Privacy Policy
We believe in transparency. Here's exactly how we handle your data.
Our Commitment to Privacy
At DDMARC, we take your privacy seriously. This policy explains how we collect, use, and protect your data. We are GDPR compliant and SOC 2 Type II certified.
1. Information We Collect
Information You Provide
- Account Information: Name, email address, company name, and password
- Payment Information: Billing address and payment details (processed by Stripe)
- Domain Information: Domain names you register for monitoring
- Communications: Messages when contacting support or providing feedback
Information Collected Automatically
- DMARC Reports: Aggregate and forensic reports from email providers
- Usage Data: Features used, time spent, and interaction patterns
- Device Information: Browser type, OS, IP address, and device identifiers
- Cookies: Essential and analytics cookies (see Cookie Policy below)
2. How We Use Your Information
4. Analytics & Third-Party Services
Google Analytics 4
We use Google Analytics to understand how visitors interact with our website and platform. This helps us improve user experience and identify issues.
Opt-Out Options
You can opt out of Google Analytics using:
- Google Analytics Opt-out Browser Add-on
- Browser "Do Not Track" setting
Other Services
We also use these third-party services:
- Stripe - Payment processing
- Vercel - Website hosting
- AWS - Cloud infrastructure
5. Data Sharing & Disclosure
We do not sell your personal information.
We may share data with:
6. Data Security
Encryption
AES-256 at rest, TLS 1.3 in transit
SOC 2 Type II
Independently audited annually
ISO 27001
Certified security management
Pen Testing
Regular security assessments
Access Control
Role-based permissions
24/7 Monitoring
Continuous security monitoring
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account Data | Until account deletion |
| DMARC Reports | 7 days - 1 year (based on plan) |
| Billing Records | 7 years (legal compliance) |
| Server Logs | 90 days |
| Analytics Data | 14 months |
8. Your Rights (GDPR)
If you are in the European Economic Area (EEA), UK, or California, you have the following rights:
To exercise these rights, contact us at privacy@ddmarc.com. We will respond within 30 days.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:
- Standard Contractual Clauses (SCCs) for EU data transfers
- Data Processing Agreements with all sub-processors
- Data residency options (US, EU, APAC) for Enterprise customers
10. Contact Us
Privacy Inquiries
privacy@ddmarc.comData Protection Officer
dpo@ddmarc.comChanges to this Policy: We may update this policy periodically. We will notify you of material changes via email or through our platform. Continued use after changes constitutes acceptance.
Ready to secure your email?
Start monitoring your DMARC reports today. Free 14-day trial, no credit card required.