By creating an account, using the authenticated OnlyDMARC application, calling the OnlyDMARC API, or using one of our public tools, you agree to these Terms of Service ("Terms"). If you use the service on behalf of a company or other organisation, you confirm that you are authorised to accept these Terms for that organisation.
If you do not agree to these Terms, do not use the service. These Terms should be read together with our Privacy Policy and, where applicable, any separate written order form, statement of work, data-processing agreement, or service-level agreement we have agreed with you.
OnlyDMARC provides software for collecting, parsing, storing, and visualising DMARC aggregate report data, plus related DNS, SPF, DKIM, sender-attribution, alerting, export, and administration features. Some features are account-only, some are public tools, and some may be enabled or disabled while they are being launched, tested, or improved.
OnlyDMARC helps you understand email-authentication configuration and reporting signals. It does not send email as your domain, guarantee that email providers will deliver your messages, or replace your obligation to manage your own DNS, mail providers, and security controls.
We may improve, change, suspend, or retire parts of the service over time. Where a material change affects active paid use, we will try to give reasonable notice unless the change is urgent for security, reliability, legal, or abuse-prevention reasons.
You must provide accurate account information and keep it up to date. You are responsible for keeping your login credentials secure and for activity performed through your account.
Accounts are intended for named users. Do not share credentials. Where your plan or configuration allows team members, invite them as separate users so activity can be audited and access can be removed cleanly.
You must promptly tell us if you believe your account, API key, or any integration credential has been compromised.
You agree not to use OnlyDMARC to:
We may throttle, suspend, or terminate access where we reasonably believe these rules are being breached, or where we need to protect the service, our customers, or third parties.
Paid access, plan limits, billing cadence, taxes, renewal, and cancellation terms are governed by the order form, invoice, subscription record, or other written agreement we have with you. Unless a separate agreement says otherwise, fees are billed in advance and are non-refundable except where required by law.
OnlyDMARC currently treats subscription state as an account entitlement inside the platform. If online checkout or card processing is offered, payment details will be handled by a third-party payment processor and not stored by OnlyDMARC.
We may offer free public tools, previews, beta features, or trial access. These are provided to help you evaluate configuration and product fit, and may be changed, rate-limited, withdrawn, or moved behind an account requirement at any time.
Public tools usually inspect public DNS and the information you submit in the form. They are snapshots, not continuous monitoring, and should not be treated as a complete security assessment.
OnlyDMARC and its licensors retain all rights, title, and interest in the service, including software, designs, documentation, trademarks, and product content. These Terms do not transfer ownership of the service to you.
You retain rights to the data you submit to or generate through the service ("Your Data"). You grant us a limited licence to process Your Data as needed to provide, secure, support, and improve the service.
You are responsible for ensuring that you have the right to submit domains, report data, contacts, notification destinations, and other information to OnlyDMARC. You must not submit data that you are not authorised to process or share.
We process Your Data as described in our Privacy Policy. If you need a data export or deletion after closing an account, contact us. Availability of exports, deletion timing, and backup expiry may depend on the nature of the data and any legal, tax, fraud-prevention, or security-retention obligations that apply.
Each party agrees to protect the other's non-public technical, commercial, and operational information with reasonable care and not disclose it except as needed to provide or receive the service, comply with law, or enforce these Terms.
We work to keep OnlyDMARC reliable and to resolve incidents quickly. The public status page provides a current operational snapshot, and account-specific issues can be raised through support.
Unless we have agreed a separate written SLA with you, the service is provided without a formal uptime guarantee or automatic service-credit commitment. Planned maintenance, emergency security work, third-party provider incidents, DNS and mailbox-provider behaviour, and events outside our reasonable control may affect availability.
To the maximum extent permitted by applicable law, OnlyDMARC's total liability for claims arising out of or in connection with these Terms or the service will not exceed the greater of (a) the fees you paid to OnlyDMARC in the 12 months before the event giving rise to the claim, or (b) NZD $100.
OnlyDMARC will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of profits, revenue, goodwill, data, or business opportunity, even if we have been advised that such damages are possible.
Nothing in these Terms limits liability that cannot legally be limited, including liability for fraud or intentional misconduct.
You agree to indemnify and hold harmless OnlyDMARC from claims, losses, liabilities, damages, and expenses arising from your misuse of the service, breach of these Terms, unauthorised monitoring of third-party domains, or infringement of third-party rights.
You may stop using the service at any time. Paid cancellation and renewal terms are governed by your order form, invoice, or written agreement.
We may suspend or terminate access if you materially breach these Terms, create security or abuse risk, fail to pay amounts due, or if continued provision would expose us to legal or operational risk. After termination, your right to access the service ends and data retention is handled as described in the Privacy Policy and any written agreement between us.
We may update these Terms from time to time. We will update the date at the top of this page and, for material changes affecting active customers, provide reasonable notice by email, in-app notice, or another appropriate channel. Continued use of the service after the effective date of revised Terms means you accept the revised Terms.
These Terms are governed by the laws of New Zealand, unless a separate written agreement says otherwise or mandatory consumer law in your country of residence requires a different result. Disputes will be subject to the courts of New Zealand, subject to any mandatory rights you may have under applicable law.
If you have questions about these Terms, please contact us:
OnlyDMARC
Email: legal@onlydmarc.com
Postal address: Available on request where required for legal or contracting purposes.