Terms of Service

The service is provided by Netchain Company Oy, based in Lohja, Finland. Contact: info@netchain.fi.

These terms apply to the use of the Domainbuddy service and all its features. By using the service you accept these terms. Using the service does not require registration.

Domainbuddy checks the email and DNS security settings of a domain entered by the user and produces a scored summary. The check covers, among other things, SPF, DKIM, DMARC, DNSSEC, MTA-STS, TLS-RPT, BIMI and CAA records, email provider detection, mapping of third-party vendors in the email supply chain, and a search for lookalike domains related to brand abuse.

The service is passive. All data is retrieved from public DNS, RDAP and HTTP sources. The service does not perform penetration testing, port scanning, vulnerability scanning or any other active testing against target systems, and it does not attempt to log in to or access any system.

The service is free of charge, and Netchain Company Oy may change its content and features at any time.

The service is intended for assessing the security posture of domains. You agree to use the service in accordance with the law and good practice.

The service must not be used for:

• automated or bulk querying, scraping, or copying the service's content
• overloading the service or its data sources, or circumventing usage limits
• gathering data to prepare an attack, phishing, harassment, or other unlawful activity
• building a competing service based on data produced by the service

Netchain Company Oy may restrict or block use of the service without prior notice if these terms are violated or if the use endangers the operation of the service.

3.1 User's responsibility for submitted data

The user is responsible for all data submitted to the service, including domains and email header information.

The user is responsible for ensuring that the data submitted is accurate and up to date and that they have the right to submit it to the service. The service's results are based directly on the submitted data: incorrect, incomplete, or misdirected input produces an incorrect result.

Netchain Company Oy does not verify the accuracy of submitted data and is not liable for results produced based on incorrect or incomplete input, or for any damages arising from it.

The service's header analysis feature processes email header information submitted by the user themselves.

Email header information typically contains personal data, such as email addresses, IP addresses and internal server names. By submitting header information you confirm that you have the right to process this data and disclose it for analysis. Do not submit confidential information, classified information, or other people's personal data to the service without a proper basis for doing so.

Header information is processed only to produce the analysis. It is not retained after the analysis is complete and is not used for any other purpose.

The service is provided "as is", without any warranties.

The results produced by the service are informational and reflect a point in time. They are based on public data sources, which may be incomplete, delayed or incorrect, and results can change immediately if the target's settings or the data sources change.

The service is not a security audit, certification, or professional advice, and it does not indicate the overall security level of the checked target. It does not fulfil statutory or contractual assessment obligations. The absence of a finding does not mean the target has no shortcomings.

Netchain Company Oy is not liable for the accuracy, timeliness, or completeness of the information produced by the service, for results based on incorrect or incomplete data entered by the user, or for decisions made based on the service or their consequences. Netchain Company Oy is not liable for indirect damages, such as loss of revenue, loss of data, service interruptions, or third-party claims. These limitations of liability do not apply to intent or gross negligence and do not limit a consumer's statutory rights.

The service's results may include information about third parties, such as vendors involved in the checked domain's email supply chain and similar-looking domains.

This information is based on public data sources and is presented as facts with source references and dates. It does not represent Netchain Company Oy's assessments, claims, or recommendations about the parties mentioned, and it does not imply that a mentioned party has acted incorrectly or that the checked domain's data has been compromised.

If you believe the service presents incorrect information about you or your organization, please contact info@netchain.fi. We will look into the matter and correct any error without delay.

7.1 What is stored

The service stores all domains submitted to it, along with the resulting check results, a timestamp, and a pseudonymized IP address. The service does not require registration and does not collect the user's name or contact details.

Inputs to the email header analysis are not stored, as described in Section 4.

7.2 Purposes of use

Stored data is used for the following purposes:

• providing the service and its technical operation
• developing the service, improving quality, and troubleshooting
• preventing abuse and overload
• statistical and research use, and producing and publishing anonymized aggregate data, for example industry- and country-level security comparisons
• developing Netchain Company Oy's business and service offering and marketing its services

The aggregate data referred to above is published only in a form from which an individual user cannot be identified.

7.3 Direct marketing

Direct marketing is targeted only at organizations, not private individuals. Users and marketing recipients always have the right to opt out of direct marketing by notifying info@netchain.fi, after which marketing will stop without delay.

The service does not send marketing messages to the holders of checked domains based solely on a check being performed.

7.4 Notes for the user

If you do not want the domain you submit to be stored for the purposes described above, do not use the service.

7.5 Personal data and privacy notice

A domain may in some cases constitute personal data, for example when it is formed from a natural person's name. Data retrieved from public sources, such as RDAP and DNS records, may also contain personal data. Such data is presented only to the extent it is publicly available from those sources.

The legal basis for processing, retention periods, and the data subject's rights, including the right to object to processing, are described in the privacy notice: netchain.fi/netchain-tietosuojaseloste.

The service, its user interface, program code, scoring model, report structures, and other content are the property of Netchain Company Oy and are protected by copyright and other intellectual property rights. The Netchain name and logo are trademarks of Netchain Company Oy.

You may use the results produced by the service for your own organization's internal purposes. Systematic collection, republication, or commercial exploitation of the results requires the written consent of Netchain Company Oy.

Third-party names and trademarks mentioned in the service belong to their respective owners and are used solely for identification purposes.

The service is provided without any availability guarantee. Netchain Company Oy may suspend, restrict, or discontinue the service in whole or in part without prior notice. The operation of the service also depends on third-party data sources, whose availability Netchain Company Oy cannot control.

Netchain Company Oy may change these terms. Changes take effect once the updated terms have been published on the service. Continued use of the service after a change constitutes acceptance of the amended terms.

These terms are governed by Finnish law. Disputes are resolved in the Länsi-Uusimaa District Court. If the user is a consumer, they have the right to bring proceedings in the district court of their own domicile and to refer the matter to the Consumer Disputes Board.

Netchain Company Oy info@netchain.fi