Anti-Spam Policy

Craftt is a brand of Venturise OÜ, a private limited company incorporated in Estonia and operating from Tallinn, Estonia. In this policy, "we", "us" and "Craftt" refer to Venturise OÜ.

This policy covers every email sent from the craftt.io, maramigin.com and gmaramigin.com domains and their subdomains, every use of those domains inside a message body, and the conduct we require of customers, contractors and partners who work with us. All three are operated by Venturise OÜ; maramigin.com redirects here, and gmaramigin.com publishes an identical policy at gmaramigin.com/anti-spam-policy.

It is a public commitment, not a marketing statement. If we are in breach of it, we want to be told. See "Reporting abuse" below.

We do not send unsolicited bulk email. We do not buy, rent, trade or harvest email lists. We do not send to addresses scraped from websites, forums, social networks or WHOIS records.

We do not use third-party bulk mailers, affiliates or lead-generation vendors to send mail on our behalf, and we do not permit any third party to place a link to any of our domains inside mail we did not send.

We never obscure the sender, forge headers, falsify routing information, use misleading subject lines, or send from throwaway or lookalike domains.

Every commercial message we send identifies Venturise OÜ, states why the recipient is receiving it, and carries a working opt-out.

Opt-in and requested contact. Most of our email goes to people who asked to hear from us: they submitted a form on craftt.io, booked a discovery call, requested the free audit, downloaded a resource, or emailed us first. Consent is recorded with the source, timestamp and IP address of the submission.

Customer and project correspondence. Once you engage us, we email you about the work. This is contract performance, not marketing, and it is not a mailing list.

One-to-one B2B prospecting. We also send a limited volume of individually researched business-to-business email to named professionals at companies whose published role and business context make our services relevant. Under Article 6(1)(f) GDPR and Recital 47 we treat this as processing necessary for our legitimate interests in direct marketing; a balancing assessment is on file.

Prospect addresses are business addresses at business domains, sourced from the company's own website, the individual's public professional profile, or licensed B2B data providers that contractually warrant lawful collection. We do not contact personal or consumer mailboxes, role addresses used for abuse or security reporting, or anyone in a jurisdiction whose rules require prior consent for the message in question.

Every marketing and prospecting message carries an opt-out. Marketing mail includes a one-click unsubscribe link and the List-Unsubscribe and List-Unsubscribe-Post headers. One-to-one prospecting mail carries a plain-language opt-out line; replying "stop", "unsubscribe" or "remove me" is enough.

You can also opt out at any time by emailing george@craftt.io. No reason is needed and we will not ask for one.

Opt-outs are processed within 72 hours and in every case well inside the 10 business days required by the CAN-SPAM Act. The address is added to a permanent global suppression list that is checked before any send.

Suppression is permanent and survives list rebuilds, tool changes and new campaigns. We do not remove addresses from the suppression list, and we never charge or require an account to opt out.

Mail from us originates only from craftt.io, maramigin.com and gmaramigin.com and their subdomains, and only from these addresses: george@craftt.io, polia.m@craftt.io, hi@craftt.io, gmaramigin@maramigin.com, george@maramigin.com, georgemaramigin@maramigin.com and gmaramigin@gmaramigin.com.

All sending domains publish SPF, DKIM and DMARC records. DMARC is set to a rejecting or quarantining policy so that mail forging our domain is refused by receivers.

Anything claiming to come from Craftt or from George Maramigin that does not originate from those domains, or that fails our published authentication records, is not ours. Please report it using the details below so we can act on it.

We link only to domains we control or to the website of the party under discussion. We do not host redirectors, URL shorteners or landing pages on behalf of third parties, and none of our domains should ever appear as a payload URL in mail we did not send.

We send low volumes to small, targeted, individually reviewed audiences. We do not run high-volume blasts and we do not mail an address repeatedly after silence.

We monitor bounce rates, complaint rates and engagement, and we pause or retire any sequence that trends the wrong way. Hard bounces are suppressed immediately.

We do not send email about anything unrelated to our own services: no adult, gambling, pharmaceutical, cryptocurrency, financial-product or affiliate content, ever.

We implement CRM and automation systems, including systems that send email on our customers' behalf from their own domains. Customers are responsible for the lawfulness of the mail they send from those systems.

Our engagement terms prohibit using anything we build to send unsolicited bulk email, to mail purchased or scraped lists, or to evade opt-outs. We will not knowingly configure a system to defeat unsubscribe handling or authentication.

Where we find a customer or partner in breach, we require correction. If it is not corrected, we suspend the affected system and may terminate the engagement.

If you received email you believe breaches this policy, or you have seen a craftt.io, maramigin.com or gmaramigin.com URL in mail we did not send, email george@craftt.io with the full message including headers.

We acknowledge every abuse report within one business day and complete our investigation within five business days. We will tell you what we found and what we did about it.

The address in the message will be suppressed as soon as the report is received, before the investigation concludes.

Operators of SURBL, URIBL, Spamhaus DBL, Invaluement, Barracuda, SpamCop and comparable reputation services are welcome to contact us directly at george@craftt.io. We will respond to any listing inquiry, evidence request or delisting review promptly and in good faith.

If any of our domains has been listed, we would like the sample that triggered it. We will identify the source, fix the cause, provide evidence of the remediation, and only then request review.

We do not contest listings we caused, and we do not rotate to a new domain to escape one.

We operate to whichever standard is strictest for the recipient in question, including the GDPR and the ePrivacy Directive in the EEA, PECR in the United Kingdom, the CAN-SPAM Act in the United States, CASL in Canada, the Spam Act 2003 in Australia, and the Estonian Electronic Communications Act and Personal Data Protection Act.

Where a jurisdiction requires prior opt-in consent for the type of message we intend to send, we obtain it and do not rely on legitimate interest instead.

How we handle personal data more broadly, including your access, correction, deletion and objection rights, is set out in our Privacy Policy at craftt.io/privacy.

Breaches of this policy by our own staff or contractors are treated as a serious matter and are grounds for termination.

We may update this policy. The "last updated" date at the top changes when we do, and material changes are highlighted on this page for at least 30 days.

Venturise OÜ (trading as Craftt), Tallinn, Estonia.
Abuse, opt-out and blocklist inquiries: george@craftt.io