Terms of service

The service

Spoofhound monitors email authentication (DMARC, TLS-RPT, BIMI, SPF, MTA-STS) for domains you control, operated by GoCloudConsulting. A free trial is available, and paid plans are described below.

Your responsibilities

• Only add domains you control. Verification requires publishing a DNS record, and a domain can be verified by exactly one account; keeping that record published is what keeps the domain yours in Spoofhound.
• Keep your credentials and recovery codes safe. Multi-factor authentication is mandatory.
• Don't attempt to access other accounts' data, probe the service's security, or use it to process reports for domains you have no authority over.

Our responsibilities

• Your report data is yours: isolated per account, never shared, exportable on request.
• Any access to your account by our staff (for support) is time-limited, read-only, and recorded in your own audit log where you can see it.
• Spoofhound observes and recommends — it never changes your DNS. Publishing records, and the decision to move a domain to DMARC enforcement, remain yours.

What you pay

You pay for each verified domain, and an extra amount for each domain that has AI analysis switched on. Both counts come from your own domains — you don't choose a quantity or buy blocks, and a domain starts counting once it is verified.

The core price per domain is graduated: $12 a month for the first 10 domains, $9 a month for the 11th to 50th, and $7 a month for the 51st onward. Each band is charged at its own rate, so adding a domain never raises your total. Annual billing is ten months' worth for the year. AI analysis adds $4 a month per domain if you bring your own AI provider key, or $9 a month per domain for the managed option. All prices are in US dollars and exclude any tax that applies.

Billing and renewal

You are billed in advance, monthly or annually as you choose. A subscription renews automatically on its anniversary and continues until you cancel it.

When your domain count changes

Adding a domain takes effect straight away. Removing one is applied at the next billing reconciliation. You are never charged for a domain you have removed.

If a payment fails

A failed payment never deletes anything. What happens is staged:

• The full service keeps running, we tell you inside the product, and we retry the card automatically.
• If it still hasn't been paid, AI analysis pauses. Everything else keeps running.
• After 14 days, the account becomes read-only. Reports are still received and still stored. If you supplied your own AI provider key, that key is deleted.

At no stage is your data deleted because of non-payment. Deletion only ever happens on the published retention schedule, or when you ask for it.

Refunds

If you're not happy, tell us within 14 days of your first payment on a plan and we'll refund it in full. After that you can cancel at any time and keep the service until the end of the period you have paid for; earlier payments are not refunded.

Cancelling

You can cancel at any time from the billing portal inside the product. Your data stays readable and exportable, and a closed account can be reopened for 30 days before its data is deleted.

Tax

Prices exclude any tax that applies to you. Where tax is due, it is added on the invoice.

Service level

We aim for high availability and durable storage of your data (every report is archived raw before processing, so reprocessing after a fault is always possible); the service is provided "as is" without warranties except as required by law. Mailbox providers, not Spoofhound, control when and whether reports are sent.

Termination

You can stop using the service and request deletion of your data at any time. We may suspend accounts that break these terms, with notice where reasonably possible.

Contact

Questions about these terms: the contact form.