PDMSC live test service: terms of use
=====================================

Please read this before you install the module or create a key. Installing and configuring
the module, or using an API key, means you accept these terms.

1. What this is, and who it is for
----------------------------------
The PDMSC live test service (live.pdmsc.com) is for INDIVIDUALS and for EVALUATION AND
TESTING, at low volume. It lets you see what PDMSC would say about your own mail. The rspamd
module in this package is the client that talks to it.

They are NOT for running the mail flow of an organisation in production, and NOT for
reselling, sharing a key between organisations, or building a service on top of. If you want
PDMSC in production, you need the PDMSC daemon under a normal licence, which runs on your own
systems: see https://www.pdmsc.com/licensing.html or write to enquiries@misullivan.com.

2. YOUR MAIL LEAVES YOUR SYSTEM
-------------------------------
This is the important one. The module works by sending each message it scans to a server
that is not yours:

  * The WHOLE message is sent: all headers, the body and any attachments, up to 2 MiB.
  * Along with it goes your rspamd's own SPF/DKIM/DMARC result for the message.
  * It is sent over HTTPS to live.pdmsc.com, which is operated by PDMSC.
  * The message will contain other people's personal data (the senders', and anyone named in
    it). By turning the module on you are the one deciding to send that data to us.

So:

  * Do not use it for mail that must not leave your network: confidential, privileged,
    regulated or contractually restricted mail, or mail of other people or organisations that
    has not been cleared for this.
  * Make sure you are entitled to send the mail you scan, and that doing so is allowed where you
    are and by whoever's mail it is (employer, customers, users, the law).
  * Start with a test mailbox or a low-risk stream if you are unsure, and leave out anything
    sensitive using an rspamd settings rule (or run the module on a separate rspamd).
  * To stop sending mail off your system at any time, run
        pdmsc-live-setup --remove-config --reload
    or revoke your key in the portal.

3. What we do with what you send
--------------------------------
  * The message is scored in memory and is not kept. We do not store the message, keep a copy,
    or add it to any corpus, and we do not share it with anyone.
  * We do not write messages out to temporary files of any kind. Messages are limited to 2 MiB,
    and every message up to that size is received and scored in memory only.
  * We keep a log with your key id, the message size, the time taken and the verdict classes
    (for example "fraud, 0.85"). It holds no Message-ID, subject, addresses or message text.
    The scoring engines' own logs hold only scores and technical MIME-parse warnings.
  * We may count and report usage per key (for example messages per day) to run the service.
  * Our staff do not intercept or read the messages you send. If you or your organisation would
    like that in writing, we are happy to sign a general-purpose non-disclosure agreement (NDA)
    covering your test data: write to enquiries@misullivan.com.

4. Licence to use the service, and the module's own licence
------------------------------------------------------------
THE SERVICE. While your licence is active you may use the live service, with your key, for
the purposes in section 1. You may not share a key between organisations, resell the service,
or run it as a service for others. Any other use needs our written permission.

THE MODULE. The module (the software in this package) is separate from the service. It is free
software under the BSD 2-Clause licence in COPYRIGHT: you may copy, modify and redistribute it
under that licence. That licence covers the code only. It gives you no right to use
live.pdmsc.com, which needs a valid key and these terms.

5. No guarantee
---------------
This is a test service, provided as it is.

  * No uptime guarantee, no support commitment, and the scores are an opinion, not a promise:
    the engines make mistakes. Do not use the scores as the only reason to delete, block or act
    on a message.
  * We may change, limit, suspend or end the service, or a key, at any time, with or without
    notice, for example for abuse, for exceeding the limits (30 messages a minute per key, 2 MiB
    per message) or when your licence ends.
  * To the extent the law allows, PDMSC is not liable for loss caused by the service, the module,
    or by it being unavailable or wrong. Nothing here limits any right you have that cannot be
    limited by law.
  * If the service is unavailable or refuses your key, the module fails open: your mail is
    delivered as it would have been without it.

6. Questions
------------
enquiries@misullivan.com