Acceptable Use Policy
Last updated · v0.1
This policy is part of the Terms of Service. It applies to everyone using Cosend and to every message sent through it.
Most of what follows is not our rule. Your WhatsApp Business Account is governed by Meta's WhatsApp Business Messaging Policy and by Meta's Commerce Policy, and those apply to you whether or not you use Cosend. What this page adds is the small number of rules that are ours, and — §6 — what we actually do when a rule is broken.
1. Consent and opt-out
- Do not send unsolicited messages. You must have opt-in from each recipient before you message them, obtained in a way that makes clear they will receive WhatsApp messages from your business.
- Honour opt-outs promptly. A person who asks to stop hearing from you must stop hearing from you, including through automations and AI replies.
- Do not use Cosend to send messages a recipient could not reasonably have expected from the business they gave their number to.
2. Contact lists
- No purchased, rented, scraped or otherwise acquired contact lists. This is the single fastest way to get a WhatsApp number restricted, and the restriction lands on your number, not ours.
- Do not import contacts you have no relationship with.
- Do not use Cosend to enumerate, validate or harvest phone numbers, whether or not you message them.
3. Prohibited content
Do not send, store or process content through Cosend that:
- Is illegal where you are, where we are, or where the recipient is
- Would get a WhatsApp Business Account restricted under Meta's policies
- Promotes goods or services Meta's Commerce Policy prohibits
- Is fraudulent, deceptive, or impersonates another person or business
- Harasses, threatens, or targets a person or group
- Contains malware, phishing links, or credential-harvesting content
- Infringes someone else's intellectual property
- Sexually exploits or endangers children — this is reported, not merely suspended
4. Use of the API
- The passthrough API is for WhatsApp traffic. Do not use it as a general-purpose proxy, a relay, or a way to reach hosts that are not part of a WhatsApp integration. Outbound destinations are allowlisted and re-resolved on every delivery, so this is enforced rather than merely asked for.
- Do not circumvent Meta's rate limits, or ours — by rotating numbers, by splitting a workload across accounts, or by any other means.
- No automated account creation. One organization per business, created by a person.
- Do not share, resell or sublicense API keys outside your organization, and do not use Cosend to provide a competing messaging API to third parties without a written agreement with us.
- Do not probe, scan or test the vulnerability of the service without our written permission, or interfere with anyone else's use of it.
5. Platform integrity
- Do not misrepresent your identity, your business, or your relationship with Cosend or with Meta.
- Do not use Cosend to build a dataset for resale, or to train models on other people's messages.
- Do not attempt to access another organization's data. Isolation is enforced at the database, and an attempt is an auditable event.
6. What we do about it
The enforcement action is suspension of routing. A suspended connection stops sending and receiving; your data stays where it is, your dashboard still opens, and your export still works.
| Situation | What happens |
|---|---|
| A suspected breach we can investigate first | We contact you, explain what we have seen, and give you a chance to fix it before suspending anything |
| An active breach, or one where a Meta restriction on your number is at stake | Immediate suspension of routing, then notice. Waiting can cost you the number itself, which is not something we can give back |
| A legal obligation to act | We act as the law requires and tell you, unless we are forbidden from telling you |
| Repeated or deliberate breach | Termination under §8 of the Terms |
A suspended connection reports its state through the API and the dashboard, with a reason — your integration finds out from a status, not from silence. If you think a suspension is wrong, reply to the notice and we will look at it again.
7. Reporting abuse
If you believe someone is using Cosend in breach of this policy, email hello@cosend.app with as much detail as you have. Reports about content sent to you over WhatsApp can also be made inside WhatsApp itself, which reaches Meta directly.