Abuse Policy
Last updated: October 17, 2026
1. Purpose and scope
1.1 This policy sets out the standards, review process, and enforcement actions that apply to customer activity processed through the Skro platform, including web tracking, API usage, and campaigns involving email, SMS, push notifications, or other channels.
1.2 Our purpose is to protect end users, Skro's infrastructure, and our customers' reputations, and to support compliance with applicable laws and industry requirements. This policy applies alongside our Terms & Conditions and Privacy Policy.
2. Prohibited activity
2.1 Abuse includes the activities described in clauses 2.2–2.8. This list is not exhaustive.
2.2 Phishing and fraud. Phishing, social engineering, or fraudulent content intended to deceive end users.
2.3 Unsolicited messaging. Spam or unsolicited bulk messages sent by email, SMS, push notification, social platforms, or other channels.
2.4 Malicious content. Malware and harmful redirects.
2.5 Illegal or deceptive services. Fake or illegal services, advance-fee scams, pyramid schemes, or counterfeit goods.
2.6 Privacy violations. Activity that breaches applicable privacy or data-protection requirements.
2.7 Regulatory violations. Failure to provide required legal notices, opt-out mechanisms, sender identification, or other disclosures required for the relevant activity.
2.8 Provider and authority reports. Activity flagged by hosting providers, mailbox providers, network partners, or legal authorities is subject to the review and enforcement process in this policy.
3. Zero-tolerance commitment
3.1 Skro operates a zero-tolerance approach to verified abuse. Once abuse is verified, we take immediate mitigation steps without negotiation. Customers accept this requirement when using our services.
4. Campaign removal and account actions
4.1 Provider-mandated takedown. When a provider requires a takedown, including a notice from a hosting provider's abuse desk, we immediately deactivate and permanently remove the affected campaign.
4.2 Verified abuse allowing remediation. Where a verified notice permits remediation, the customer has 24 hours to deactivate the affected campaign and address the issue. If the customer does not complete the required action within that period, Skro forcibly removes the campaign.
4.3 Repeat violations or egregious abuse. Enforcement may include permanent account suspension and domain blocking. Where appropriate, information may also be provided to the relevant authorities.
4.4 Appeals. If you believe a campaign was flagged in error, you may appeal after its removal by submitting supporting evidence, such as opt-in logs or authentication records. An appeal may be directed to the complaint owner, including a hosting provider, regulatory body, partner, or threat-detection provider. The campaign must be taken down before an appeal is considered.
5. Enforcement workflow
5.1 Detection. Abuse signals may come from automated scanners, feedback loops, abuse desks, or user reports.
5.2 Triage. Our Security and Compliance team validates the signal with a service-level commitment of less than two hours.
5.3 Action. The affected campaign is paused or removed in accordance with section 4.
5.4 Notification. The customer is notified with the relevant evidence and remediation steps.
5.5 Review. We conduct a root-cause analysis and update this policy where necessary.
6. Policy maintenance
6.1 This policy is reviewed at least annually and whenever relevant laws or industry standards change.
6.2 Customers will receive at least 30 days' notice of material changes.
7. Reporting abuse and contacting Skro
7.1 To report suspected abuse or ask a question about this policy, email [email protected].
7.2 When reporting suspected abuse, include the affected URL or domain, the date and time you observed the activity, a description of the issue, and any relevant supporting evidence. Do not include passwords, access tokens, or payment-card details in your report.
7.3 Skro OÜ is the provider of the Skro platform. Our registry code is 16173240. Additional support options are available on our contact page.