Email Sending Policy

How OneCML sends newsletters and campaign email: consent, unsubscribe, bounce and complaint handling, sender authentication and abuse contact.

Version 1.0 · effective 22 September 2026. Czech-language legal information is available on the Ochrana osobních údajů (privacy) and Kontakt pages.

Who operates this service

The OneCML platform (onecml.com) is operated by BON 5 s.r.o., Labská 217/5, 625 00 Brno – Starý Lískovec, Czech Republic, company ID (IČO) 24151017. OneCML is a product of the mistr.AI team. Abuse, privacy and postmaster contact: jsem@mistr.ai — reports are handled within one business day.

What OneCML is

OneCML is a website, content and CRM platform for small businesses, non-profits and independent professionals. Each customer runs their own installation (their own website and their own CRM database). Newsletters and content digests are one feature of that CRM: a customer writes a newsletter in the editor and sends it to their own contacts who have asked to receive it.

What email we send

• Newsletters and campaigns — content authored by the website owner (articles, news, event invitations, product updates).
• Content digests — periodic summaries of newly published articles and guides, according to the recipient's own frequency and topic preferences.

Transactional email (orders, tickets, account notifications, form confirmations) is delivered through a separate transactional provider and is not part of this policy. No third-party advertising, affiliate mailings or purchased content is ever sent.

How recipients get on a list — consent

• Every marketing recipient is a contact in the sender's CRM with an explicit marketing consent record (channel, purpose, status, source, timestamp and proof of consent are stored).
• Web sign-up forms require an explicit consent checkbox, are protected against automated submissions, and store proof of the sign-up.
• The platform technically refuses to send a marketing message to a contact without a valid opt-in consent, and excludes every address on the suppression list before a campaign is queued.
• Lists are never purchased, rented, scraped or exchanged between customers. Each installation's contacts are isolated from every other installation.

Unsubscribe

• Every newsletter and digest contains a visible one-click unsubscribe link.
• Messages carry the List-Unsubscribe and List-Unsubscribe-Post: List-Unsubscribe=One-Click headers (RFC 8058), so mailbox providers can offer native unsubscribe.
• An unsubscribe takes effect immediately: the consent is revoked and the address is added to the sender's suppression list. Recipients can also manage digest frequency and topics from their own preferences page.

Bounces and complaints

• Delivery, bounce and complaint notifications from the sending infrastructure are processed automatically in real time.
• Permanent (hard) bounces and spam complaints add the address to the sender's suppression list immediately; such addresses are never mailed again.
• Each sender's bounce and complaint rates are monitored separately; a sender whose rates exceed our internal thresholds is paused automatically until the cause is reviewed.

Sender identity and authentication

• Newsletters are sent from a dedicated, verified subdomain of the sender's own domain (for example news.onecml.com), never from a shared or unrelated domain.
• Every sending domain is authenticated with DKIM, a custom bounce (MAIL FROM) domain with SPF, and a DMARC policy.
• Sending reputation is isolated per sender, so one customer's mailing cannot affect another's deliverability.
• All email is transmitted over TLS.

Volume and frequency

Senders typically publish one newsletter every one to two weeks; digests follow the recipient's chosen cadence (daily, weekly or monthly). Each sender has a monthly sending quota enforced by the platform.

Data protection

Contact data belongs to the customer (the sender); OneCML processes it as a data processor under the customer's instructions and the GDPR. Details are described in our privacy policy (Czech) and on the Security & data page.

Reporting abuse

If you received email through OneCML that you did not ask for, write to jsem@mistr.ai with the message headers. We investigate every report, suppress the address across the sender's lists and, where warranted, suspend the sender.

Služby a rubriky

• Blog — Články o tom, jak přemýšlet o firemních systémech, datech a AI v malé firmě.