Legal
Terms and Conditions
The terms for using Mailsecurity24 – for businesses and consumers.
This is a translation for your convenience. Only the German version is legally binding: Allgemeine Geschäftsbedingungen.
These terms apply to businesses and consumers; where the rules differ, this is stated in the relevant section or in § 15.
§ 1 Scope and provider
- These terms apply to all contracts for the use of the Mailsecurity24 service (app.mailsecurity24.com) between Highlight PC, owner Günter Geisler, Emil-Pahl-Weg 4a, 85659 Forstern, Germany (“Provider”), and the customer.
- Customers may be businesses (§ 14 German Civil Code, BGB) or consumers (§ 13 BGB). The customer states this in the billing details.
- Deviating terms of the customer do not apply, even if the Provider does not expressly object to them.
§ 2 Services
- Mailsecurity24 receives and analyses DMARC aggregate reports (“reports”) for the customer’s domains. This includes analyses by sender, checks of DNS records (DMARC, SPF, DKIM, BIMI), blocklist checks, alerts and DNS tools. Depending on the plan, a programming interface (API) and features for agencies are included.
- The BIMI logo studio converts logos into the BIMI format; scope per plan as stated on the pricing page.
- Scope and limits (domains, checked messages per month, users, retention period) follow from the booked plan as described in the portal and on the pricing page.
- Reports are created and sent by third-party email receivers. The Provider has no influence on whether, when and how completely these reports arrive. Analyses therefore only reflect what has been reported.
- Mailsecurity24 does not send emails on behalf of the customer and does not change DNS records. The customer makes changes to DNS with their DNS provider. Suggestions made by the portal, for example for a DMARC record, are recommendations; the customer decides on the policy (none, quarantine, reject).
§ 3 Registration and trial
- Use requires an account with a confirmed email address. The details provided must be correct.
- New accounts receive a free 14-day trial with the limits stated in the portal. The trial ends automatically; it does not turn into a paid contract without a booking.
- After a trial without booking, access may be restricted. Data is deleted 30 days after the end of the trial unless a booking is made.
§ 4 Conclusion of contract
- The customer selects a plan and a billing period in the portal, enters their billing details and clicks “Book monthly with obligation to pay” or “Book yearly with obligation to pay”. This constitutes a binding offer.
- The contract is concluded when the payment has been successfully authorised via the payment service provider Stripe and the Provider confirms the booking.
- If the customer books during the trial, the plan starts immediately; the first payment is due at the end of the original trial. Download and hosting of BIMI logos are only possible from the first payment; the customer can end the trial early.
- The contract text is not stored separately. The customer can view plan, price and invoices in the portal under “Plan and billing” at any time; these terms are available on the website.
§ 5 Prices and payment
- The prices shown at the time of booking apply. For businesses they are net prices plus statutory VAT, for consumers final prices including VAT.
- Businesses established in another EU member state with a valid VAT ID confirmed by the EU register (VIES) receive invoices without German VAT (reverse charge). The customer confirms that they obtain the service for their business.
- Fees are payable in advance for each billing period and are collected via Stripe. The Provider issues invoices electronically.
- If a payment fails, the Provider informs the customer. If payment is still not made after a reminder with a deadline, the Provider may suspend access until the amount is settled.
§ 6 Term, renewal and termination
- The term corresponds to the chosen billing period (one month or one year). It renews automatically for the same period unless the customer terminates before its end.
- Consumers: After the first year, a yearly contract continues for an indefinite period and can then be terminated at any time with one month’s notice.
- The customer can terminate at any time with effect from the end of the current period, via the button “Cancel contracts here” in the portal or in text form to office@mailsecurity24.com.
- The right to terminate for good cause remains unaffected. Good cause for the Provider is in particular a serious breach of § 9.
§ 7 Change of plan
- The customer can change the plan in the portal. Before the change, the portal shows the amount due.
- A change to a higher plan takes effect immediately. The difference for the remaining term is charged pro rata and collected immediately.
- A change to a smaller plan also takes effect immediately. A credit arises for the remaining term and is offset against subsequent invoices; it is not paid out. The change is only possible if the domains and users in use fit into the smaller plan.
- As long as client organisations exist, only the Agency plan is possible.
§ 8 Quotas
If the customer exceeds the number of checked messages included in their plan, the Provider informs them. In case of repeated or significant excess, the Provider may, after notice, suspend the processing of further reports until the end of the month or recommend a suitable plan. There is no automatic paid upgrade.
§ 9 Customer obligations
- The customer only monitors domains that belong to them or for which they are authorised.
- The customer keeps login credentials and API keys secret and informs the Provider without delay if misuse is suspected. Two-factor sign-in is recommended.
- The customer does not misuse the service or the DNS tools, in particular not to probe third-party systems, to circumvent rate limits or to overload the service.
- The customer is responsible for the lawful processing of the data they have sent to Mailsecurity24 via their domains.
§ 10 Availability
The Provider aims for an annual average availability of the portal of 98 %, excluding announced maintenance and disruptions beyond its control. Reports received during a disruption are processed subsequently where possible. Commitments with service credits (SLA) only exist if separately agreed.
§ 11 Liability
- The Provider is liable without limitation for intent and gross negligence, for injury to life, body or health, under the German Product Liability Act and to the extent of any guarantees given.
- In case of slight negligence, the Provider is only liable for breach of essential contractual obligations, the fulfilment of which makes the performance of the contract possible in the first place, and only for the foreseeable damage typical for the contract.
- The Provider is not liable for consequences of DNS changes made by the customer, in particular not for undelivered emails after tightening the DMARC policy, unless the Provider is at fault under paragraph 1 or 2.
§ 12 Data protection and processing on behalf
The Provider processes personal data in accordance with the privacy policy. Insofar as it processes personal data on behalf of businesses, the data processing agreement applies, which forms part of this contract.
§ 13 End of contract and data
After the end of the contract, the account remains accessible for 30 days so that the customer can save data via the export functions or the API. The Provider then deletes the customer’s data unless a statutory retention obligation applies (for example for invoices).
§ 14 Changes
- Businesses: The Provider may amend these terms and the prices with effect for the future. It announces changes at least six weeks in advance in text form. The customer may terminate with effect from the date of the change until the change takes effect; the Provider points this out in the notice.
- Consumers: Changes to prices or essential services only apply with the customer’s express consent. If the customer does not consent, the contract continues on the previous terms until the next possible termination.
§ 15 Special provisions for businesses
- For businesses, liability under § 11 paragraph 2 is limited per contract year to the fees of the last twelve months.
- For businesses, warranty claims become time-barred after one year, except in the cases of § 11 paragraph 1.
- Place of jurisdiction for all disputes with merchants, legal entities under public law and special funds under public law is Forstern, Germany.
- The rules for consumers on the right of withdrawal and on renewal (§ 6 paragraph 2) do not apply to businesses.
§ 16 Final provisions
- The law of the Federal Republic of Germany applies. For consumers, this choice of law only applies insofar as they are not deprived of the protection of mandatory provisions of the country of their habitual residence.
- The Provider is neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.
- Should individual provisions be invalid, the remainder of the contract remains valid.
Last updated: 26 September 2026
