This English version is a translation for your convenience. Only the German version is legally binding.

General Terms and Conditions

For the use of Mailsecurity24 – exclusively for businesses.

Last updated: 7 October 2026 · Highlight PC · Mailsecurity24

§ 1 Scope, provider, businesses only

1. These terms apply to all contracts for the use of the Mailsecurity24 service (app.mailsecurity24.com) between Highlight PC, owner Günter Geisler, Emil-Pahl-Weg 4a, 85659 Forstern, Germany (“Provider”), and the customer.
2. The offer is directed exclusively at businesses (Unternehmer) within the meaning of Section 14 of the German Civil Code (BGB), legal entities under public law and special funds under public law. A business is anyone who concludes the contract in the exercise of their commercial or independent professional activity; this includes freelancers and registered associations. The Provider does not conclude contracts with consumers within the meaning of Section 13 BGB.
3. When registering and with every booking, the customer confirms that they are acting as a business. The Provider may request information on the business status (such as company name, address or VAT ID) and may refuse registrations or bookings if there are doubts about the business status.
4. Deviating, conflicting or supplementary terms of the customer do not apply, even if the Provider does not expressly object to them.

§ 2 Services

1. Mailsecurity24 receives and analyses DMARC aggregate reports (“reports”) for the customer’s domains. This includes analyses by sender, checks of DNS records (DMARC, SPF, DKIM, BIMI, MTA-STS), blocklist checks, alerts, a support ticket system and DNS tools. Depending on the plan, an application programming interface (API), protection reports and features for agencies are added.
2. The BIMI logo studio converts logos into the format required for BIMI and provides the files for download or as a hosted file; the scope per plan is shown on the pricing page. The customer alone is responsible for the rights to the uploaded logos and trademarks. Whether an email provider displays a BIMI logo is decided by that provider; some providers additionally require a paid certificate (VMC/CMC), which is not part of the service.
3. Scope and limits (domains, checked messages per month, users, retention period) follow from the booked plan as described in the portal and on the pricing page.
4. Reports are created and sent by third-party email recipients. The Provider has no influence on whether, when and how completely these reports arrive. Analyses therefore only reflect what has been reported.
5. Mailsecurity24 does not send emails on behalf of the customer and does not change DNS records. The customer makes changes to the DNS with their DNS provider themselves. Suggestions in the portal, for example for a DMARC record, are recommendations; the customer decides on the policy (none, quarantine, reject).
6. The Provider may further develop the service and change features, provided that the agreed scope of services is not significantly restricted as a result.

§ 3 Registration and trial period

1. Use requires an account with a confirmed email address. The information provided must be accurate. Anyone creating an account for a company warrants that they are authorised to do so.
2. New accounts receive a free 14-day trial period with the limits stated in the portal. The trial period ends automatically; it does not turn into a paid contract without a booking.
3. If no booking is made after the trial period ends, access may be restricted. Data is deleted 30 days after the end of the trial period unless a booking is made.

§ 4 Conclusion of the contract

1. The customer selects a plan and a billing period in the portal, enters the billing details of their company, confirms that they are booking as a business and clicks “Book monthly with obligation to pay” or “Book yearly with obligation to pay”. This constitutes a binding offer.
2. The contract is concluded when the payment has been successfully authorised via the payment service provider Stripe and the Provider confirms the booking.
3. If the customer books during the trial period, the plan starts immediately; the first payment is due at the end of the original trial period. Download and hosting of BIMI logos are only available from the first payment; the customer can end the trial period early for this purpose.
4. The contract text is not stored separately. The customer can view the plan, price and invoices in the portal at any time under “Plan and billing”; these terms are available in the portal.

§ 5 Prices and payment

1. The prices displayed at the time of booking apply. All prices are net prices plus statutory VAT.
2. Businesses based in another EU member state with a valid VAT ID confirmed by the EU register (VIES) receive invoices without German VAT; the customer owes the tax (reverse charge). Businesses based outside the EU receive invoices without German VAT insofar as the place of supply is not in Germany.
3. The fees are due in advance for each billing period and are collected via Stripe. The Provider issues invoices electronically; the customer agrees to electronic invoices.
4. If a payment fails, the Provider informs the customer. If payment is still not made after a reminder setting a deadline, the Provider may block access until the amount has been settled. Further rights remain unaffected.
5. The customer may only set off claims that are undisputed or have been finally established by a court.

§ 6 Term, renewal and termination

1. The term corresponds to the selected billing period (one month or one year). It renews automatically for the same period unless the customer terminates before it ends.
2. The customer may terminate at any time with effect from the end of the current period, in the portal under “Plan and billing” or in text form to office@mailsecurity24.com.
3. The right to extraordinary termination for good cause remains unaffected. Good cause for the Provider is in particular a serious breach of § 9, a payment delay of more than two months or use by a consumer contrary to § 1 (2).

§ 7 Changing plans

1. The customer can change the plan in the portal. Before the change, the portal shows the amount due.
2. An upgrade to a higher plan takes effect immediately. The difference for the remaining term is calculated pro rata and collected immediately.
3. A downgrade to a smaller plan also takes effect immediately. A credit is created for the remaining term and offset against the following invoices; it is not paid out. The change is only possible if the domains and users in use fit into the smaller plan.
4. As long as client organisations exist, only the Agency plan is possible.

§ 8 Quotas

If the customer exceeds the number of checked messages of their plan, the Provider informs them. In the event of repeated or significant overruns, the Provider may, after giving notice, suspend the processing of further reports until the end of the month or recommend a suitable plan. There is no automatic increase subject to a charge.

§ 9 Obligations of the customer

1. The customer only monitors domains that belong to them or for which they are authorised.
2. They keep login details and API keys secret and inform the Provider without delay if misuse is suspected. Two-factor sign-in is recommended.
3. They do not misuse the service and the DNS tools, in particular not to probe third-party systems, to circumvent rate limits or to overload the service.
4. They are responsible for the lawful processing of the data they route to Mailsecurity24 via their domains and ensure that they are permitted to use logos and trademarks in the BIMI logo studio.
5. If the customer uploads logos, trademarks or other signs to the BIMI logo studio, they warrant that they hold the necessary rights or have the consent of the rights holder, and that conversion, storage, provision and publication do not infringe any rights of third parties, in particular no trademark rights, copyrights, name rights or personality rights. They indemnify the Provider against all claims asserted by third parties against the Provider due to such an infringement, including the reasonable costs of legal defence. The Provider informs the customer without delay of any claims asserted and gives them the opportunity to comment. The indemnity does not apply insofar as the customer is not responsible for the infringement. If there are specific indications of an infringement, the Provider may temporarily block a hosted logo.
6. Agencies are responsible for ensuring that they only monitor their clients’ domains with their consent and that they pass on the obligations under these terms to their clients.

§ 10 Availability

The Provider aims for an availability of the portal of 98% on an annual average, excluding announced maintenance and disruptions beyond its control. Reports that arrive during a disruption are processed retrospectively where possible. Commitments with service credits (SLA) only exist if separately agreed.

§ 11 Defects

1. The customer reports defects without delay with a comprehensible description via the support ticket system or to office@mailsecurity24.com. The Provider remedies defects within a reasonable period.
2. Claims for defects become time-barred after one year, except in the cases of § 12 (1).

§ 12 Liability

1. The Provider is liable without limitation for intent and gross negligence, for injury to life, body or health, under the German Product Liability Act and to the extent of any guarantees given.
2. In the case of slight negligence, the Provider is only liable for the breach of material contractual obligations, the fulfilment of which makes the performance of the contract possible in the first place and on whose fulfilment the customer may regularly rely, and only for the foreseeable damage typical of the contract. This liability is limited per contract year to the fees paid by the customer in the twelve months before the damaging event.
3. The Provider is not liable for the consequences of DNS changes made by the customer, in particular not for undelivered emails after the DMARC policy has been tightened, unless it is at fault within the meaning of paragraph 1 or 2.
4. Paragraphs 1 to 3 also apply to the personal liability of the Provider’s employees, representatives and vicarious agents.

§ 13 Data protection and data processing

The Provider processes personal data in accordance with the privacy policy. Insofar as it processes personal data on behalf of the customer, the data processing agreement applies, which forms part of this contract.

§ 14 End of contract and data

After the end of the contract, the account remains accessible for 30 days so that the customer can back up data using the export functions or the API. The Provider then deletes the customer’s data unless there is a statutory retention obligation (for example for invoices). Hosted BIMI logos are no longer available from the end of the contract; the customer sets up their own storage for the file in good time.

§ 15 Changes

The Provider may change these terms and the prices with effect for the future. It announces changes in text form at least six weeks before they take effect. Until the changes take effect, the customer may terminate with effect from the time of the change; the Provider points this out in the notice. If the customer does not terminate, the changes apply from the time notified.

§ 16 Final provisions

1. The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).
2. To the extent permitted by law, the place of jurisdiction for all disputes arising from this contract is the Provider’s registered office. The Provider may also sue the customer at the customer’s general place of jurisdiction.
3. Declarations under this contract require text form (for example email) unless otherwise specified.
4. Should individual provisions be invalid, the remainder of the contract remains valid.

Last updated: 7 October 2026