Acceptable use policy

1. Scope

This Acceptable Use Policy (“Policy”) applies to the IRIS Postal Forms website, developer portal, API, MCP endpoints, templates, uploads, order pages, administrator tools, and related services (the “Service”). It forms part of the Terms of Use between you and Great Lakes Computing Office LLC (“Company,” “we,” “us,” or “our”).

2. Core rule

Use the Service only for lawful physical correspondence that you have the right to create, process, and send. Your use must respect recipients, third-party rights, postal rules, provider requirements, and the security and availability of the Service.

3. Illegal, fraudulent, or deceptive activity

You may not use the Service to create, facilitate, promote, or conceal:

• conduct that violates applicable law, regulation, court order, or postal requirement;
• fraud, scams, extortion, bribery, money laundering, or theft;
• false billing, fake debt collection, deceptive prize or lottery notices, or phishing;
• forged documents, false evidence, fabricated credentials, or falsified proof of mailing;
• unauthorized impersonation of a person, business, attorney, court, government agency, law enforcement body, carrier, or public official; or
• evasion of sanctions, export controls, or legally required identity and eligibility checks.

4. Threats, harassment, and invasion of privacy

You may not send content or use address information to:

• threaten violence, stalking, coercion, blackmail, or physical harm;
• harass, intimidate, shame, or repeatedly contact a person after a lawful request to stop;
• publish or exploit private information for doxxing, stalking, retaliation, or abuse;
• target a person based on legally protected characteristics in violation of law; or
• encourage suicide, self-harm, abuse, or dangerous conduct directed at an identifiable person.

Lawful notices, good-faith disputes, and other legitimate correspondence are not prohibited merely because they are unwelcome. The manner, frequency, purpose, truthfulness, and legal basis of the communication still matter.

5. Exploitation and illegal sexual content

You may not submit child sexual abuse material, sexual content involving a minor, nonconsensual intimate imagery, trafficking or exploitation content, or material used to groom, solicit, or exploit a person. We may preserve and report apparent illegal material as required or permitted by law.

6. Intellectual property and personal rights

You may not submit a document, photo, illustration, message, or other content that:

• infringes copyright, trademark, patent, trade-secret, publicity, or other rights;
• uses a person’s photo, identity, likeness, signature, or confidential information without authority;
• violates a contractual confidentiality or nondisclosure duty; or
• removes or falsifies authorship, source, trademark, or rights-management information.

7. Unsolicited and abusive mail

You may not use the Service for:

• unsolicited bulk mail, address-list blasting, or automated high-volume campaigns;
• commercial solicitations that violate consent, disclosure, or opt-out requirements;
• continued promotional mail after a valid opt-out when the law requires it to be honored;
• purchased, scraped, or unlawfully obtained address lists; or
• mail designed to evade provider limits, sender identification, or abuse controls.

A lawful individual business mailpiece is not prohibited solely because it concerns a commercial matter. You remain responsible for every marketing, consumer-protection, and industry-specific requirement that applies.

8. Sensitive and regulated information

Do not include personal or confidential information that is unnecessary for the mailpiece. Postcards are exposed during ordinary printing and delivery and must not contain sensitive information. You may not use the Service when doing so would require a security, privacy, or compliance commitment that Company has not expressly agreed to in writing.

Without an applicable written agreement, do not submit complete payment-card credentials, passwords, authentication secrets, private cryptographic keys, highly sensitive medical records, or government identifiers. You are responsible for any legally required authorization, notice, data-processing agreement, or safeguard concerning regulated information.

9. Security and service integrity

You may not:

• upload malware, corrupted files intended to cause harm, or active content designed to exploit a system;
• probe, scan, or test a vulnerability without Company’s prior written authorization;
• bypass authentication, rate limits, payment controls, upload conditions, or access restrictions;
• access another person’s order, document, administrator account, or tracking link without authority;
• interfere with the Service or overwhelm it through automated requests or resource consumption;
• reverse engineer or extract nonpublic source code except where applicable law expressly permits it; or
• use the Service to distribute malicious links, credentials-harvesting instructions, or harmful code.

10. Payment and identity abuse

You may not use stolen or unauthorized payment credentials, manipulate pricing or page counts, create false chargeback evidence, obscure the true sender, or submit an order for another person without authority. Testing payment or provider systems is allowed only through designated test environments and with authorization.

11. Postal and provider rules

You must comply with applicable USPS standards and the lawful requirements of Stripe, Lob, Amazon Web Services, and other providers used for an order. You may not misrepresent a mail class, tracking event, Certified Mail record, return receipt, delivery status, postage payment, or affiliation with USPS or Company.

The Service is intended for printable letter and postcard correspondence. It may not be used to arrange or misrepresent shipment of hazardous, restricted, or nonmailable items.

12. Automated access and resource limits

You may use the developer API, authenticated MCP endpoint, and other automated interfaces that Company publishes only for the purposes and within the limits they describe. Keep API keys secret, use only keys and credits assigned to your account, and revoke any key that may be compromised. An AI or automated client may submit a mailing against prepaid credits only after an accountable person or organization reviews the final document, addresses, price, authority, and intent. Public-site payment requires personal submission through Stripe Checkout.

You may not use automation to bypass payment, review, rate-limit, security, or acceptable-use controls, or split activity across addresses, sessions, identities, or payment methods to avoid a limit or enforcement action.

13. Enforcement

We do not undertake to pre-screen every document. We may investigate activity identified by security systems, providers, recipients, rights holders, or lawful authorities. Depending on severity and context, we may reject or cancel an order, suspend access, preserve relevant records, limit refunds for costs already incurred, notify a provider, or report conduct when required or permitted by law.

We may consider the content, purpose, scale, recurrence, harm, legal requirements, and your cooperation. An enforcement decision does not limit any other remedy available under the Terms of Use or law.

14. Reporting misuse

Report suspected abuse through the IRIS Postal Forms contact page. Provide the order identifier or tracking information when available, a description of the issue, and a way to contact you. Do not resend illegal content unless specifically requested through an appropriate secure channel.

15. Changes

We may update this Policy prospectively to address changes in the Service, provider rules, threats, or law. The effective date above identifies the current version.