Terms
These terms cover the website punchop.com and the application at app.punchop.com. They say what an administrator may do with PunchOp.
Updated 5 November 2026.
PunchOp is a read-only investigation of one email’s path: application evidence, the SMTP response and provider logs. It is not a phishing purge.
A report says what the connected evidence shows, and what it does not. Acceptance by a receiving server is not proof that the message reached an inbox. A DNS reading on this website says which records are published. It is not a delivery measurement.
You may connect a Google Workspace customer only if you administer that customer, or an administrator of that customer has asked you to. You may not use PunchOp to read a tenant you do not administer.
Sign-in uses your Google account. Connecting an organisation can ask a super admin for read-only Directory scopes, and optionally for the Reports audit scope. The privacy policy lists each scope, what is stored, and how to ask for deletion: https://punchop.com/privacy/
PunchOp’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
PunchOp does not sell Google user data and does not use it for advertising.
The form at https://punchop.com/pilot/ asks for a name, a work email, a role and an outline. Do not send credentials, raw logs or message bodies.
An administrator can open one discovery report for the organisation before a subscription. Some later readings stay closed until the organisation has an active subscription.
When PunchOp asks for a subscription, Stripe handles the payment and shows the price. PunchOp does not ask for a card number on this website. The number of Workspace users counted at the administrator proof is the quantity Stripe uses.
You can revoke PunchOp from the Google Account permissions page. Write to privacy@punchop.com to ask for deletion of the organisation, the sealed token and the rows stored from a sync. The privacy policy describes what is kept.
Do not use the service to disrupt it, to break into a tenant, or to submit someone else’s secrets. Do not present a report as a measurement the evidence does not contain.
We post changes on this page and change the date above. The public address of these terms is https://punchop.com/terms/