Terms of Service

The agreement between you and HAMANI PTY LTD for HAMANI MAIL.

HAMANI PTY LTD · ACN 696 864 981 · ABN 48 696 864 981 · Sydney, New South Wales, Australia. HAMANI™ is a trade mark of HAMANI PTY LTD.

Effective 1 August 2026 · Version 1.0. These terms are the agreement between you and HAMANI PTY LTD ("HAMANI", "we", "us") for the HAMANI MAIL service. By creating an account or sending through the service you accept them.

Every statement below about what the software does or does not do was checked against the source code. Nothing here promises a capability that does not exist.

1. What HAMANI MAIL is

HAMANI MAIL is Australian-owned, Australian-hosted business email. We run email on your own domain — you keep the domain, we run the mail:

Mailboxes that receive. Mail addressed to your domain arrives at Amazon SES in Sydney, is scanned for spam and viruses, is stored, and is available to read in webmail.
Mailboxes that send. Compose and reply from webmail; the mail goes out through our sending infrastructure from your verified domain.
A sending API, if you want your own applications to send transactional or marketing mail from your domain.
Webmail for reading, replying, organising into folders, and handling attachments.
A business admin console for adding, listing, password-resetting and removing mailboxes on your own verified domains.

An optional zero-knowledge private mailbox (§2A). It is off unless you deliberately turn it on, one mailbox at a time, and turning it on has consequences you accept in advance.

What it is not: it is not a calendar, contacts, file-storage or office suite, and it is not an archiving or e-discovery product. An ordinary mailbox is not end-to-end encrypted — your mail is encrypted in transit (TLS) and at rest (AES-256) and stored in Australia, but we hold the keys and are technically able to read stored mail so that spam filtering, search and support can work (docs/PRIVACY.md §6). The one exception is a mailbox you have put on the private tier under §2A, where we hold only ciphertext we cannot open. It is email hosting, and we would rather be clear about the edges than let you find them later.

Setting it up requires you

To send from your domain, you must publish DNS records we give you (DKIM, SPF, DMARC) and, to receive, an MX record. We generate the exact records; publishing them is yours to do, because it is your domain. A domain is only marked verified when Amazon SES itself confirms it — we never mark a domain verified optimistically.

2. Your account and your keys

API keys are shown once, at creation. We store only a one-way hash, so we cannot recover a key you lose — you issue a new one and revoke the old.
Mailbox passwords are stored only as a memory-hard (scrypt) hash with a per-mailbox random salt. We cannot tell you what your password is — we can only reset it.
Keep your keys and passwords secret. Sending done with your key or from your mailbox is treated as sending done by you.
Tell us promptly if a key is compromised so we can revoke it.
A key may only send from a domain you have verified. This is enforced on the server on every send — a key can never send from someone else's domain.

2A. The zero-knowledge private mailbox — what you are agreeing to

You may put a mailbox on an optional private tier. It is off by default, it is opted into one mailbox at a time, and the software will not enable it until you have positively acknowledged the following. Full detail is in docs/PRIVACY.md §4A; these are the terms.

By enabling it, you accept that:

**We cannot recover your mail if you lose your passphrase, and neither can

anyone else. Your passphrase never reaches us — your browser derives the key on your own device. We hold your mail only as ciphertext and hold no key to it. If the passphrase is lost, the mail in that mailbox is permanently and irreversibly unreadable. There is no reset, no recovery, no backup and no legal process that changes this. This is not a limitation of our support — it is the guarantee itself**: a vault we could open for you is a vault we could open for anyone.

You accept that consequence in exchange for the guarantee. Permanent loss

of access following a lost passphrase is not a failure or defect of the service, and is not something we are able to remedy.

**Search does not work, and spam and phishing filtering does not run, on a

private mailbox.** You will receive spam unfiltered. Both follow from the same fact: we cannot read it.

Enabling it does not encrypt mail you already received, and a vault cannot

be replaced — replacing it would orphan every message already stored, so the software refuses.

Mail arrives from the internet unencrypted. We encrypt it the instant we

receive it, but it exists in plaintext in our memory for that instant. No provider delivering ordinary email can avoid this. Nothing readable is ever written to our storage.

It does not protect you from your own device. If the computer or browser

you unlock the mailbox on is compromised, none of this holds.

3. Acceptable use

You are responsible for what you send. In particular:

Australian anti-spam law applies to you. Commercial electronic messages sent from your domain are governed by the Spam Act 2003 (Cth) — consent, accurate sender identification, and a working unsubscribe. The obligations, and what our system enforces technically on your behalf, are set out in docs/AU-LEGAL.md, which forms part of these terms. In short: you must send only to people who have consented, you must keep records of that consent, and you must honour every unsubscribe. We also enforce unsubscribe technically — a marketing send is refused outright if our one-click unsubscribe is not configured, so we never send non-compliant mail on your behalf.
Do not send spam, phishing, malware, deceptive content, or anything unlawful.
Do not use the service to harass, defraud or impersonate anyone.
Do not attempt to circumvent our rate limits, warm-up limits, suppression list or reputation controls.
Do not use the service to send mail on behalf of a third party whose sending you cannot vouch for.

Personal mailboxes on a HAMANI-owned domain

HAMANI may offer a personal mailbox on a domain HAMANI owns, rather than on a domain of your own. Where it does, these additional terms apply to that mailbox:

The same anti-spam rules apply to you. A personal mailbox is not a loophole. Bulk or commercial messages sent from it are governed by the Spam Act 2003 (Cth) exactly as they are from a business mailbox, and docs/AU-LEGAL.md applies to you unchanged.
Do not impersonate anyone. Do not choose or use an address, display name or signature that represents you as another person, as a business you do not represent, as a government agency, or as HAMANI itself.
Reserved and restricted names. Addresses that suggest an official, administrative or security function — for example admin, postmaster, abuse, security, support, billing, noreply — and names that impersonate a brand, an institution or a public body, are reserved to HAMANI. We may refuse them, and we may reclaim one that was issued in error or obtained by misrepresentation, on notice.
The address is a licence, not a possession. You do not own a HAMANI-owned domain and cannot transfer the address away, because the domain is not yours. If that matters to you, use a domain you own — which is the main product.
One person, honestly. Signup requires a verified recovery email address before the mailbox is activated. Do not create accounts in bulk, automate signup, or create an account in someone else's name.

What happens if a personal account is abused. We may suspend that account's sending — where these terms are breached, or where its bounce or complaint behaviour threatens the shared sending reputation. When we do:

Your mailbox and your data stay reachable. You can still sign in, read your mail, and get your data out. Suspending sending is not lockout, and the same rule that applies to an unpaid business invoice (§4) applies here.
Suspension of sending is not deletion. Nothing is destroyed by a suspension.

A separation we have actually built, and its limit. Personal sending and business sending are counted against separate reputation aggregates with separate brakes, so abuse on the personal side stops the personal side and cannot stop a paying business customer from sending. That is real, and it is proven both ways by tests. Its limit is equally real and we are not going to bury it: Amazon SES measures its own account-wide reputation, and that is not separated by us. Bad enough behaviour anywhere on the platform can still cause AWS to throttle or suspend the underlying account, which is outside our control.

Why we enforce this hard

Every HAMANI customer shares sending reputation. One bad sender damages delivery for every honest one. So:

We may throttle or suspend sending — immediately, with or without notice — where sending breaches these terms, or where bounce or complaint rates threaten the shared sending reputation. This is a deliberate design commitment.
Suspension of sending is not lockout from your mailbox. See §4.

Limits that exist, so you are not surprised

These are real, currently-configured limits, not marketing numbers:

A free sending tier includes 3,500 emails a month and up to 150 a day. Over either ceiling, a send is refused until the next period. Paid sending tiers raise the monthly volume — see our pricing page.
New-domain warm-up. A newly verified domain is capped at 50 sends on its first day, growing over 30 days to 50,000 per day, after which it graduates. Over the ceiling, a send is refused with a clear warm-up error. This protects your domain's reputation and everyone else's. Plan launches around it.
Per-key request rate limit, and a per-source-IP limit applied before authentication.
Message size is capped (roughly a few megabytes of real payload once attachments are encoded), and a batch send has a maximum number of recipients per call.
Amazon SES account limits apply underneath us — a sending rate and a daily quota. We surface throttling and never report a message as sent when the provider rejected it.

4. Payment, and what happens if you do not pay

HAMANI MAIL is billed in Australian dollars, GST-inclusive, at the plan and rates shown on our pricing page. Free tiers are free — no card, no expiry, not a trial. There is no minimum term and no lock-in contract.
Payments are processed by Stripe. Card details never reach HAMANI.
The price you are shown is the price you are charged.

If an invoice goes unpaid:

Sending may be paused. That is the lever we use. We will give you at least 7 days' notice by email to your account address before pausing sending.
You are never locked out of your mailbox or your data. Not for a late invoice, not during a dispute, not ever. You can still log in, read your mail, and get your data out. Holding a customer's own correspondence hostage over money is not something this business will do, and it is written into the product's rules rather than left to goodwill.
Sending resumes as soon as the account is settled.

5. Cancelling, and taking your data with you

Cancel whenever you like. There is no minimum term and no exit fee. You pay for what you used up to the point you stop.
Your mail is yours. On cancellation you may take it with you, at no charge.
How export works today: export is a request you make to us, which we fulfil promptly and for free. A self-service export button is on the roadmap; until it ships we will not describe it as though it exists.
Deleting your data. You can permanently delete a mailbox and all of its mail yourself, at any time, from your admin console — this erases the messages and their stored attachments, and it cannot be undone. Cancelling your account does not by itself delete your mail (so that you can still export it); deletion is the separate, deliberate action above.
Moving to another provider is a DNS change on a domain you already own. That is the whole point of running your mail on your own domain: nothing here is designed to make leaving hard.

6. Service availability

We do not promise an uptime percentage. There is no service level agreement, no availability guarantee, and no service credit scheme in these terms. We are not going to print a number we have not measured and cannot back.

What we can tell you truthfully:

The service runs on AWS infrastructure in Sydney, and inherits both its resilience and its outages.
Sending is asynchronous by design: a message you submit is queued and delivered, and a transient failure is retried automatically. A message that cannot be delivered after retries is parked, never silently dropped.
Mail is stored durably in Amazon S3 and DynamoDB with point-in-time recovery enabled on the index.
We may need to interrupt the service for maintenance. We will avoid it where we can and tell you where we cannot.
We do not guarantee delivery to any recipient's inbox. No provider honestly can. Whether mail reaches an inbox or a spam folder is decided by the receiving provider, on signals including your own sending behaviour. Our warm-up ramp and reputation controls give you the best available starting position; they are not a promise about placement.

7. Our obligations to you

We will store your mail in Australia (currently AWS's Sydney region) and tell you before that changes.
We will not read, sell, mine or train on your mail. See docs/PRIVACY.md §6 for exactly who can access it and when.
We will keep your data available to you even where a payment is outstanding.
We will tell you about a security incident affecting your data, and comply with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth) where it applies to us.
We will not claim certifications we do not hold. HAMANI holds no ISO/IEC 27001, SOC 2, IRAP or Essential Eight assessment.

8. Your content, our platform

You own your content. Your mail, your attachments, your templates, your contact data. We claim no ownership of any of it.
You grant us only the permission we need to run the service: to receive, store, process, scan and transmit your mail so it reaches you and your recipients. Nothing broader.
We own the platform — the software, infrastructure and documentation. Your subscription does not transfer any of it to you.

9. Suspension and termination

You may stop at any time (§5).
We may suspend sending immediately where §3 is breached or where the shared sending reputation is at risk. This applies to a personal mailbox on a HAMANI-owned domain exactly as it applies to a business account (§3).
Suspension of sending never suspends access. Whatever the reason — non-payment, abuse, or reputation — your mailbox stays reachable, your mail stays readable, and you can still take your data out (§5).
We may terminate the service on at least 30 days' notice to your account address, except where immediate suspension is permitted under §3 for abuse or reputation risk.
Termination for any reason does not affect your right to obtain your data (§5), and does not entitle us to withhold it.

10. Limitation of liability

Your non-excludable rights come first. Nothing in these terms excludes, restricts or modifies any consumer guarantee, right or remedy you have under the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)) or any other law, to the extent it cannot lawfully be excluded. Where our liability for a failure to comply with such a guarantee can be limited, our liability is limited, at our option, to re-supplying the service or paying the cost of having it re-supplied.
Cap. Subject to the paragraph above, our total aggregate liability to you arising out of or in connection with the service — whether in contract, tort (including negligence), under statute or otherwise — is limited to the total fees you paid us for the service in the 12 months before the event giving rise to the liability.
Excluded loss. Subject to the first paragraph, we are not liable for any indirect or consequential loss, or for loss of profits, loss of revenue, loss of business, loss of goodwill, or loss of or corruption of data, however caused. Email is not a system of record; keep your own copies of anything you cannot afford to lose.
Your indemnity for your own sending. You indemnify HAMANI against any claim, loss, liability or cost we suffer arising from your use of the service in breach of these terms or the law — including breach of the Spam Act 2003 (Cth), and unlawful, infringing or deceptive content you send. This reflects the simple fact that you, not we, decide what you send and to whom.

11. Changes to these terms

We may update these terms. Where a change materially affects you, we will give notice before it takes effect. Continuing to use the service after that is acceptance; if you do not accept, you may cancel under §5 and take your data with you.

12. Governing law

These terms are governed by the laws of New South Wales, Australia, and the parties submit to the non-exclusive jurisdiction of the courts of New South Wales and the courts competent to hear appeals from them.

13. How to contact us

For support, notices, complaints or disputes, write to [email protected]. We aim to acknowledge a complaint promptly and to work with you in good faith to resolve it.