Terms of Service

These terms are an agreement between you and Orion CMD LLC, Omaha, Nebraska (“we”, “us”), the operator of InboxGuards. By creating an account or connecting a Microsoft 365 or Google Workspace tenant, you accept these terms. If you are accepting on behalf of a company, you confirm you have authority to bind it.

InboxGuards is a monitoring and alerting service. It reads your tenant's audit logs and security configuration with read-only access you grant, looks for patterns associated with account takeover and email fraud, reports on your security posture (such as MFA coverage), checks the email addresses in your directory once a day against third-party breach-data services (Have I Been Pwned and LeakCheck) for credential leaks, and alerts you. It does not block, fix, or change anything in your tenant, and no human reviews your alerts as part of the service. The full boundaries of the service are described in our disclaimer, which is part of these terms.

• You must have the authority to connect the tenant you connect — only an authorized administrator of the organization may grant InboxGuards access.
• You are responsible for keeping your account credentials secure and your notification email current.
• You are responsible for reviewing alerts and deciding whether and how to act on them.
• You remain solely responsible for configuring and securing your tenant — including enabling MFA, security defaults, and access policies. Posture reports and scorecards inform you; they do not transfer any configuration responsibility to us.
• You may not use InboxGuards to monitor a tenant you do not own or administer, or for any unlawful purpose.

Monitoring costs $4 per active user per month (or $40 per user per year when billed annually), billed as a recurring subscription for the seat count you choose. There is no minimum. You can change your seat count or cancel anytime from your dashboard; cancellation stops future charges at the end of the current billing period.

The subscription covers monitoring, alerting, reports, and general response guidance only. Tenant changes, incident response, and remediation remain your responsibility or that of your separately authorized IT provider or MSP.

New subscriptions carry a 30-day money-back guarantee as described in our refund policy. We may change pricing with at least 30 days' notice by email; changes never apply retroactively.

You can stop using InboxGuards at any time by cancelling your subscription and revoking our access in your Microsoft or Google admin console. We may suspend or terminate an account that violates these terms, abuses the service, or has payments that remain failed after notice. On termination, monitoring stops and your data is handled as described in our privacy policy.

InboxGuards depends on what Microsoft and Google record in your audit logs and when they make it available. We do not and cannot guarantee that every compromise will be detected or that alerts will always be timely. An absence of alerts is not proof of an absence of compromise.

Security posture information — including MFA coverage figures, configuration status, and the monthly scorecard grade — is a point-in-time snapshot derived from data your provider reports to us, and may be incomplete, delayed, or unavailable (for example, where permissions or licenses are missing). Dark-web findings depend entirely on what Have I Been Pwned and LeakCheck have indexed; a clean result means no known leak in those two sources, not that no leak exists. It is informational only: it is not a security audit, a certification, an attestation of compliance, or a promise that your tenant is or will remain secure, and a favorable grade is not a guarantee against compromise.

InboxGuards is provided “as is” and “as available”, without warranties of any kind, express or implied, to the fullest extent permitted by law. To the fullest extent permitted by law, our total liability to you for any claim arising out of or relating to the service is limited to the amount you paid us in the twelve months before the claim arose, and we are not liable for indirect, incidental, or consequential damages — including financial loss from fraud, business interruption, lost profits, or data loss — whether or not an alert was generated.

Nothing in these terms excludes liability that cannot lawfully be excluded.

We may update these terms from time to time. For material changes we will update the date above and notify active customers by email at least 14 days before the change takes effect. Continued use after that date is acceptance of the updated terms.

These terms are governed by the laws of the State of Nebraska, USA. Questions or disputes: contact us first at hello@inboxguards.com — most issues are resolved with an email.