What these screens are for
Every one of them is a draft
None of the four has been through legal review, none governs any customer relationship, and each says so at the top of its own page. They are published so the shape and the commitments can be checked before launch. Do not rely on them.
- Terms of Service
- The agreement between you and the service - what is promised, what is not, and the limits.
- Privacy Policy
- What personal data is collected about you, why, and for how long.
- Acceptable Use
- What you may and may not do with the service, including the free check - the public surface most open to misuse.
- Data Processing Addendum
- Processor terms for report data. Currently a stub.
Why a DPA is not an upsell here
DMARC aggregate reports name the IP address of every server that sent mail claiming to be your domain. Under the GDPR an IP address is personal data. That makes you the controller of it and us your processor, and the relationship has to be governed in writing.
Some vendors in this category sell a DPA as an enterprise add-on. Here it applies on every plan, including the free one, whenever report data is processed for you.
What these screens do not do
They are not legal advice and they are not final. Ask about anything in them before you rely on it.