Terms of Service

1. Description of Service

Seatbelt Security is an email compliance platform that helps organizations manage email authentication protocols including SPF, DKIM, and DMARC. Our services include DNS record scanning, guided setup wizards, ongoing monitoring, and automated DNS management through delegation.

2. Account Registration

To use certain features, you must create an account. You agree to provide accurate, current, and complete information during registration and to update such information to keep it accurate. You are responsible for safeguarding your account credentials and for all activities that occur under your account.

You must be at least 18 years old or have the legal authority to bind your organization to these terms.

3. DNS Management and Delegation

When you use our DNS delegation features, you authorize Seatbelt Security to create, modify, and delete specific DNS records — SPF, DMARC, and, when you ask us to, DKIM records for your own email platform. Seatbelt Security never generates or holds a signing key and does not sign your mail; those DKIM records simply point to signing keys your email platform already manages. You retain full ownership of your domain and can revoke delegation at any time by removing the delegation records from your DNS.

Seatbelt Security will only modify email authentication-related DNS records. We will not modify MX records, A records, or any other DNS records unrelated to email authentication.

After you remove a domain or delete your account, Seatbelt Security keeps serving the delegated sender (SPF) and policy (DMARC) records for at least 30 days so your mail keeps flowing while you update your DNS. After that, those records switch to neutral placeholders that no longer authorize your senders or send reports to Seatbelt. You are responsible for replacing the SPF include and _dmarc record at your DNS provider before then, or your domain's SPF and DMARC will stop working.

4. Third-Party Integrations

Our platform may connect to third-party services including DNS providers (Google Cloud DNS, Cloudflare), and authentication providers (Google, Microsoft), using Domain Connect or OAuth. We detect which email platform your domain uses (for example Microsoft 365 or Google Workspace) from your public DNS records; we connect to Microsoft 365 only if you choose to, to set up email signing. When you authorize a connection, you grant Seatbelt Security the specific permissions requested during the authorization flow. You can revoke these permissions at any time through the respective third-party service.

5. Acceptable Use

You agree not to:

• Use the service to send spam or unauthorized bulk email
• Attempt to gain unauthorized access to other users' accounts or data
• Use the service to circumvent email security policies or bypass authentication checks
• Interfere with or disrupt the service or its infrastructure
• Reverse engineer, decompile, or disassemble any part of the service
• Use the service in violation of any applicable law or regulation

6. Data and Privacy

Your use of Seatbelt Security is also governed by our Privacy Policy. We collect and process DNS record data, scan results, and account information as described in the Privacy Policy. We do not read, store, or process the content of your emails.

7. Service Availability

We strive to maintain high availability of our services but do not guarantee uninterrupted access. We may perform maintenance, updates, or modifications that temporarily affect service availability. We will make reasonable efforts to notify you of planned downtime in advance.

8. Limitation of Liability

Seatbelt Security is provided “as is” without warranties of any kind. To the maximum extent permitted by law, Seatbelt Security shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, business interruption, or email delivery failures resulting from DNS configuration changes.

9. Termination

You may terminate your account at any time. Upon termination, Seatbelt Security keeps serving your delegated sender (SPF) and policy (DMARC) records for at least 30 days. After that, those records switch to neutral placeholders that no longer authorize your senders or send reports to Seatbelt. You are responsible for removing or replacing those records at your DNS provider before then, or your domain's SPF and DMARC will stop working. We reserve the right to suspend or terminate accounts that violate these terms.

10. Changes to Terms

We may update these Terms of Service from time to time. We will notify you of material changes by email or a notice in Seatbelt. Continued use of the service after changes take effect constitutes acceptance of the updated terms.

11. Contact

If you have questions about these Terms of Service, please contact us at support@seatbeltsecurity.com or through our contact form.