Privacy Policy

Domain Information: When you use our service, we collect the domain name you enter for analysis. This is necessary to perform DNS lookups and generate your email authentication report.

Payment Information: We use Stripe to process payments. We do not store your payment information on our servers. Stripe processes and secures all payment data according to PCI DSS standards.

Operational Data: Netlify may process request metadata needed to host and secure the service. Our first-party funnel events include:

• Event name, page path, time, and referring page
• The submitted domain and audit score for scan and checkout events
• Browser user agent and country headers supplied by the hosting platform

We use the information we collect for the following purposes:

• Service Delivery: To perform DNS analysis and generate your email authentication report
• Payment Processing: To process your one-time payment through Stripe
• Support: To investigate delivery or billing issues when you contact us
• Service Improvement: To understand how our service is used and make improvements
• Legal Compliance: To comply with applicable laws and regulations

Reports: Reports are generated on demand after the server verifies a paid Stripe Checkout Session. The application does not currently provide permanent public report links or a report database.

Domain Data: Domain names entered for analysis are not permanently stored in our databases. They are processed in real-time and may be temporarily cached for performance optimization.

Operational Logs: First-party funnel events and request logs are retained according to the hosting account's configured Netlify log retention. Stripe retains payment records under its own policy and applicable law.

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

• Service Providers: We share data with trusted third parties who assist in operating our website and conducting our business (e.g., Stripe for payments, Netlify for hosting)
• Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred to the new owner

We implement appropriate security measures to protect your information:

• All data transmission is encrypted using HTTPS/TLS
• Payment processing is handled securely by Stripe (PCI DSS compliant)
• Regular security updates and monitoring
• Limited access to personal data on a need-to-know basis
• No storage of sensitive payment information on our servers

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we have about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and reports
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing activities

To exercise these rights, please contact us at hello@inboxshield-mini.com. We will respond to your request within 30 days.

InboxShield does not set advertising cookies or track users across unrelated websites. Stripe may use necessary storage on its hosted checkout page for security and payment processing.

You can control cookies through your browser settings, but disabling essential cookies may affect website functionality.

Our service is hosted on Netlify's global CDN. Your data may be processed in countries other than your own. We ensure that appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

We may update this privacy policy from time to time. Significant changes will be posted on this page with an updated "Last updated" date.

If you have questions about this privacy policy or our data practices, please contact us:

Privacy rights vary by location. Applicable frameworks may include:

• European Union General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Canadian Personal Information Protection and Electronic Documents Act (PIPEDA)
• Other applicable local and national privacy laws