Privacy Policy

1. Information We Collect

• Account data: your email address and authentication identifiers (via magic link or Google OAuth).
• Domain data: the root domains you add, their public DNS records, and the hosted CNAME you connect.
• DMARC telemetry: aggregate report data delivered to our inbound address (counts of legitimate vs. failing mail, top blocked source IPs). We do not read the contents of your mail.
• Billing data: handled by Stripe. We store only a Stripe customer/subscription identifier; we never store card numbers.

2. How We Use It

We use this information to provision and host your DMARC policy, generate telemetry and compliance certificates, send transactional notices (lock confirmations, alignment holds, drift alerts, dunning, and offboarding), and secure your account. We do not sell your personal data.

3. OAuth & Credentials

When you use automated DNS provisioning, we use ephemeral OAuth tokens. We never store your DNS registrar password.

4. Sub-processors

We use industry-standard sub-processors to operate the Service: Supabase (database and authentication), Cloudflare (hosted DNS authority), Stripe (billing), Resend (transactional email delivery), Postmark (inbound DMARC report receipt), and Vercel (application hosting). Each is bound by its own data-protection terms.

5. Data Retention

We retain account and domain data while your account is active. Aggregate telemetry is retained for reporting. On account deletion we remove your personal data except where retention is required for legal or accounting purposes.

6. Your Rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us to exercise them.

7. Security

Access to customer data is restricted to authenticated requests scoped to the account owner, with row-level security enforced at the database layer. Server-only secrets are never exposed to the browser.

8. Contact

For privacy questions or requests, contact support@genuinesender.com.