Policies
Effective 13 September 2026 · acceptable use · refunds & bookings · security & protection
The rules that keep the service safe and fair for everyone, and the exact commercial terms of bookings and refunds.
Acceptable use
- No unsolicited bulk mail (spam), no mail-bombing, no harvesting of addresses.
- No phishing, fraud, impersonation of people or organisations, or misleading sender names.
- No malware, no storing or sharing of illegal material, no infringement of others' rights.
- No attempts to bypass limits, probe or attack the platform or other users, or use another person's account.
- Sending limits apply to every mailbox to protect the reputation of the domains; unusual volume is paused and reviewed.
A first breach is normally a warning and a temporary block on sending; a serious or repeated breach closes the account, and unlawful activity is reported to the authorities.
Refunds & bookings
- Booking fee: 10% of the address price, at least AED 500 and at most AED 2,000; never more than the price itself.
- Reservation: 72 hours from the moment the fee is paid. The address shows as reserved to everyone else for that time.
- Balance: the price minus the fee, paid through the link sent to your email; the address is yours when it is paid.
- Not refundable: the booking fee - it is deducted from the price when you complete the purchase, and kept if the booking runs out unpaid.
- Refunded in full, automatically: any payment for a purchase we could not complete.
- Plans: cancel any time; the current paid period runs to its end; no partial refunds of a period already started.
Security & protection
- Sign-in: passwords are never stored in clear; new devices confirm by a code sent to your address or your recovery email; passkeys and app passwords are available for mail clients.
- Recovery: three ways you set yourself - a recovery email, a 6-digit code, two questions. Answers and the code are stored as salted hashes; six wrong attempts lock recovery for an hour.
- Data: encrypted in transit and at rest, stored in two regions (Mumbai and Doha) so a regional failure loses nothing; deleted items leave backups within 35 days.
- Payments: card details never touch our systems; Stripe and Whop take them on their own pages and we receive only the result.
- Operations: every administrative action is audited; monitoring and alerts run around the clock; reports to technical@uae.co are acknowledged within one working day.