Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account, including your email address. Account authentication is managed by Clerk, a SOC 2 compliant identity provider. We do not store passwords. When you use our service, we collect the domain names you submit for monitoring.

We automatically collect basic usage data including IP addresses (for rate limiting and security), browser type, and pages visited. We do not use third-party tracking cookies or analytics services that profile your behavior.

2. How We Use Your Information

• To provide email deliverability monitoring for your domains
• To authenticate your account and manage your session
• To send you alerts about blacklist incidents (if enabled)
• To enforce rate limits and prevent abuse
• To improve our service and fix bugs

3. Data Storage and Security

Your data is stored on servers located in the United States. Account authentication is managed by Clerk, a SOC 2 compliant identity provider. We do not store passwords. All connections are encrypted via HTTPS. We implement security headers including HSTS, CSP, and X-Frame-Options to protect against common web attacks.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or valid legal process
• To protect the rights and safety of our users and the public
• With service providers who assist in operating our platform (e.g., payment processing via Stripe)

5. DNS and Email Checks

When you run a check, we perform public DNS lookups (SPF, DKIM, DMARC, MX records) and query public blacklist databases for the domains you specify. This data is publicly available and our queries are no different from standard DNS lookups. Check results are stored in your account for historical reference.

6. Cookies and Sessions

We use session cookies strictly for authentication. These are HttpOnly, Secure, and SameSite cookies that cannot be accessed by JavaScript or third-party sites. We do not use advertising or tracking cookies.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can delete your account and all associated data through your dashboard settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website.

9. Contact

If you have questions about this Privacy Policy, contact us at support@ismyemailblacklisted.com.