Terms and Conditions
Effective date: 1 May 2026 · Last updated: 20 September 2026
These Terms and Conditions (“Terms”) govern your access to and use of the SpoofShield email security platform operated by SpoofShield LLC (“SpoofShield”, “we”, “us”). By creating an account or using the Service you agree to be bound by these Terms.
1. Definitions
Service” means the SpoofShield web application, API, Microsoft Outlook add-in, and any related software or documentation provided by SpoofShield.
Organisation” means the legal entity that registers for the Service. The individual completing registration warrants they have authority to bind that entity.
Administrator” means a user designated with admin-level access within an Organisation account.
User” means any individual authorised by an Administrator to access the Service under the Organisation’s licence.
Alert Metadata” means the limited set of data logged by the Service: sender email address, recipient address(es), threat type, risk level, and timestamp. This expressly excludes email body content.
2. Acceptance of Terms
By clicking “I agree”, completing registration, or using any part of the Service, you confirm that you have read, understood, and agree to these Terms and our Privacy Policy. If you do not agree, you must not use the Service.
We may update these Terms from time to time. We will notify you of material changes by email or in-app notice at least 14 days before the change takes effect. Continued use after that date constitutes acceptance of the revised Terms.
3. Service Description
SpoofShield is a Microsoft Outlook add-in that analyses email metadata and participant data locally on the user’s device to detect email spoofing threats including, but not limited to: typosquat domain attacks, VIP impersonation, reply-chain hijacking, first-time sender anomalies, and AI-detected behavioural manipulation.
Important limitation: All detection runs client-side inside Outlook. Email body content is never transmitted to SpoofShield’s servers. Only Alert Metadata is sent to our systems for dashboard display and audit purposes. SpoofShield is a detection and alerting tool and does not block, quarantine, or modify emails.
SpoofShield does not replace gateway-level spam filters, antivirus software, or other security controls. It is intended to be used as a complementary layer of protection.
4. Account Registration and Responsibilities
You must provide accurate, complete, and current information during registration. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account.
Administrators are responsible for managing User access, configuring the Organisation’s detection settings, and ensuring that Users are made aware of these Terms before accessing the Service.
You must notify us immediately at support@spoofshield.net if you suspect unauthorised access to your account.
5. Licence and Acceptable Use
Subject to these Terms and payment of applicable fees, SpoofShield grants your Organisation a limited, non-exclusive, non-transferable licence to access and use the Service for your internal business security purposes.
You must not:
6. Data Handling and Privacy
SpoofShield processes only Alert Metadata as defined in Section 1. Email body content, attachments, and full email headers are never transmitted to or stored on SpoofShield’s servers.
Alert Metadata is stored in our EU-based PostgreSQL database and retained for the duration of your subscription plus 90 days following termination, after which it is securely deleted.
SpoofShield acts as a data processor with respect to Alert Metadata. Your Organisation acts as the data controller. By using the Service you agree to our Data Processing Agreement, available at legal@spoofshield.net on request.
We do not sell, rent, or share your data with third parties for marketing purposes. We may share data with sub-processors (authentication, database hosting) solely for the purpose of providing the Service.
7. Payment, Billing and Trials
All paid plans are billed monthly or annually in advance via Paddle, our authorised payment processor. Prices are shown exclusive of applicable taxes. You authorise us to charge your payment method on each renewal date.
Seat counts may be increased at any time and are effective immediately, with prorated charges applied to the current billing period. Downgrades take effect at the next renewal date.
All payments are non-refundable except where required by applicable consumer law or as expressly stated in these Terms. If you believe a charge is in error, contact billing@spoofshield.net within 30 days.
8. Intellectual Property
All rights, title, and interest in the Service — including all software, design, brand assets, detection algorithms, and documentation — remain the exclusive property of SpoofShield LLC. Nothing in these Terms transfers any intellectual property rights to you.
You retain all rights to your Organisation’s configuration data (VIP lists, trusted domain lists, alert history). You grant SpoofShield a limited licence to process this data solely to provide the Service.
Any feedback you provide about the Service may be used by SpoofShield without restriction or compensation.
9. Disclaimer of Warranties
THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”. SPOOFSHIELD MAKES NO WARRANTY, EXPRESS OR IMPLIED, INCLUDING ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.
SPOOFSHIELD DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE, OR THAT ALL THREATS WILL BE DETECTED. EMAIL THREAT ACTORS CONTINUOUSLY EVOLVE THEIR TECHNIQUES; NO DETECTION SYSTEM CAN GUARANTEE 100% DETECTION.
The Service is a supplementary tool. You remain responsible for your own security posture, user training, and incident response procedures.
10. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SPOOFSHIELD’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE — WHETHER IN CONTRACT, TORT, OR OTHERWISE — SHALL NOT EXCEED THE FEES PAID BY YOUR ORGANISATION IN THE 12 MONTHS PRECEDING THE CLAIM.
IN NO EVENT SHALL SPOOFSHIELD BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR BUSINESS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Some jurisdictions do not permit exclusion or limitation of certain categories of damages. In such cases, our liability shall be limited to the fullest extent permitted by applicable law.
11. Termination
Either party may terminate the Service agreement at any time. You may cancel your subscription via your billing portal; cancellation takes effect at the end of the current paid period.
SpoofShield may suspend or terminate your access immediately if: (a) you breach these Terms and fail to remedy the breach within 7 days of notice; (b) your payment is overdue by more than 14 days; or (c) continued operation poses a security or legal risk.
Upon termination, your right to use the Service ceases immediately. Alert Metadata will be retained for 90 days and then securely deleted. You may request an export of your Alert Metadata before deletion by contacting support@spoofshield.net.
12. Governing Law and Disputes
These Terms are governed by the laws of the State of Florida and applicable federal laws of the United States, without regard to conflict-of-law principles. Any dispute arising from or related to these Terms shall first be submitted to good-faith mediation. If mediation fails, the dispute shall be subject to the exclusive jurisdiction of the state and federal courts located in Florida, United States.
If you are a consumer located in another jurisdiction, you may have additional rights under local law that these Terms do not override.
13. General
These Terms constitute the entire agreement between you and SpoofShield with respect to the Service and supersede all prior agreements. If any provision is found unenforceable, the remaining provisions remain in full force.
SpoofShield’s failure to enforce any right does not constitute a waiver of that right. Notices must be sent to legal@spoofshield.net or to your registered email address.
Questions about these Terms? Contact us at legal@spoofshield.net.