or permutations of names against a domain.
• Someone else's list — addresses collected by a different organiser, employer, or third party who did not obtain consent for your messages.
• Re-adding opted-out recipients — re-importing anyone who previously unsubscribed in order to reset their opt-out.

4 Prohibited Content & Conduct

The following may never be sent, linked to, or attached using any GalSol mailing feature. This list is illustrative, not exhaustive — anything unlawful under Indian law, or under the law applying to your recipients, is prohibited whether or not it appears below.

• Child sexual abuse material (CSAM) or any sexualisation of minors — zero tolerance. This results in immediate termination and a mandatory report to law enforcement (see Section 10). There is no warning and no appeal.
• Adult and sexual content — pornography, nudity, sexually explicit imagery or text, escort or sexual services, and adult dating or webcam solicitations.
• Age-restricted (18+) material sent without age verification — including alcohol, tobacco, vaping, and gambling promotions sent to lists that may include minors.
• Drugs and controlled substances — illegal drugs, narcotics, precursor chemicals, prescription medication offered without a valid licence, and "pharmacy" promotions.
• Gambling, lotteries, and prize scams — betting, casino, or lottery promotions where prohibited, and any "you have won", lucky draw, or prize-claim message where no such prize exists or a fee is required to claim it.
• Fake offers and fraudulent schemes — advance-fee fraud, fake job or internship offers, fake invoices or payment demands, counterfeit goods, "get rich quick" schemes, pyramid and multi-level-marketing recruitment, chain letters, and Ponzi arrangements.
• Phishing and credential harvesting — any message or linked page designed to capture passwords, OTPs, UPI or card details, bank credentials, Aadhaar or PAN numbers, or to imitate the login page of Google, GalSol, a bank, an employer, or a government service.
• Malware and harmful files — viruses, ransomware, spyware, keyloggers, cracked or pirated software, and attachments or links that install software without informed consent.
• Impersonation and deceptive headers — falsifying your identity, sender name, reply-to address, or subject line, or presenting yourself as GalSol, Google, a government body, a bank, or a brand you are not authorised to represent.
• Link cloaking and redirect chains — URL shorteners, redirects, or embedded scripts used to disguise the true destination of a link.
• Financial and cryptocurrency scams — unlicensed investment solicitation, guaranteed-return claims, pump-and-dump promotion, fake airdrops, and unauthorised trading advice.
• Hate, harassment, and violence — content that threatens, harasses, defames, or doxxes any person, incites violence, or promotes terrorism or extremist organisations.
• Weapons and regulated goods — firearms, ammunition, explosives, and other goods that cannot lawfully be sold or advertised to your recipients.
• Dangerous health claims — unapproved medical treatments, miracle cures, or claims that could reasonably discourage someone from seeking genuine medical care.
• Platform abuse — creating multiple accounts to evade sending limits or a suspension, reselling or sharing your GalSol sending capacity, using the platform as an unauthorised relay for another party, or automating the interface to bypass controls.
• Tampering with compliance elements — removing, hiding, or breaking the GalSol footer, the Report link, or the unsubscribe link in any message.

5 Sender Identity & Required Disclosures

Because GalSol sends through your own connected Google account, every message carries your real identity. You are the sender of record and are responsible for the accuracy of what appears in it.

• Your sender name and reply-to address must be accurate and monitored — recipients must be able to reach a real person.
• Subject lines must reflect the actual content of the message and must not mislead the recipient into opening it.
• Commercial messages must clearly identify who is sending them, and — where required by the law applying to your recipients (for example CAN-SPAM in the United States) — include a valid postal address for your organisation.
• The GalSol footer, the Report link, and (for promotional mail) the unsubscribe link must remain intact and functional in every message.

6 Rate Limits

GalSol enforces a daily sending limit per account — 100 emails/day for standard Gmail accounts and 500 emails/day for Google Workspace accounts. This is stricter than Gmail's own native sending quotas and is enforced on every send, not just displayed.

7 Unsubscribe & Opt-Outs

Every promotional or bulk email sent through GalSol includes a one-click unsubscribe link. Once a recipient unsubscribes from a sender's promotional email, GalSol stops sending that sender's promotional email to that recipient going forward. Transactional emails — certificates, confirmations, and other messages tied directly to something you did — are not affected by an unsubscribe, since they aren't promotional in nature.

Opt-outs are permanent unless the recipient asks you to resume. You may not re-import, re-add, or otherwise attempt to reset a recipient's opt-out, and you may not require a recipient to log in, pay, or give a reason in order to unsubscribe. If a recipient contacts you directly asking to stop, honour it promptly regardless of whether they used the link.

8 Reporting Abuse

Every email sent through GalSol includes a "Report this email" link. Anyone who receives an unwanted email can use it to report it to GalSol directly, with an optional comment describing the issue. The report includes the subject and an extract of the message as it was actually sent, so we can verify the complaint rather than rely on a description alone.

You can also report abuse, including messages you believe impersonate GalSol, by writing to [email protected] with the subject line "Abuse Report". If you are a GalSol account holder and we contact you about a report, you must respond within two business days. Failure to respond is itself a violation of this policy and may lead to suspension while we investigate.

9 Enforcement

Violating this policy — including sending to a non-consenting list, misrepresenting the purpose of a send, or exceeding the boundaries of your declared consent basis — is grounds for warning, suspension, or termination of your GalSol account, at our discretion.

Depending on the severity and the history of the account, we may take any of the following steps, in any order and without prior notice:

• Issue a warning and require corrective action before further sending.
• Pause or reduce your sending limits, or suspend access to mailing features.
• Suspend the account while we investigate a report.
• Permanently terminate the account, without refund of any amounts paid.
• Preserve the relevant records for use in an investigation or legal proceeding.

Severe violations — in particular CSAM, phishing, malware distribution, and impersonation of a bank or government body — result in immediate permanent termination without warning.

10 Legal Reporting & Cooperation with Authorities

GalSol operates from Chennai, Tamil Nadu, India, and acts as an intermediary under the Information Technology Act, 2000 and the rules made under it. Where content sent through GalSol appears to be unlawful, we may take the following steps in addition to terminating the account.

• Report to law enforcement. We may report unlawful activity to the Indian Cyber Crime Coordination Centre via the National Cyber Crime Reporting Portal (cybercrime.gov.in), to local police, or to any other competent authority.
• Mandatory reporting of child sexual abuse material. Where CSAM is identified, we will report it to the appropriate authorities. This is a legal obligation, not a discretionary decision, and it applies regardless of the account holder's explanation.
• Notify Google. Because GalSol sends through Google's Gmail API, abuse also violates Google's policies. We may notify Google, and Google may independently restrict or suspend the Google account used to send the messages.
• Notify affected parties. Where a message impersonates an organisation or targets its customers, we may notify that organisation so it can protect the people affected.
• Respond to lawful requests. We will respond to valid court orders, government directions, and law-enforcement requests, and will preserve and disclose account records as required by law.

11 Your Responsibility

GalSol provides the sending tool; you decide who receives your messages and what they contain. You are the sender of record for every message sent from your connected Google account, and you remain responsible for complying with the laws that apply to you and to your recipients — including the Information Technology Act and DPDP Act in India, the GDPR where your recipients are in the EU or UK, and CAN-SPAM where they are in the United States.

You are also responsible for the conduct of anyone you give access to your GalSol workspace. If a collaborator sends something that violates this policy, it is treated as a violation by the account that owns the workspace. Your indemnity obligations are set out in our Terms of Service.

12 Contact

Questions about this policy, or reports of abuse, can be sent to [email protected]. For abuse reports please use the subject line "Abuse Report"; we aim to acknowledge these within 24 hours.

This policy is published alongside our Terms of Service and Privacy Policy, and should be read together with them. We may update this policy as our features and legal obligations change; the "last updated" date above reflects the most recent revision.