Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User", "you" or "your") and Mandokit, operated by Philipp Mandato (hereinafter "Provider", "we", "us" or "our"). They set out the rules and conditions under which you may access and use our website, products, and related services (collectively "Services"). Full provider contact details can be found in our Legal Notice (Impressum).

By using our Services, you confirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must stop using our Services immediately.

We may occasionally update or modify these Terms at our sole discretion. Material changes will be communicated to you at least 30 days before they take effect, by email or through a prominent notice within the application. The updated version will be indicated by a revised "Last updated" date at the top of this page. In the event of material changes, you have the right to terminate the agreement before the changes take effect. Your continued use of the Services after the changes take effect constitutes your acceptance of the revised Terms.

Please review these Terms regularly to stay informed about any changes.

Our Services are intended exclusively for persons aged 18 and over. If you are under 18, you are not permitted to use or register for our Services.

Our Services are directed exclusively at businesses (entrepreneurs within the meaning of § 14 German Civil Code), i.e. natural or legal persons acting in the exercise of their commercial or independent professional activity when entering into the contract, as well as legal entities under public law. By registering, you confirm that you are acting in that capacity. Contracts with consumers are not intended; should a contract with a consumer nevertheless come into existence in an individual case, mandatory statutory consumer rights apply in addition, including the right of withdrawal set out below, and provisions of these Terms that would be invalid vis-à-vis consumers do not apply to that extent.

1. Our Services

These Services are offered exclusively for legitimate business and research purposes. By using Mandokit, you agree to comply with all applicable laws and regulations regarding the collection and use of publicly accessible information. We do not authorize or tolerate abusive use of our Services for spam, harassment, or other unlawful activities. Mandokit's tools and data services are intended solely for lawful use. Users are responsible for ensuring their use of Mandokit complies with all local laws and regulations in their country.

We continuously improve and expand our Services, which means features may change or be updated from time to time. We reserve the right to modify, suspend, or discontinue parts of the Services at our sole discretion without prior notice.

Mandokit aims for a service availability of 99% on an annual average, excluding scheduled maintenance windows and force majeure. Scheduled maintenance will be announced in advance where possible. Mandokit cannot guarantee uninterrupted or error-free operation of the Services.

2. Intellectual Property Rights

All content, technologies, source codes, algorithms, design elements, trademarks, logos, and other materials available through Mandokit are the exclusive property of Mandokit or its licensors. These materials are protected by international copyright, trademark, and intellectual property law.

Unless expressly permitted in writing, you may not copy, modify, reproduce, distribute, or create derivative works from any part of the Mandokit platform or its content.

You retain ownership of data or materials you upload or process through our Services. However, by using Mandokit you grant us a non-exclusive, worldwide, royalty-free license to store and process this data solely for the purpose of providing and improving the Services.

3. User Representations

By using Mandokit, you confirm and represent that:

1. You are at least 18 years old and have the legal capacity to enter into these Terms. 2. All information you provide when creating an account or using the Services is accurate, complete, and current. 3. You will use Mandokit solely for lawful and legitimate business purposes and will never collect, share, or distribute data in violation of privacy, copyright, or data protection laws. 4. You will not use the Services to send unsolicited messages, spam, or engage in automated data abuse. 5. You understand that your access may be suspended or terminated if you violate these Terms or applicable law.

4. User Registration

To access certain features of Mandokit, you may need to create an account. You agree to provide accurate, current, and complete information during registration and to keep your account data up to date. You are solely responsible for the confidentiality of your login credentials and all activities that occur under your account. If you suspect unauthorized access or a security breach, you must notify us immediately.

Your account is personal and may not be shared, transferred, or used by third parties. We reserve the right to suspend or terminate accounts that violate these Terms, provide false information, or misuse the Services.

Before first using the application, you confirm once that you use Mandokit for business purposes, i.e. that you act as a business (entrepreneur within the meaning of § 14 German Civil Code) and not as a consumer. This confirmation is a prerequisite for use; without it we do not provide the Services. For evidence purposes we store the time of the confirmation and the version of these Terms applicable at that time. You warrant that this information is accurate. Anyone who falsely presents themselves as a business cannot invoke consumer protection provisions, and we may suspend the account. Billing details and – in the case of a domain order – the registrant details are only collected when they are needed for the respective process.

5. Purchases and Payment

Certain features or services of Mandokit may require a paid subscription or one-time payment. By purchasing a paid plan, you agree to provide valid and current payment information and authorize us (or our payment provider) to charge all applicable fees to your chosen payment method.

All prices are stated in euros (EUR). For business customers, prices are stated net, plus statutory VAT at the applicable rate; for cross-border supplies within the EU to businesses holding a valid VAT ID, the reverse-charge procedure may apply. For consumers, the stated prices include statutory VAT. Payment and invoicing are handled by our payment provider Stripe; invoices are provided electronically. Price changes will be communicated to you at least 30 days before they take effect via email. In the event of a price increase, you have a special right of termination effective as of the date the increase takes effect. In case of failed or overdue payments, your access to paid features may be suspended or terminated; this does not affect our claim to the agreed remuneration.

6. Tokens, Balances and Token Purchases

Paid features of Mandokit are billed using an internal accounting unit ("tokens"). Tokens are not legal tender, not e-money, not a voucher and not a cryptocurrency; they are solely a unit of measurement for the use of the Services. Tokens cannot be paid out, exchanged for cash, transferred to third parties, or moved between accounts.

Plan tokens: Each paid subscription includes a monthly token allowance that is provisioned anew at the start of each billing cycle. Unused plan tokens expire at the end of the respective billing cycle; they are neither paid out nor carried over into the following period. The allowances for each plan are shown on the pricing page and within the application. The free tier does not include plan tokens; the token-free features remain usable there without limitation.

Extra tokens: In addition, you may purchase extra tokens at any time or receive them via promotional codes. Extra tokens do not expire at the end of the month. Plan tokens for the current cycle are always consumed first; only then is the extra token balance charged. Extra tokens remain usable after cancellation or a switch to the free tier; they expire without compensation when the account is deleted.

Consumption: The token cost of each feature is displayed in the application before execution. Billing is generally based on results actually delivered (e.g. per record found or processed, per message sent). Failed executions are not charged; if an execution delivers fewer results than planned, only the results actually delivered are charged. Results that later turn out to be unusable (e.g. outdated or undeliverable contact data from public sources) do not give rise to any claim for a token refund.

Token purchases: Buying extra tokens is a one-time payment independent of the subscription. The balance is credited immediately after successful payment and is available right away. Refunds of tokens already credited are excluded unless mandatory law provides otherwise. We may adjust the prices of token packages and the token cost of individual features with effect for the future; material increases in the token cost of existing features will be announced at least 30 days in advance. Extra tokens already credited remain unaffected in their amount.

Promotional codes: Credits granted via promotional codes may be limited in time, quantity and per account, cannot be combined with other promotions, and are neither transferable nor redeemable for cash. In the event of abusive redemption – in particular through multiple or sham accounts – we may revoke credited tokens and suspend the account.

7. Right of Withdrawal

If you are a consumer within the meaning of applicable EU consumer protection law, you have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period is fourteen days from the date the contract is concluded. To exercise your right of withdrawal, you must inform us (Philipp Mandato, email: see Legal Notice) of your decision to withdraw from this contract by an unequivocal statement (e.g. by email).

To meet the withdrawal deadline, it is sufficient for you to send the communication concerning your exercise of the right of withdrawal before the withdrawal period has expired. In the event of an effective withdrawal, the services received by both parties are to be returned.

The right of withdrawal expires prematurely if we have begun the execution of the service after you have expressly consented and simultaneously confirmed your knowledge that you will lose your right of withdrawal upon complete fulfilment of the contract.

The following applies additionally to purchases of extra tokens: this is a supply of digital content not delivered on a tangible medium. During the ordering process you expressly consent to us beginning performance before the withdrawal period expires and acknowledge that you lose your right of withdrawal once the balance has been credited (§ 356(5) German Civil Code). Business customers have no statutory right of withdrawal.

8. Cancellation

You may cancel your Mandokit subscription at any time via your account settings or by contacting our support. Cancellations become effective at the end of the current billing period, and you retain access to the Services until then. Payments already made are non-refundable except where required by law or expressly stated otherwise.

After cancellation, you have 30 days from the end of the billing period to download your data using the export function in your account. After this period, your account and associated data will be deleted in accordance with our data retention policy and applicable data protection legislation.

Unused plan tokens expire at the end of the current billing period. An extra token balance existing at the time of cancellation remains usable until the account is deleted; payout or refund is excluded. All token balances expire when the account is deleted. We may terminate the agreement with 30 days’ notice to the end of a billing period; the right to terminate for cause remains unaffected.

9. Subscription Term and Renewal

Mandokit subscriptions are valid for the period specified at the time of purchase and renew automatically for the same period unless cancelled before the renewal date. You may cancel your subscription at any time via your account or by contacting support. Cancellation takes effect at the end of the current billing cycle unless otherwise specified. Mandokit reserves the right to suspend or terminate your subscription immediately and without notice if you violate these Terms or engage in activities that compromise the integrity or security of the Services.

10. Free Tier

Mandokit offers a permanent, time-unlimited free tier. The token-free features – in particular creating, managing and qualifying leads as well as writing message templates – are available at no cost; token-based features (e.g. research, AI enrichment, email sending) require a token balance from a paid subscription or a token purchase. The specific terms (available features, restrictions) are disclosed during the registration process or on the pricing page. A free tier does not automatically convert into a paid subscription – an upgrade always requires an active action on your part.

11. Scope of Use, Access & Fair Use

The scope of features, the number of concurrently running tasks, projects, domains, mailboxes and storage volume depend on the plan booked and the limits shown in the application. We may set and adjust technical limits (e.g. requests per time unit, sending volumes, concurrency) where this is necessary for stable, secure operation that is equally available to all users. Where usage substantially exceeds normal levels or impairs operations, we may throttle it after prior notice – and immediately where operations are at risk.

Access is granted to your company. Sharing login credentials, using one account across several companies, and reselling the Services or the data obtained through them as a standalone product are prohibited without our prior consent. Using the Services to provide your own services to your clients is permitted; in that case you remain responsible to us for compliance with these Terms by everyone to whom you grant access or for whom you use the Services.

12. Advertising, Outreach & Sender Obligations

Mandokit provides tools for researching and organizing publicly accessible business contacts. Data obtained through Mandokit must not be used to send advertising without the required consent of the recipient or without meeting the applicable legal requirements.

In particular: Sending advertising via email, telephone, fax, or comparable electronic means of communication is only permitted if the recipient has given their prior express consent (§ 7(2) UWG – German Unfair Competition Act) or the strict conditions of the existing customer exception under § 7(3) UWG are met. Furthermore, the requirements of the GDPR (in particular Art. 6(1)(f) – legitimate interest) and the ePrivacy Directive must be observed.

Users are solely responsible for the lawfulness of their outreach and advertising activities. Mandokit assumes no liability for unlawful use of data obtained through the platform by the user. In the event of violations of advertising or data protection law, Mandokit reserves the right to suspend or terminate the user account immediately.

When sending through Mandokit, you alone are the sender and the party responsible for the messages under competition law, telemedia law and the GDPR. You must include in every message the legally required information (in particular a complete provider identification / imprint) and a working unsubscribe option, and must promptly honour unsubscribes, objections and information requests from recipients. Mandokit provides an automatic unsubscribe link and an account-level suppression list for this purpose; using them does not release you from your own duty to check and act. Removing, hiding or disabling the unsubscribe link is prohibited.

13. Email Sending, Mailboxes & Deliverability

Sending takes place through the mailboxes and domains you connect – either via your own provider (e.g. your Google Workspace or your own SMTP access) or via mailboxes set up for you by Mandokit. You warrant that you are authorised to use these mailboxes, domains and credentials and that you comply with the terms of the respective provider. To match replies, unsubscribes and delivery failures, Mandokit automatically reads the inboxes of connected mailboxes; details are set out in our privacy policy.

Mandokit automatically limits sending volumes (warm-up and ramp-up phases) in order to protect deliverability. No particular delivery rate, inbox placement (inbox rather than spam folder), open, reply or conversion rate is owed or can be promised; these depend largely on your content, your audience and the filtering systems of recipient providers. Blocks, rate limits, reputation loss or blacklisting by email providers, ISPs or blocklist operators are outside our control and give rise to no claims against Mandokit.

In the event of abnormal complaint, bounce or spam rates, complaints from recipients or providers, or reasonable suspicion of unlawful sending, we may throttle or suspend sending for your account or block individual mailboxes and domains – without prior notice where there is imminent risk. We will inform you without undue delay and, where possible, give you an opportunity to remedy the issue.

14. AI-Powered Features

Mandokit uses AI models provided by third parties (currently Anthropic) for certain features (e.g. drafting text, enriching, qualifying and scoring records). Processing is carried out on our instructions and solely to deliver the features you trigger. According to the provider’s contractual commitments, your content is not used to train the models.

AI results are automatically generated suggestions and may be incomplete, outdated or factually wrong. You are obliged to review AI-generated content before sending or otherwise using it. We give no warranty as to the accuracy, completeness, originality or legal admissibility of AI results; in particular they do not constitute legal, tax or business advice. You alone remain responsible for the content actually sent.

15. Data Sources & Data Quality

Research results provided through Mandokit originate from publicly accessible sources and from third-party providers (including web research and email verification services). Mandokit collects and structures this data according to your search parameters and on your behalf; no review of the content takes place.

No warranty is given as to the accuracy, timeliness, completeness or fitness of results for a particular purpose. Email verification results are probability statements and are not proof that a mailbox exists, is reachable, or may lawfully be contacted. Availability, scope, format and pricing of third-party sources may change or cease; we may replace or discontinue individual sources as long as the Services remain usable overall.

16. Prohibited Activities

When using Mandokit, you agree not to engage in the following activities: Using the Services for unlawful purposes or in violation of local, national, or international laws. Collecting, storing, or distributing data in violation of privacy, copyright, or other intellectual property rights. Sending advertising without the required consent or without meeting the applicable legal requirements (in particular § 7 UWG, GDPR). Attempting to compromise the integrity or security of Mandokit, its servers, or connected systems. Using automated systems, bots, or scraping techniques beyond the intended use of the Services. Sending spam, unsolicited communications, malware, or other harmful content. Identity concealment, impersonating others, or providing false information. Attempting to reverse engineer or decompile Mandokit's code or algorithms. Violations may result in immediate account suspension and may have civil or criminal consequences.

17. User Responsibility & Indemnification

Mandokit provides a technical tool only. What data you collect, whom you contact, with what content, at what frequency and on what legal basis is decided by you alone. Mandokit neither reviews your search parameters and recipient lists nor your message content, and is under no obligation to do so; Mandokit is not the sender of your messages and does not adopt their content as its own.

You shall indemnify and hold harmless Mandokit as well as its legal representatives, employees and vicarious agents against all third-party claims – including claims by recipients, competitors, associations, supervisory authorities and other bodies – asserted against us as a result of unlawful or non-contractual use of the Services for which you are responsible. The indemnity covers in particular damages, fines, cease-and-desist costs and the costs of a reasonable legal defence and enforcement. It does not apply where you are not responsible for the breach; vis-à-vis consumers it applies only to the extent permitted by law.

You will inform us without undue delay if third parties assert such claims, provide us with all necessary information and leave the conduct of any legal defence to us where reasonable. If authorities or third parties take action against us because of your use, we may suspend the affected features until the matter is clarified.

18. User-Generated Content

When using Mandokit, you may submit, upload, or share content, data, or other materials ("Contributions"). You retain ownership of your Contributions but grant Mandokit a non-exclusive, worldwide, royalty-free license to use, store, display, and process them to provide and improve the Services. You warrant that your Contributions do not violate applicable laws or third-party rights and do not contain harmful code or malware. Mandokit reserves the right to remove or modify inappropriate Contributions at its sole discretion.

19. Third-Party Websites and Content

Mandokit may provide links to third-party websites, services, or resources for convenience. These links do not constitute an endorsement by Mandokit. Mandokit is not responsible for the availability, accuracy, or legality of third-party content, and you use such content at your own risk.

20. Refunds

All payments made for Mandokit subscriptions or services are non-refundable except where required by law (in particular under the right of withdrawal). If you believe you are entitled to a refund due to an error or billing issue, you must contact our support team within 30 days of the payment date. Cancellation of a subscription does not automatically entitle you to a refund for the current billing period.

21. Data Processing & Sub-Processors

Where you process personal data of third parties through Mandokit (e.g. contact data of leads), Mandokit acts as a data processor within the meaning of Art. 28 GDPR. Upon request, we will provide you with a Data Processing Agreement (DPA). Please contact us via the contact details provided in our Legal Notice to conclude the DPA.

For the contact and lead data processed through Mandokit, you are the controller within the meaning of Art. 4(7) GDPR. You are obliged to ensure a valid legal basis for every processing operation (in particular Art. 6(1)(f) GDPR), to fulfil the information obligations towards data subjects – in particular Art. 14 GDPR for data not obtained from the data subject – and to handle data subject rights and objections within the statutory deadlines. Mandokit supports you in this under the data processing agreement through suitable features (export, deletion, suppression list) and processes the data solely on your instructions.

We use sub-processors to provide the Services, currently in particular: Hetzner Online GmbH (hosting and databases in data centres in Germany), Cloudflare (CDN and security), Stripe (payment processing), Anthropic (AI processing), Apify (web research), Bouncer (email verification), Google (Workspace/Gmail integration and email communication) and INWX (domain registration). An up-to-date overview is contained in our privacy policy. We may add or replace sub-processors; we will announce such changes at least 30 days in advance. You may object to a change for important data protection reasons; in that case we are entitled to terminate the agreement with effect from the date the change takes effect.

22. User Data & Privacy

Mandokit is committed to protecting your personal data. By using the Services, you consent to the collection, use, and storage of your data in accordance with our Privacy Policy, available at /web/privacy. You are responsible for the accuracy and legality of data you submit or upload through Mandokit.

23. Google Workspace Integration & Domains

Mandokit offers the optional ability to connect your own Google Workspace in order to set up domains and mailboxes and to send and receive email. This feature requires that you act as an authorized administrator of the relevant Google Workspace and hold the necessary rights to grant access. You are solely responsible for ensuring that the connection and the actions carried out through it (e.g. creating domains and mailboxes) comply with Google's policies as well as applicable contractual and legal requirements.

With respect to the data processed within your own workspace, you remain the controller within the meaning of the GDPR. Mandokit accesses your Google account only to the extent and for the purposes described in our privacy policy, and does so in accordance with the Google API Services User Data Policy, including the Limited Use requirements. You may disconnect at any time in Mandokit or revoke access in your Google account.

Domain registration through the app: On request, Mandokit registers domains for you via a registrar (currently INWX). You are entered as the domain owner (registrant) — the domain belongs to you. Mandokit is listed only as the administrative, technical and billing contact and manages the domain within its own registrar account in order to automate DNS records, renewal and setup on your behalf. In this respect Mandokit provides infrastructure only and acquires no ownership of the domain.

For the registration we need your owner details (company, address, phone number, email address). We collect them during the order process. You warrant that these details are complete and correct, keep them up to date, and notify us of changes without delay. Incorrect or unreachable owner details may, under the rules of the registries (in particular the ICANN verification of the registrant email address), lead to suspension or deletion of the domain; you bear the consequences. You are further solely responsible for ensuring that the domain you choose does not infringe third-party rights — in particular trademark and name rights — and is not used unlawfully; Mandokit does not carry out such checks. Third-party claims regarding the domain name or its use are directed at you as the owner; the indemnity under section 17 applies in addition.

Billing and term: Billing is not made in tokens but through a separate, annually billed subscription per domain at the price shown in the app; it renews automatically for a further registration year unless cancelled before the end of the term. Release of the domain into your own registrar account is possible on request, to the extent the rules of the relevant registry allow it — for generic domains, ICANN blocks a registrar transfer during the first 60 days after registration. If the domain subscription is cancelled, a payment fails, or your account is terminated, the domain will not be renewed after the paid registration year expires and may be released; this also ends access to the associated mailboxes and their contents.

24. Service Management, Beta Features & Force Majeure

Mandokit reserves the right to manage, modify, or discontinue any part of the Services at its sole discretion. This includes adding new features, removing existing features, or temporarily suspending the Services for maintenance or updates. Scheduled maintenance will be announced in advance where possible.

Features marked as "beta", "preview" or "experimental" are provided without warranty, without any availability commitment and without any entitlement to their continuation. They may be changed, restricted or discontinued at any time.

In the event of force majeure – in particular outages at hosting, network, AI, data or email providers, cyber attacks, strikes, pandemics or official orders – the affected performance obligations are suspended for the duration of the disruption; we will inform you without undue delay. If the disruption lasts longer than 30 days, either party may terminate the agreement for cause. Fees paid in advance for the unusable period will be refunded pro rata in that case.

25. Copyright

All content, materials, and software provided through Mandokit, including text, graphics, logos, images, and code, are the property of Mandokit or its licensors and are protected by copyright and other intellectual property laws. You may not copy, reproduce, distribute, modify, or publicly display Mandokit content without prior written permission. Mandokit respects the intellectual property rights of others. If you believe your work has been used in a way that constitutes copyright infringement, please contact us immediately.

26. Disclaimer

The Services provided by Mandokit are offered "as is" and "as available" without warranties of any kind, express or implied. Mandokit does not warrant that the Services will be error-free, uninterrupted, or completely secure. To the fullest extent permitted by law, Mandokit disclaims all implied warranties. This disclaimer does not apply to damages arising from injury to life, body, or health, or to damages based on intentional or grossly negligent breach of duty.

27. Limitation of Liability

To the fullest extent permitted by law, Mandokit and its affiliates, officers, employees, and agents shall not be liable for indirect, incidental, special, consequential, or punitive damages. In no event shall Mandokit's total liability to you exceed the amount you paid for access to or use of the Services in the twelve (12) months preceding the claim. This limitation of liability does not apply to damages arising from injury to life, body, or health, in cases of intent or gross negligence, or for the breach of material contractual obligations (cardinal obligations).

28. Online Dispute Resolution

The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr. Our email address can be found in our Legal Notice. We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.

29. Governing Law & Jurisdiction

These Terms are governed by the laws of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods (CISG). If the user is a consumer within the meaning of applicable EU law, the mandatory consumer protection provisions of the state in which the user has their habitual residence shall additionally apply, insofar as they are more favorable. The place of jurisdiction for all disputes arising from or in connection with these Terms shall, to the extent permitted by law, be the registered office of the Provider.

30. Severability & Final Provisions

These Terms constitute the entire agreement between you and Mandokit regarding your use of the Services and supersede all prior agreements. If any provision of these Terms is or becomes invalid or unenforceable, the validity of the remaining provisions shall not be affected. In place of the invalid provision, a provision shall apply that comes closest to the economic purpose of the invalid provision in a permissible manner.

You may only set off claims that have been finally adjudicated, are undisputed or have been acknowledged by us; you may assert a right of retention only in respect of claims arising from the same contractual relationship. This restriction does not apply to consumers. Transferring this agreement to third parties requires our prior consent; we may transfer the agreement to a legal successor in the context of a business transfer. Declarations and notices under this agreement may be made in text form, in particular by email to the address stored in your account; you are obliged to keep that address up to date.