Terms of Service

These Terms of Service are an agreement between you, and the organization you represent, and POshield. If you are accepting these Terms on behalf of an organization, you confirm that you have authority to do so, and "you" refers to that organization.

By creating an account, registering an organization, installing the POshield browser extension, or otherwise using the service, you agree to these Terms. If you do not agree, do not use the service.

POshield is a sender verification service. Organizations register the people they authorize to send purchase orders, invoices, and payment requests. Records of those authorizations are stored as irreversible hashes on a public blockchain, and identifying details are encrypted in our database.

Organizations form private connections with one another. Where a connection exists, our browser extension displays a green check beside verified senders in Gmail and Outlook.

The service reads only the sender and reply-to information already visible in your email interface. It does not read, store, or transmit the subject lines, message bodies, or attachments of your email.

POshield accounts require a business email address. Personal email providers cannot be used to create an account or register an organization.

There is no POshield password. Authentication happens entirely through Google Workspace or Microsoft 365. You are responsible for the security of the accounts you use to sign in, and for the actions taken by anyone using them.

Registering an organization requires verification that you are an administrator of that organization's Google Workspace or Microsoft 365 accounts, or manual verification by POshield. You must not register an organization you are not authorized to represent.

Each person may belong to one POshield account. You are responsible for keeping your organization's list of authorized people accurate, and for removing people who should no longer be verified.

Registering an organization and being verified is free. Paid subscriptions cover seats for the people who need to see verification in their own inbox. Current pricing is shown on our website.

Subscriptions renew automatically at the end of each billing period until cancelled. You can cancel at any time from your account. Cancellation stops future billing and takes effect at the end of the period you have already paid for.

Fees already paid are not automatically refundable. We may issue refunds at our discretion. Plan changes that reduce your subscription take effect at the end of your current billing period, so you keep what you have paid for.

If a payment fails, we may suspend verification display while payment is resolved. Your team, seats, and connections remain intact.

You agree not to:

• Register or attempt to register an organization you are not authorized to represent
• Verify a person your organization has not genuinely authorized to send purchase orders, invoices, or payment requests
• Use the service to impersonate any person or organization
• Reproduce, imitate, or display the POshield verification mark outside the service, or in any way that suggests a sender is verified when they are not
• Attempt to access data belonging to another organization, or to circumvent any access control in the service
• Copy, resell, or provide access to the service to anyone outside your organization, except as expressly permitted
• Use automated means to extract data from the service, or to create connection requests at scale without a genuine business relationship
• Interfere with the operation or security of the service

We may suspend or terminate access for any violation of this section, and may require manual verification before an organization can be reinstated.

You retain ownership of the information your organization provides. You grant us the limited right to store, process, and display it as needed to operate the service, including recording irreversible hashes on a public blockchain.

You confirm you have the right to provide the information you enter, including the names and business email addresses of the people you verify, and that doing so does not violate any agreement or law that applies to you.

Our handling of personal information is described in our Privacy Policy, which forms part of these Terms.

Information recorded on a public blockchain cannot be deleted. Only irreversible hashes are recorded, never names or email addresses. A verification can be revoked, and we can delete the identifying information held in our database, but the historical hash record remains.

This section matters more than any other. Read it carefully.

POshield provides information. It does not prevent fraud.A green check indicates that, at the time of checking, a sender's email address matched a person an organization had registered as authorized. It is not a guarantee that a message is legitimate, that a transaction is safe, or that a payment instruction is genuine.

The absence of a green check is not an accusation. Many legitimate senders are simply not registered, or not connected to your organization.

No verification service can detect a compromised account. If a criminal gains access to the actual mailbox of a verified person and sends from their real address, the message genuinely originates from that account and will display as verified. For any change to payment details, confirm by telephone using a number you already have, never one provided in the message.

You remain solely responsible for your own purchasing, payment, and authorization controls. POshield is one input among the controls you should maintain, not a replacement for them.

We depend on services we do not control, including email providers, identity providers, blockchain networks, and payment processors. We do not warrant that the service will be uninterrupted, error free, or available at any particular time.

The service is provided "as is" and "as available", without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

No advice or information obtained from us, whether spoken or written, creates any warranty not expressly stated in these Terms.

To the fullest extent permitted by law, POshield will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, business, goodwill, or data, arising out of or relating to your use of the service, even if we have been advised of the possibility of such damages.

Our total aggregate liability arising out of or relating to these Terms or the service will not exceed the amount you paid to POshield in the three months immediately preceding the event giving rise to the claim. If you have paid nothing, our total liability will not exceed one hundred dollars.

In particular, and without limiting the above, POshield is not liable for losses arising from a fraudulent, altered, misdirected, or impersonated payment instruction, purchase order, or invoice, whether or not verification was displayed and whether or not it was displayed correctly.

These limits apply regardless of the legal theory on which a claim is based, and survive any failure of an agreed remedy. Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.

You agree to defend, indemnify, and hold harmless POshield and its owner, employees, and contractors from any claim, demand, loss, liability, or expense, including reasonable attorneys' fees, arising out of your use of the service, your violation of these Terms, your violation of any law, or any claim that information you provided infringed the rights of another party.

You may stop using the service at any time. We may suspend or terminate access if you violate these Terms, if we are required to by law, or if continuing to provide the service would create a security or legal risk.

If an organization's subscription is cancelled, verification display stops. Where an organization deliberately cancels, we may require confirmation with that organization before a new account is created for the same domain, so that a single individual cannot re-subscribe an organization that chose to leave.

Sections covering your content, what we do not promise, warranties, liability, indemnification, and dispute resolution survive termination.

We may modify the service, and we may update these Terms. If we make a material change, we will update the date at the top of this page and, where the change significantly affects your rights, notify account administrators. Continued use after a change takes effect means you accept the updated Terms.

These Terms are governed by the laws of the State of California, without regard to its conflict of laws rules.

Before filing any claim, you agree to contact us at support@poshield.com and attempt to resolve the dispute informally for at least thirty days.

Any dispute that cannot be resolved informally will be brought exclusively in the state or federal courts located in Shasta County, California, and you consent to the jurisdiction of those courts. Each party is responsible for its own costs and attorneys' fees unless a court determines otherwise.

We are not liable for any failure or delay caused by events beyond our reasonable control, including outages at email providers, identity providers, blockchain networks, hosting providers, or payment processors, and including acts of nature, labour disputes, network failures, cyberattacks, and government action.

These Terms, together with our Privacy Policy, are the entire agreement between you and POshield regarding the service. If any provision is found unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver of it. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets.

POshield's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We request read-only access to your Google Workspace directory solely to confirm that the person registering an organization is an administrator of it.
• We do not read, store, or transmit the content of your email, including subject lines, message bodies, and attachments.
• We do not use Google user data for advertising, and we do not sell it or transfer it to third parties except as necessary to provide the service, comply with applicable law, or as part of a merger or acquisition with notice to you.
• We do not allow humans to read Google user data except where you have given explicit permission for specific messages, where necessary for security purposes such as investigating abuse, or where required by law.

Questions about these Terms can be sent to support@poshield.com.