Privacy Policy

Account Information: When you create an account, we collect your name, email address, company name, and password.

Domain Data: We collect and process DMARC aggregate reports (RUA) and forensic reports (RUF) for the domains you monitor. This includes email authentication data, sender information, and delivery statistics.

Usage Data: We automatically collect information about your interactions with our platform, including IP addresses, browser type, device information, and usage patterns.

We use the information we collect to:

• Provide, maintain, and improve our DMARC monitoring services
• Process and analyze DMARC reports for your domains
• Send you technical alerts, security notifications, and product updates
• Respond to your support requests and communications
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our terms of service

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: We may share data with third-party service providers who perform services on our behalf (e.g., hosting, analytics).
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical and network security
• Employee training on data protection best practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information and DMARC report data for as long as your account is active or as needed to provide services. Report data retention periods depend on your subscription plan:

• Free plan: 30 days
• Business plan: 1 year
• Enterprise plan: Unlimited (or as specified in your agreement)

After account deletion, we may retain certain information for legal compliance, dispute resolution, and fraud prevention.

Depending on your location, you may have the following rights:

• Access, correct, or delete your personal information
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent for data processing
• Lodge a complaint with a data protection authority

To exercise these rights, please contact us at privacy@trustyourinbox.com.

We use cookies and similar tracking technologies to improve your experience, analyze usage, and deliver personalized content. You can control cookies through your browser settings.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@trustyourinbox.com
• Mail: TrustYourInbox, Inc., [Address]