Terms of service

The service

Spoofhound monitors email authentication (DMARC, TLS-RPT, BIMI, SPF, MTA-STS) for domains you control, operated by GoCloudConsulting. The service is currently an invite-only beta provided free of charge; paid plans may be introduced later with clear notice before anything is charged.

Your responsibilities

• Only add domains you control. Verification requires publishing a DNS record, and a domain can be verified by exactly one account; keeping that record published is what keeps the domain yours in Spoofhound.
• Keep your credentials and recovery codes safe. Multi-factor authentication is mandatory.
• Don't attempt to access other accounts' data, probe the service's security, or use it to process reports for domains you have no authority over.

Our responsibilities

• Your report data is yours: isolated per account, never shared, exportable on request.
• Any access to your account by our staff (for support) is time-limited, read-only, and recorded in your own audit log where you can see it.
• Spoofhound observes and recommends — it never changes your DNS. Publishing records, and the decision to move a domain to DMARC enforcement, remain yours.

Service level

This is a beta: we aim for high availability and durable storage of your data (every report is archived raw before processing, so reprocessing after a fault is always possible), but the service is provided "as is" without warranties during the beta period. Mailbox providers, not Spoofhound, control when and whether reports are sent.

Termination

You can stop using the service and request deletion of your data at any time. We may suspend accounts that break these terms, with notice where reasonably possible.

Contact

Questions about these terms: the contact form.