Terms of Service

Folderly DMARC receives DMARC aggregate reports, and SMTP TLS (TLS-RPT) reports, at reporting addresses we issue for your workspace. It normalizes them, stores them against the domains you have added, and presents the resulting evidence — compliance rates, sending sources, authentication failures, and recommended fixes — in a dashboard. Paid workspaces can also generate written insights from that aggregate data.

The service does not currently request or receive DMARC failure (forensic) reports. The record we ask you to publish asks providers for aggregate reports only.

The service reports on authentication. It does not send your mail, does not filter your mail, and does not act on your behalf with any mailbox provider.

Sign-in uses a single-use link sent to your email address, so control of that mailbox is control of the account. Keep it secure and tell us promptly if you believe it has been compromised.

A workspace owner or administrator decides who joins the workspace and what role they hold. You are responsible for the people you admit, including the report evidence they can read and export from that workspace.

Pricing is metered on one thing: the number of sending domains in your workspace. Bundles and current prices are published on our pricing section. The bundle you select at checkout sets your domain allowance.

Payments are processed by Stripe. Card details are entered on Stripe’s own checkout and are never received or stored by us. Subscriptions renew automatically for the billing period you selected until cancelled. Monthly plans renew monthly; annual plans renew annually at the published annual rate.

Prices are shown exclusive of tax. Our checkout does not currently calculate, add, or collect sales tax, VAT, or GST — the amount charged is the published price. You are responsible for any sales tax, VAT, GST, or similar tax that is due on your purchase, other than taxes on our income.

You can cancel at any time; cancellation takes effect at the end of the current paid period and the workspace stays available until then. Monthly fees are non-refundable. If you cancel an annual subscription, we will refund the unused whole months remaining in the term, calculated from the date of cancellation.

If you exceed your domain allowance, we will ask you to move to a larger bundle. If an invoice fails, we may suspend access after notifying you at your billing address. Price changes are notified at least 30 days before they apply to your renewal.

You agree not to:

• Add or monitor a domain you do not own or are not authorized by its owner to administer. You warrant that you hold that authority for every domain in your workspace.
• Attempt to access another customer workspace, another tenant data, or any part of the service you have not been granted access to.
• Probe, scan, load-test, or attempt to circumvent rate limits, authentication, or the report ingestion path.
• Resell, sublicense, or expose the service or its report output as your own product without a written agreement with us.
• Use the service to send email, to relay mail, or as an endpoint in any bulk-sending infrastructure.
• Use the service in breach of applicable law, or to process data you have no right to process.

We may suspend a workspace immediately where continued use threatens the security or integrity of the service or another customer. We will tell you why.

Folderly DMARC never creates, edits, or deletes DNS records for any domain. We give you the exact DMARC and SMTP TLS reporting records to publish, we diagnose what your report evidence says about your SPF and DKIM results, and we tell you what a policy change would mean. Publishing anything, and choosing when to move a domain to a stricter policy, is entirely your decision and your action.

Because of that, you remain responsible for the correctness of your DNS and for the mail-flow consequences of any change you make. Moving a domain to a quarantine or reject policy can cause legitimate mail to be blocked if a sending source is still unauthenticated. Review the evidence before you act.

DMARC reports are generated and sent by mailbox providers, not by us. Whether a provider sends reports at all, how often, in what format, how complete they are, and whether they arrive is entirely outside our control.

We do not warrant that reports will be delivered, that any provider will keep sending them, or that the evidence you see is a complete picture of mail claiming to come from your domains. A gap caused by a provider not reporting is not a failure of this service.

Insights generated from your data are informational and can be wrong. Verify against the underlying report evidence before making a policy change.

We publish our own operational indicators on the status page. We do not currently offer a contractual uptime SLA or service credits. If you need one, raise it with us before you sign.

Except where the law does not allow it, the service is provided as is and as available, without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

Neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or data, however caused. Our total aggregate liability arising out of or relating to this agreement is limited to the total fees you paid in the twelve (12) months preceding the event giving rise to the claim. Nothing in this agreement excludes liability that cannot lawfully be excluded, including for fraud or for death or personal injury caused by negligence.

Your report data, domain configuration, and account records remain yours. We process them to provide the service and as described in the Privacy Policy, which also lists our sub-processors and our retention and deletion practice.

You are responsible for having a lawful basis to send us the data your reports contain, and for telling your own users about it where you are required to.

You may stop using the service and close your workspace at any time. We may terminate for material breach that is not cured within 30 days of notice, or for non-payment.

On termination your access ends and your data is deleted in line with the Privacy Policy. Export anything you need before you close the workspace.

We may change these terms. Material changes are notified to account holders at least 30 days before they take effect, and the date at the top of this page is updated. Continuing to use the service after that means you accept the change.

These Terms shall be governed and construed in accordance with the laws of Delaware, United States, without regard to its conflict of law provisions.

If any provision is found unenforceable, the rest stays in force. Neither party may assign this agreement without the other consent, except as part of a merger or sale of substantially all assets.

Questions about these terms go to support@folderly.com.