The US Federal Trade Commission has finalised its settlement agreement with an email management provider that allegedly used deceptive tactics to harvest personal data from user emails, declining to heed recommendations from a major privacy group to impose stiffer sanctions.