Privacy Policy

We use your data for the following purposes:

• To provide, maintain, and improve our AI-powered email security monitoring service.
• To process and analyze DMARC aggregate reports, forensic data, and TLS reporting for comprehensive email security insights.
• To train and enhance our machine learning models for threat detection, anomaly identification, and predictive security analytics.
• To generate automated security alerts, recommendations, and compliance reports.
• To monitor domain spoofing attempts, phishing campaigns, and unauthorized email usage.
• To provide real-time dashboards, historical analytics, and security trend analysis.
• To communicate critical security alerts, policy violations, and system updates.
• To detect, prevent, and investigate security incidents, fraud, and abuse.
• To comply with legal obligations and industry security standards.
• To conduct research and development for advanced email security technologies.

We do not sell your personal information. We may share your information in the following circumstances:

• AI/ML Service Providers: Cloud computing platforms and machine learning infrastructure providers that process data for our AI models under strict confidentiality agreements.
• Security Intelligence Partners: Threat intelligence feeds and security research organizations for improving global email security (anonymized data only).
• Technical Service Providers: DNS monitoring services, certificate authorities, and infrastructure providers necessary for service delivery.
• Legal Compliance: When required by law, court orders, or to protect against security threats and fraud.
• Emergency Situations: To prevent imminent harm to individuals or critical infrastructure security.
• Business Transfers: In case of merger, acquisition, or asset sale, with advance notice and data protection guarantees.

Our AI-powered security features involve:

• Automated Analysis: Machine learning models process your DMARC, forensic, and TLS data to identify threats and anomalies.
• Predictive Security: AI algorithms analyze patterns to predict potential security incidents and policy violations.
• Data Training: Aggregated and anonymized data may be used to improve our AI models for better threat detection across all users.
• Human Oversight: Critical security decisions and recommendations are reviewed by security experts.
• Model Transparency: You can request information about how our AI systems process your specific data.

We retain different types of data for varying periods based on security and compliance needs:

• DMARC Aggregate Reports: Retained for up to 24 months for trend analysis and compliance reporting.
• Forensic Reports: Stored for up to 12 months for security incident investigation and threat intelligence.
• TLS Reporting Data: Maintained for 18 months to track certificate and connection security over time.
• AI Model Data: Anonymized training data may be retained indefinitely to improve security algorithms.
• Account Information: Retained while your account is active and for up to 7 years after closure for legal and tax purposes.
• Security Logs: Critical security events are retained for up to 7 years for forensic and compliance purposes.

We implement enterprise-grade security measures:

• Encryption: AES-256 encryption at rest and TLS 1.3 for data in transit.
• Access Controls: Role-based access, multi-factor authentication, and principle of least privilege.
• Infrastructure Security: SOC 2 Type II compliant data centers with 24/7 monitoring.
• Data Isolation: Customer data is logically separated and cannot be accessed by other users.
• Security Audits: Regular penetration testing, vulnerability assessments, and security reviews.
• Incident Response: Dedicated security team with 24/7 incident response capabilities.

Depending on your location, you may have the following rights:

• Access: Request copies of your personal data and information about how it's processed.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data (subject to legal and security requirements).
• Portability: Receive your data in a machine-readable format for transfer to another service.
• Restriction: Request limitation of processing under certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• AI Decisions: Request human review of automated decisions that significantly affect you.