Terms of Service

These terms govern your use of SeguraDoc: the website at seguradoc.com, the dashboard at app.seguradoc.com, and the mailbox screening and document sanitization service behind them (together, the “Service”). By using the Service you accept these terms. If you do not accept them, do not use it.

The Service is offered to people for their own mail and to businesses and the people acting for them. You must be at least 18 and able to enter a binding contract. Where these terms say “consumer”, they mean a person using the Service for purposes outside their trade, business, craft or profession. If you connect a mailbox that belongs to an organization, you confirm that you are authorized to grant SeguraDoc access to it.

• Mailbox screening. SeguraDoc connects to a mailbox you own and watches it while its subscription is active. For each message it checks the sender's identity and authentication and, when content filtering is on, reads the message for signs of fraud and for the kind of mail it is. It rebuilds the PDF and Word attachments it can: a PDF we cannot read is not rebuilt, and one that arrives after your monthly page allowance ran out waits and is rebuilt once the allowance renews, as does one on a message waiting for the message allowance. The message is then left where it is, left there with a warning, or moved to Junk. When it rebuilt a message's attachments, or could not, SeguraDoc writes one copy into the inbox, under the same subject, from its own address, carrying the rebuilt files and naming any it could not, with the reason. A message moved to Junk gets no copy.
• Single-file sanitization. You upload one PDF in the dashboard and receive the rebuilt copy.

A rebuilt PDF is a new document drawn from the rendered pages of the original, with the original's text placed back so it stays searchable and selectable. Scripts, embedded actions, launch commands and attached files do not survive the rebuild. The Service rebuilds PDF and Word (.docx) files; a Word file comes back as a PDF. It does not rebuild other files, such as older .doc files, spreadsheets or archives. It never moves a message before deciding what it is, and no attachment result moves a message on its own.

• Creating an account. You may register for an account and purchase a subscription through the Service. You must provide accurate account information and keep it up to date. Registration alone does not activate mailbox screening or document sanitization; processing requires an active, paid subscription as described in section 7.
• Sign-in is by emailed link or through Google. You are responsible for the mailbox that receives your sign-in links and for anyone you allow to use your account.
• You must keep the mailbox credential you give us valid. If it stops working, the mailbox is no longer watched until you reconnect it.

The connector acts on your mailbox within these limits, which we treat as promises:

• We move mail. We never destroy it. No message is trashed, and no folder is ever emptied. An original we move to Junk stays in a folder of your own mailbox. Some mail servers cannot move a message in one step, and iCloud is the one that matters in practice. There the only way to move a message is to copy it across and then remove it from the folder it came from, one message at a time, and that is what we do — never before the server has confirmed the copy is in its new folder, and never to more than the one message. Ask us and we will switch it off for any mailbox; nothing is then moved there, and filtering goes off with it.
• Filtering needs a server that will move a message. Where your mail server can do neither of the two above, filtering cannot be switched on for that mailbox at all, and nothing there is moved.
• Your provider owns the Junk folder. Their retention rules apply to it, and to a SeguraDoc/Junk folder where we create one. We do not control or promise how long they keep a message.
• Screening starts when the subscription is active. We screen only mail that arrives after you connect and while its subscription is active. Mail that arrives while it has none, or while it is lapsed, is never screened, also not after you pay. The one exception is set out on the connect screen and in the privacy policy: once, we read the To, Cc and Message-ID lines of the previous 12 months of your Sent mail, never its subject, text or attachments.
• We never send mail from your address. The reply is written into your own mailbox, not mailed out, and we do not forward your mail to anyone. What does leave is what the checks need: an image of a PDF page whose text we cannot read from the file itself, sent to have that text read; the host names of the links a document carries, sent to be checked against a malware list; and the sender name, the sender domain, how widely used that domain is, the name of the server that received the message, the subject, up to 2,000 characters of the message body and up to 1,000 characters of text read from pictures in it, sent to be scored, and what up to 8 links show and up to 300 characters of its footer, with email addresses, web addresses and long runs of digits replaced. A link's hidden destination is not sent to be scored; a web address written out in the message is part of its text. We also ask the registry that runs the sender's domain when it was registered, sending only the domain name. Each goes to a company named under Who receives your data in our privacy policy.
• Nothing is presented as clean without being checked. A message we deliver without checking an attachment is recorded and shown as unchecked, never as clean. When your page allowance is spent, a message carrying a PDF we could not check stays in your inbox, shown as unchecked in your activity.

Your decisions

Filtering is yours to switch on and off for each mailbox. You can disconnect a mailbox at any time, and you can delete a mailbox's filtering history, or the mailbox itself once no subscription on it is active. We show the consequence at the point you choose; the choice is yours.

One thing is not a choice. A file we tried and could not rebuild is never presented as clean, and no setting changes that.

You can exclude a sender from the unwanted-mail filters, from one of their messages in your activity. Their promotions, newsletters and cold outreach then stay in the inbox. Their mail is still checked for scams, and a scam still goes to Junk. The mailbox's settings list every sender you excluded, with a way to remove each one.

• You keep ownership of every document and message. You grant us a licence to process them only as far as running the Service requires.
• By default the original PDF is deleted within 1 hour. A mailbox attachment's rebuilt PDF and page previews are deleted as soon as your mailbox no longer needs its checked copy, and at the latest at the end of your account's retention period, and are not offered for download. For an attachment checked before this change they stay, as before, until the end of your account's retention period. A dashboard upload's rebuilt PDF, page previews and every report are deleted at the end of your account's retention period, which an account owner sets in Settings. Download what you need inside that window. We provide no archive or backup.
• A rebuilt document is a faithful redraw, not the original file. Form fields, embedded fonts, digital signatures and other active structure are not preserved, and that is the point.
• Text placed back into a rebuilt scan comes from optical character recognition and may contain errors.

What we record about your mail and documents, and for how long, is set out in the privacy policy, which forms part of these terms.

You agree not to:

• connect a mailbox you are not authorized to grant access to, or use the Service to read another person's mail without their knowledge where the law requires it;
• use the Service to distribute malware, phish, defraud, or break any law;
• interfere with the Service, probe it, or try to reach data that is not yours;
• resell, sublicense or white-label the Service without a written agreement with us;
• reverse-engineer the Service except where the law allows it.

• One plan. The Service is paid by subscription at $10 USD per month for each protected mailbox. There is no annual option and no other tier.
• What a subscription includes. Each subscription carries a monthly allowance of 100 sanitized PDF pages and 1,000 messages analysed for that mailbox. It covers the mailbox's attachment checks and dashboard uploads by its owner. Allowances are never pooled: three mailboxes is three subscriptions and three separate allowances. A change to the allowance applies from your next monthly period: a period already running keeps the allowance it started with.
• No overage and no top-up. We never charge beyond the monthly fee, do not offer auto top-up or a prepaid fallback, and do not represent the Service as unlimited. When the page allowance is spent, attachments wait in your inbox, unchecked and never marked as clean, and are rebuilt in the next paid period with its allowance. When the message allowance is spent, new mail waits in your inbox and is analysed in the next paid period, with its allowance; its attachments wait with it and are not rebuilt until then, even if PDF pages are left. Until then scams and unwanted mail are not moved to Junk, and only mail from throwaway addresses still is. Waiting mail counts against the renewed allowance, after the mail arriving then, so with a large backlog some of it can wait for the renewal after that.
• Paid processing. Mailbox screening and document sanitization require an active, paid subscription for the mailbox and are subject to its allowances. Creating an account or connecting a mailbox does not by itself entitle you to processing. Cancelling renewal does not end a period you have already paid for: processing continues until that period ends, subject to the remaining allowances. If the subscription expires, a failed payment makes it inactive, or it otherwise becomes inactive, no new processing takes place. Existing records are retained according to the privacy policy.
• Payment methods. A card subscription is charged through Stripe when you subscribe and then automatically each month until you cancel. A crypto subscription through BlockBee is paid from a link sent before each renewal; nothing is charged automatically, and it ends if the period goes unpaid.
• Retired prepaid balances. The former prepaid processing balance is retired. Historical balance records are kept read-only for audit and cannot be spent.

• Cancelling. You may cancel at any time, without giving a reason, by email to [email protected]; a card subscription can also be cancelled from Manage billing in the dashboard when Stripe's billing page offers it, and a crypto subscription also ends if you do not pay the next link. Cancelling stops future renewals. The mailbox stays protected until the end of the period already paid, subject to its allowances; after that, processing stops.
• Refunds. Payments for the current billing period are normally non-refundable. We may offer refunds on a case-by-case basis. To request one, email [email protected] with the mailbox address the subscription covers and details of the payment. A discretionary full refund cancels the subscription and ends the entitlement it paid for; a discretionary partial refund does not. Statutory withdrawal ends the subscription as described below.
• Payment disputes. If you believe a charge is incorrect, you can contact us at [email protected] so we can investigate. We review refunds and payment disputes according to the circumstances and may respond to a dispute through the payment provider. Contacting us first is not a condition of exercising your rights with your payment provider.

These refund terms do not affect your statutory withdrawal rights or any refund or other remedy required by applicable law.

Your right to withdraw, if you are a consumer

Withdrawing is not the same as cancelling. Cancelling stops future renewals. Withdrawing ends the contract and we reimburse what you paid for it.

• Right of withdrawal. If you are a consumer in the European Union, you have the right to withdraw from a new subscription within 14 days without giving any reason. The 14 days run from the day you took out the subscription. Using the Service during those 14 days does not take this right away. Where the law that protects you gives you a wider right, that applies too.
• How to withdraw. Email [email protected] with the mailbox address the subscription covers and a clear statement that you want to end the new subscription and receive a refund under your withdrawal right. No particular wording is required. You are in time if you send your statement before the 14 days end.
• Effects of withdrawal. The subscription ends when you withdraw. We reimburse all payments received for it without undue delay and within 14 days of the day we are told of your decision. We use the same means of payment you used unless you expressly agree otherwise, and charge no fee for the reimbursement.

• You keep every right in your documents and mail.
• SeguraDoc's software, rebuild process, dashboards, text and branding remain ours.
• Suggestions you send us may be used without obligation to you.

The Service depends on your mail provider, on Stripe and BlockBee for payment, and on the companies listed under Who receives your data in our privacy policy for hosting, email, AI processing and link checks. We choose them with care, but we do not control them, and an outage or change on their side may interrupt the Service.

The Service is provided “as is” and “as available”, without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. In particular we do not warrant that:

• the Service will catch every fraudulent, impersonating or unwanted message, or every malicious attachment. The checks raise suspicion; none of them certifies a message as honest, and a genuine sender whose mailbox was compromised may pass every one of them;
• the Service will be uninterrupted, timely or error-free;
• a rebuilt document is complete, accurate or fit for any legal, accounting or regulatory use;
• text recovered from a scan is correct.

The Service is one layer of your defences. Keep your own backups, your own judgement about what you open, and your own controls.

If you are a consumer, this section does not limit the rights consumer law gives you, such as the legal guarantee that the Service conforms to this contract.

To the extent permitted by applicable law, SeguraDoc and its operator are not liable for indirect or consequential losses arising from your use of, or inability to use, the Service, including lost profits, lost business opportunities or loss of goodwill.

Our total aggregate liability for claims arising from or relating to the Service will not exceed the total fees you paid us for the Service during the 12 months immediately preceding the event giving rise to the claim.

These exclusions and limits do not apply to fraud, wilful misconduct, gross negligence, or any liability that cannot lawfully be excluded or limited. Nothing in these terms limits consumers’ mandatory statutory rights.

If you use the Service as a business, you agree to indemnify SeguraDoc and its operator against third-party claims, damages and reasonable legal costs, but only to the extent caused by:

1. Your material breach of these terms;
2. Your connecting a mailbox or submitting content without the necessary authorization;
3. Your infringement of a third party’s privacy or intellectual property rights through your use of the Service;
4. Your unlawful use of the Service; or
5. Your fraud, wilful misconduct or gross negligence.

This obligation does not apply to the extent a claim or loss results from our breach of these terms, negligence or wilful misconduct. Receiving or submitting suspicious or malicious files for processing, as permitted by the Service, does not by itself trigger this obligation.

We will notify you promptly of any claim and give you a reasonable opportunity to participate in its defence. We will not agree to a settlement that imposes obligations on you without your consent.

This section does not apply if you use the Service as a consumer.

• We may suspend or end your access if you break these terms, use the Service unlawfully, or put our systems or other users at risk.
• You may end the agreement at any time by deleting your account in Settings, once no subscription on it is active, or by asking us to close it.
• On termination your right to use the Service ends, mailbox credentials are revoked, and data is deleted on the schedule in the privacy policy.

• We may change or withdraw parts of the Service. Where a change removes something you pay for, we will tell you before it takes effect.
• We may update these terms. For a material change we will email account holders before it applies. Using the Service after that date means you accept the new terms. If you do not accept them, you can cancel before they apply.

SeguraDoc is run by Ariano Fonseca Ângelo, an individual based in Portugal. Questions about these terms, cancellations, withdrawals and refunds go to [email protected].