← DomainSentinel

DomainSentinel — Terms of Service

Version: 1.2 Effective date: 2026-04-26 Last updated: 2026-10-22

1. Introduction

These Terms of Service ("Terms") are a legally binding agreement between you ("you", "your", or "Customer") and Steelcap Labs (ABN 69 540 550 460), operating the service known as "DomainSentinel" ("we", "us", "our", or "DomainSentinel") accessible at domainsentinel.app and associated subdomains (the "Service").

By creating an account, accessing the Service, or clicking "I accept" on any signup or upgrade flow, you agree to be bound by these Terms. If you do not agree, do not use the Service.

If you are using the Service on behalf of an organisation, you warrant that you have authority to bind that organisation, and references to "you" include that organisation.

2. Definitions

• "Account" — your registered user profile on the Service.
• "Scan Data" — DNS records, email authentication records (SPF, DKIM, DMARC, MX), DMARC aggregate reports, and related configuration data retrieved from domains you submit for analysis.
• "Service" — the DomainSentinel platform, including the web application, APIs, scanning engine, dashboards, reports, alerts, and any related functionality.
• "Subscription" — a paid plan or the free tier.
• "Authorised Domain" — a domain that you own, administer, or have the owner's permission to act for. You need an Authorised Domain to connect an account, upload DMARC reports or ask us to change DNS (see clause 6.1). You do not need one to scan or monitor a domain's public DNS.

3. The Service

3.1 What DomainSentinel does

DomainSentinel is an automated DNS and email authentication scanning service. It analyses domain configuration, identifies misconfigurations in SPF, DKIM, DMARC and related records, provides remediation guidance, and (on paid tiers) offers continuous monitoring, alerts, and digest reporting.

3.2 What DomainSentinel is NOT

The Service is a diagnostic and advisory tool. It is not:

• A legal or regulatory compliance certification.
• A guarantee that your email will be delivered or will not be spoofed.
• A substitute for professional security advice.
• A managed DNS provider.

You remain solely responsible for your domain configuration, email deliverability, and security posture.

3.3 Service availability

We aim for high availability but do not guarantee 100% uptime. The Service may be unavailable during scheduled maintenance, infrastructure incidents, or events outside our reasonable control. We will make commercially reasonable efforts to minimise downtime and to tell affected users by email.

3.4 Beta

During the beta, the full Service is free. Features may be added, changed or removed, and we make no uptime or availability commitment. We will email you at least 30 days before the beta ends, and at least 30 days before any charge could apply to your account. We will never charge you unless you choose a paid plan.

4. Your account

4.1 Registration

To use the Service, you must create an Account with accurate information. You must be at least 18 years old (or the age of majority in your jurisdiction, if higher) to register.

4.2 Account security

You are responsible for:

• Keeping your credentials confidential.
• All activity that occurs under your Account.
• Notifying us immediately of any unauthorised access.

To the extent the law allows, we are not liable for loss or damage resulting from your failure to secure your Account.

4.3 One person, one account

Each Account is for a single individual or organisation. Sharing login credentials across multiple individuals is prohibited outside of plans that expressly permit multi-seat access.

5. Plans, pricing, and billing

5.1 Plans

During the beta (section 3.4) no plan is charged.

The Service is offered on the following plans, with features and limits described at domainsentinel.app/#pricing:

• Free — no charge, limited to 1 domain and basic features.
• Pro — US$49/month, up to 50 domains, continuous monitoring, full remediation guidance, digest alerts, Slack webhook integration, and other features listed in the pricing section.

Additional plans (including enterprise and agency-tier plans with higher domain limits and team features) are available by contacting [email protected].

Prices are in United States dollars. We are not registered for GST, so no GST is charged. If you pay in another currency, the conversion is made by your bank or card issuer, not by us.

5.2 Billing and payment

Paid Subscriptions are billed in advance through our payment processor, Stripe. By providing payment information, you authorise us to charge your nominated payment method for all fees due.

5.3 Automatic renewal

Paid Subscriptions automatically renew each month unless cancelled before renewal. You can cancel at any time in your Account settings; cancellation takes effect at the end of the current billing period.

5.4 Price changes

We may change our prices from time to time. For existing Subscriptions, we will give at least 30 days' written notice before a price change takes effect on your next renewal. You may cancel before the new price applies.

5.5 Failed payments

If a payment fails, we will retry the payment and send reminders. If payment is not resolved within 14 days of the first failed attempt, we may suspend or downgrade your Account to the Free tier until payment is restored.

5.6 Refunds

Refunds are governed by our separate Refund Policy, available at domainsentinel.app/refund. In summary: new subscribers may request a full refund within 14 days of their first paid subscription, no questions asked. After 14 days, refunds are not generally provided, though we will consider them on a case-by-case basis where required by law.

Nothing in this clause limits your rights under the Australian Consumer Law (see clause 12).

6. Acceptable use

6.1 What you may check

You may use the Service to scan and monitor the public DNS records of any domain. That information is published for everyone to read.

You may only do the following for an Authorised Domain:

• Connect an account for it (for example Cloudflare or Google).
• Upload DMARC reports for it.
• Ask us to change its DNS.

By doing any of these, you warrant that you own the domain, administer it, or have the owner's permission.

Do not use the Service to probe, load-test or attack any system. Do not send scans at a domain in a way that could overload it. Clause 6.2 lists the other things you must not do.

6.2 Prohibited conduct

You must not:

• Use the Service for any unlawful purpose, or in violation of any applicable laws.
• Attempt to gain unauthorised access to the Service, other Accounts, or our infrastructure.
• Reverse engineer, decompile, or disassemble the Service (except to the extent permitted by non-excludable law).
• Scrape, crawl, or automate access to the Service beyond documented API limits.
• Resell, sublicense, or white-label the Service outside the scope of an authorised plan.
• Use the Service to harass, threaten, defame, or harm any person or entity.
• Upload malware, viruses, or malicious code.
• Submit false or misleading scan requests, or attempt to manipulate our detection systems.
• Use the Service in any way that could damage, disable, overburden, or impair the Service or interfere with other users.

6.2A Email you send

DomainSentinel helps you keep your sending domains correctly configured. It does not make unlawful email lawful. We do not authorise any email you send.

You are responsible for every email you send. You must comply with every anti-spam law that applies to it. That includes Australia's Spam Act 2003 (consent, sender identification and a working unsubscribe), the US CAN-SPAM Act, Canada's CASL, and the GDPR and UK PECR where they apply. You must have the consent the law requires before you email someone.

You must not use the Service to:

• Send, or help anyone send, email to people who have not consented where consent is required.
• Send from domains or identities you are not entitled to use.
• Hide who is sending.
• Get around a mailbox provider's filtering of unwanted mail.

If we reasonably believe you are using the Service in breach of this clause, we may suspend monitoring for the affected domains. For serious or repeated breaches, we may close your account (see clause 6.4).

6.3 Rate limits and fair use

We impose reasonable rate limits on scans, API calls, and similar resource-consuming actions to ensure fair use across all users. Details are published in our documentation. Systematic attempts to circumvent rate limits are prohibited.

6.4 Consequences of violation

If you breach this clause 6, we may (in our reasonable discretion):

• Warn you and require remediation.
• Suspend your Account temporarily.
• Terminate your Account permanently, with or without refund at our discretion.
• Report the conduct to law enforcement where legally required or reasonably appropriate.

If we end your access to the DomainSentinel beta and your Account stays open, whatever the reason, you can still request the 14-day full refund in the Refund Policy if you are eligible for it.

7. Your data and content

7.1 Ownership

You retain all rights, title, and interest in:

• Your Scan Data (DNS records, DMARC reports, and other data derived from your domains).
• Any content you submit (notes, labels, custom configurations).

7.2 Licence to us

You grant us a worldwide, non-exclusive, royalty-free licence to host, process, analyse, display, and transmit your data solely for the purpose of providing the Service to you and complying with our legal obligations.

7.3 Aggregated and anonymised data

We may use aggregated, anonymised, and de-identified data — data that cannot reasonably be used to identify you or your customers — to improve the Service, publish research, and produce marketing materials. We will never publish or share data that identifies a specific customer, domain, or configuration without consent.

7.4 Privacy

Our handling of personal data is governed by our Privacy Policy at domainsentinel.app/privacy, which forms part of these Terms.

7.5 Data Processing Agreement (enterprise customers)

If you use the Service to process personal data on behalf of your own customers (i.e., you act as a data controller and we act as a processor), a Data Processing Agreement is available at domainsentinel.app/dpa. Contact [email protected] to execute a DPA for enterprise or agency use.

8. Intellectual property

8.1 Our IP

The Service — including all software, designs, text, graphics, logos, trademarks ("DomainSentinel", "Steelcap Labs"), and documentation — is owned by Steelcap Labs or our licensors and is protected by intellectual property laws.

We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service during your Subscription, solely in accordance with these Terms.

8.2 Feedback

If you provide feedback, suggestions, or ideas about the Service ("Feedback"), you grant us a perpetual, worldwide, royalty-free, irrevocable licence to use that Feedback for any purpose without compensation or attribution.

9. Suspension and termination

9.1 Termination by you

You may terminate your Account at any time from your Account settings. Termination is effective at the end of your current billing period (for paid plans) or immediately (for Free tier).

If you delete your Account, the deletion happens straight away and can't be undone (see clause 9.3). Deleting your Account does not cancel a paid plan by itself, so cancel the plan first (see clause 5.3).

9.2 Termination by us

We may suspend or terminate your Account if:

• You materially breach these Terms and fail to cure within 7 days of written notice (where curable).
• You fail to pay fees when due (subject to clause 5.5).
• Required by law or court order.
• Continued provision poses a legal, security, or reputational risk to us.

For non-curable breaches (e.g., fraud, abuse, serious misuse), we may terminate immediately without notice.

9.3 Effect of termination

On termination:

• Your access to the Service ends.
• If you delete your Account, we delete your data straight away, as set out in section 7.1 of our Privacy Policy. There is no 30-day wait and no reactivation. We keep only what that section says we keep, such as billing records that Australian tax law requires us to hold for at least 5 years.
• If we close your Account, we delete your data the same way, unless the law requires us to keep it.
• Any accrued obligations (unpaid fees, liabilities) survive termination.

9.4 Getting a copy of your data

There is no export window after termination. If you want a copy of your data, ask for it before you delete your Account. Email [email protected] (see sections 7.2 and 8.5 of our Privacy Policy). We will send it in a machine-readable format (CSV or JSON). Once your Account is deleted, your data can't be recovered.

10. Warranties and disclaimers

10.1 Our warranty

We warrant that we will provide the Service with reasonable care and skill consistent with industry practice for a service of this nature.

10.2 Your warranties

You warrant that:

• All information you provide is accurate and current.
• You have the authority clause 6.1 requires for any domain you connect an account for, upload DMARC reports for, or ask us to change.
• Your use of the Service complies with all applicable laws.

10.3 Disclaimer

Except as expressly stated in these Terms and except for rights that cannot be excluded under the Australian Consumer Law or other applicable law, the Service is provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, or uninterrupted operation.

We do not warrant that:

• The Service will be error-free or uninterrupted.
• Defects will be corrected.
• The Service will meet your specific requirements.
• Scan results will be complete, accurate, or timely in every case (DNS propagation, provider rate limits, and other factors outside our control can affect results).

11. Limitation of liability

11.1 Exclusions

Subject to clauses 11.3 and 12, and to the maximum extent permitted by law, we are not liable for:

• Indirect, incidental, consequential, special, exemplary, or punitive damages.
• Loss of profits, revenue, business, goodwill, or anticipated savings.
• Loss or corruption of data (other than where caused by our gross negligence or wilful misconduct).
• Damage resulting from unauthorised access to your Account caused by your failure to secure credentials.

11.2 Cap on liability

Subject to clauses 11.3 and 12, and to the maximum extent permitted by law, our total aggregate liability under or in connection with these Terms or the Service, however arising (including in contract, tort, equity, or under statute), is limited to the greater of:

• US$100 (one hundred United States dollars), OR
• The total fees you paid to us in the 12 months preceding the event giving rise to the claim.

11.3 Nothing excludes certain liabilities

Nothing in these Terms excludes or limits:

• Liability for death or personal injury caused by our negligence.
• Liability for fraud or fraudulent misrepresentation.
• Any liability that cannot be excluded or limited under the Australian Consumer Law (including the guarantees described in clause 12) or other non-excludable law.

12. Australian Consumer Law

Our services come with guarantees that cannot be excluded under the Australian Consumer Law, including that they will be provided with due care and skill, be reasonably fit for any purpose you tell us about, and be supplied within a reasonable time. A business that buys services for less than $100,000 is also a "consumer" for this purpose. Nothing in these Terms excludes, restricts or modifies those guarantees or any other right you have under the Australian Consumer Law. Where the Service is not of a kind ordinarily acquired for personal, domestic or household use, and to the extent the law allows us to (including only where it is fair and reasonable to do so), our liability for failing to meet a guarantee is limited to supplying the Service again or paying the cost of having it supplied again.

The Australian Consumer Law is contained in Schedule 2 of the Competition and Consumer Act 2010 (Cth). We treat these guarantees as applying to the free beta and the Free plan as well as to paid plans.

13. Dispute resolution

13.1 Good-faith negotiation (Stage 1)

If a dispute arises under or in connection with these Terms or the Service, the parties will first attempt to resolve it by good-faith negotiation. Either party may initiate negotiation by sending written notice to the other describing the dispute. The parties will have 30 days from the date of notice to resolve the dispute.

13.2 Mediation (Stage 2)

If the dispute is not resolved in Stage 1, the parties will attempt to resolve it through mediation conducted by a qualified mediator in Queensland, Australia, selected by mutual agreement (or, failing agreement, appointed by the Resolution Institute or equivalent body). Mediation costs will be shared equally unless the mediator orders otherwise.

13.3 Courts (Stage 3)

If the dispute is not resolved in Stages 1 or 2, either party may commence proceedings in the courts of Queensland, Australia, which have exclusive jurisdiction. The parties submit to the jurisdiction of those courts.

13.4 Urgent relief

Nothing in this clause 13 prevents a party from seeking urgent injunctive or equitable relief from a competent court.

14. Governing law

These Terms are governed by the laws of Queensland, Australia, and the Commonwealth of Australia. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

15. General

15.1 Entire agreement

These Terms, together with the Privacy Policy, Refund Policy, Cookie Notice, and (where applicable) the Data Processing Agreement, constitute the entire agreement between you and us regarding the Service and supersede any prior agreements.

15.2 Changes to the Terms

We may update these Terms from time to time. For material changes, we will give at least 30 days' written notice by email to your registered address and/or prominent notice in the Service. Continued use of the Service after the effective date of the updated Terms constitutes acceptance.

15.3 Severability

If any provision of these Terms is held invalid or unenforceable, the remaining provisions will remain in full force.

15.4 No waiver

A failure to enforce a right or provision is not a waiver of that right.

15.5 Assignment

You may not assign your rights or obligations under these Terms without our prior written consent. We may assign these Terms to any successor entity (e.g., on sale of the business) with notice to you.

15.6 Force majeure

To the extent the law allows, neither party is liable for failure or delay in performance caused by events beyond its reasonable control, including natural disasters, war, terrorism, pandemics, internet or infrastructure outages, or governmental actions.

15.7 Notices

Notices to us must be sent to [email protected]. Notices to you may be sent to the email address registered on your Account.

15.8 Relationship of the parties

Nothing in these Terms creates a partnership, joint venture, employment, or agency relationship between the parties.

16. Contact

Questions about these Terms: [email protected]. Full company details are set out in clause 1 above.

Steelcap Labs — Terms of Service v1.2 — 2026-04-26