This is part of the terms of service. It is short because it only covers things that actually go wrong: where a list came from, what a page says about the person reading it, and who should never be written to at all.
Status: draft 1.0, version , prepared 30 August 2026. Not in force.
Everyone barua may write to must have given you permission to email them. Not a vendor, not a partner, not an inference from a public profile. You.
So barua may not be used to message:
And barua may not be used to hide who is sending. No misrepresenting sender identity, no spreading volume across domains to slip past filtering, no obscuring or breaking the unsubscribe link, and no sending from a domain you do not control.
This is the rule most likely to catch you out, so it is first among the ones about data. barua masks every input value and every piece of rendered text in the browser before it is sent. It deliberately does not mask the context it needs to be useful: the page's title, the name and price of a product, the label on a control, and the query someone typed into your own search.
On most sites that is harmless. On some it is not. A page title can say a person was reading about a medical condition, a pregnancy, a debt, a legal problem, or a faith. That is special-category data under European law and it needs a far stronger basis than ordinary browsing does.
So: do not run barua on pages whose mere visit reveals that kind of information about
a person, unless you have a lawful basis for processing it and have told them. Where
only part of a site is like that, mark the element with data-cg-block and its
contents are never recorded, or keep the tag off those routes entirely. Note that a page's
title needs the attribute on the <title> element itself; blocking the
body does not stop the title being sent. The install guide shows
both.
The same applies to anything you pass barua deliberately. Do not send us payment card numbers,
government identifiers, health records, or credentials, through the tag, through
barua.identify(), or through your data layer. barua has no place to put them and no
reason to hold them.
Not children. Do not use barua on a site directed at children, and do not use it to write to anyone you know or should suspect is a child.
Not for content that would be a problem coming from any sender: hate or discrimination, harassment, deception about who you are or what you are selling, illegal goods, malware, phishing, or anything designed to make someone act against their own interest through a false urgency.
And not for a handful of categories where the deliverability risk lands on every other sender barua handles, whatever the legality: bought-audience crypto promotion, gambling offers, payday lending, prescription medicine, and multi-level marketing. If your business is near one of these lines, talk to us before you install rather than after.
You can forward one of your own emails to templates@mail.barua.ai and barua will
pull the layout out of it, so your messages look like the ones you already send. Forward only
emails you have the right to share with us. Do not forward someone else's marketing as a design
you would like copied, and do not forward a message that carries another person's data in it.
The forwarded message sits with our delivery provider for about three days. We keep our own copy so the layout can be pulled out again when your template changes, and it stays until you ask us to remove it. Ask at any time and it goes.
Do not try to break it, and do not use it to break anything else. That means no probing or circumventing our access controls, no using another account's keys, no reselling barua as your own service without an agreement, no automated load that we have not agreed to, and no putting the tag on a site you do not control.
The publishable key in your tag is public by design and cannot read anything. Treating it as a vulnerability and reporting it is fine. Using someone else's is not.
It depends on what happened. A list that looks bought gets a question first, because we would rather be wrong about you than lose you. Something actively harmful, to your recipients or to the other senders barua handles, gets sending stopped immediately and a conversation afterwards.
We can pause one send, suspend sending, suspend the account, or end the agreement, as the terms set out. Where it is safe to ask first, we ask first.
If you think someone is using barua in breach of this policy, including if you received a message you never asked for, write to chris@barua.ai and a person will look at it.