Security model

Spam here and lose your account.

Most email providers treat spam as your problem — better filters, smarter folders, good luck. We treat it as a network problem: spammers are removed from the network, and your inbox is defended at the door.

Three layers between spammers and you

1

The screener

The first email from an unknown sender doesn't reach your inbox. It waits in a holding room, and you authorize the sender — or dismiss them forever. One daily digest, no ambushes.

2

Blast detection

When the same message lands on many inboxes at once, or a message carries an absurd number of recipients, we flag it as a probable blast and ask you before it spreads.

3

Crowd reports

When enough independent users report the same sender, the network acts on the account itself — not just your copy of the mail. Your report protects everyone.

∞

Quarantine, never deletion

Every enforcement action parks mail where you can see it, review it, and recover it. We never silently vaporize a message — the one time we're wrong shouldn't cost you.

The termination ladder

Spamming on Creytix Mail has a published, predictable consequence path:

Rung 1 — Warning. Your complaint rate crosses the published threshold. You're told exactly which signal fired and how to fix it.

Rung 2 — Rate-limit. Sending is throttled while you remediate. Legitimate senders with a bad list get room to recover.

Rung 3 — Suspension. Sending frozen. Appeal within 48 hours with a human reviewing.

Rung 4 — Termination. Account closed. Phishing, malware, and fraud skip the ladder entirely.

Termination requires human review and an evidence pack — no automated account deletions, ever. Only aggregate report counts cross account boundaries; reporter identities never do.

Privacy, contractually

  • We never train on your mail. AI features process your messages to serve you, not to build models. Any change would require explicit opt-in.
  • Honest confidential mail. Our expiring mail is access control — links, expiry, revocation — and we say so. We don't sell you "encryption" that isn't.
  • Your data, exportable. Termination or cancellation always includes a data-export window. Your mail is yours.

Legal note: the full Terms of Service and Acceptable Use Policy are in final legal review and will be published before launch. Nothing on this page is legal advice — it's our public commitment, and the lawyers get the last word on the wording.