Terms of service

1. Who provides the service

The service is provided by [COMPANY NAME], tax ID [TAX ID], registered office at [ADDRESS] ("Navimask"). You can contact us at info@navimask.com.

2. What DomainGuard does

DomainGuard looks up a domain's public DNS records (for example SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC or CAA) and checks whether its authoritative DNS servers allow zone transfers. From these results it calculates an indicative score and, depending on your plan, produces reports, recommendations and the exact records to publish.

Depending on the plan, it can also monitor managed domains daily and email you when they get worse, analyse the DMARC aggregate reports the domain receives, send your confirmed mailbox a single test message to check impersonation protection and, if you connect your DNS provider, apply the changes you approve.

The audit does not change any domain's DNS configuration or access any mailbox. DomainGuard only changes DNS records through a provider you have connected, after you expressly approve each change. Recommendations are suggestions: applying them is the decision and responsibility of whoever manages the domain.

3. Plans, prices and purchase

You can audit any domain on every plan. Each plan includes a number of managed domains, which are the ones that get its features: Free and Basic, 1; Advanced, 5, extendable with packs of 5; Professional, 20, 50 or 100 depending on the tier. Each plan's features and prices, excluding VAT, are published on the DomainGuard website.

Paid plans are bought in Navimask's online shop ([SHOP URL]) through its payment gateway. Payment, renewal, cancellation and refunds are governed by the shop's terms of sale ([TERMS OF SALE URL]). Navimask activates the plan for your organization once the purchase is confirmed.

If a plan is downgraded or expires, all your domains and their data are kept: only the oldest managed domains the new plan allows stay active, and you can choose which ones to keep.

4. Managed service providers (MSPs)

With the Professional plan, a managed service provider (MSP) can create client organizations and link existing ones. An organization is linked only if its owner accepts. From then on it uses the MSP's quota, and its people have read-only access while the MSP manages it.

The MSP's owner, administrators and authorized technicians can see and manage their clients' domains, reports, history, remediation, DMARC reports and members. The MSP can show its trade name and logo on its clients' reports and panel, and decide whether monitoring alerts also go to the client's people.

The MSP or the original owner can unlink the organization at any time. The organization becomes independent again with its data and its own plan, and both sides are notified by email. The MSP is responsible for having its clients' authorization to manage their domains with DomainGuard.

5. Connecting DNS providers

If you connect a DNS provider, we store its credentials encrypted and use them only to read your zone names and apply the changes you approve. Each change is shown before it is applied and can be undone. You can disconnect the provider at any time, and we then delete its credentials. We recommend credentials with the minimum permissions each provider's guide asks for.

6. Acceptable use

You may only audit or manage domains you own or are authorized to review. You may not use the service to attack, overload or harm third parties, or try to get around its usage limits or security measures.

To protect the service we apply usage limits, our own CAPTCHA based on a computation proof in your browser, and temporary blocks of IP addresses that abuse it. We may limit or suspend access if we detect abusive use or use contrary to these terms.

Audit queries come from IP addresses identified by the name scanner.domainguard.navimask.com. Whoever manages a domain can ask for it not to be audited by writing to requests@domainguard.navimask.com.

7. Your account

To save audits and use your plan's features you need an account with an email address you can confirm. You are responsible for keeping your password secret and for the activity carried out with your account. People in the same organization share its domains, reports and plan, with the permissions of their role (owner, administrator, technician, member or read-only).

8. Scope of the results

The score and reports reflect the domain's public configuration at the time of the audit. They are guidance and do not guarantee that the domain is protected against every attack. DNS answers may vary or be temporarily unavailable, and some controls may show as "not available". DMARC analyses depend on the reports email providers send.

9. Liability

The service is provided as is. To the extent permitted by law, Navimask is not liable for indirect damage arising from the use of the results or from decisions made on them. Navimask's total liability to a customer is limited to the amount the customer paid for the service in the three months before the event giving rise to it, except in cases of wilful misconduct or gross negligence, or where the law does not allow it to be limited.

10. Intellectual property

DomainGuard, its software, texts and brand belong to Navimask. You may use and share your domains' reports within your organization and with whoever helps you manage them. The name and logo an MSP uploads for its white label remain its own, and it guarantees it has the right to use them.

11. Changes and closing your account

We may update these terms; we will let you know about relevant changes by email or in the service. You can delete your account at any time from "My profile" or by writing to info@navimask.com. Cancelling a paid plan is handled under the shop's terms of sale.

12. Governing law

These terms are governed by Spanish law. Any dispute is submitted to the courts of Ontinyent (Valencia, Spain), unless consumer law provides for another jurisdiction.