Privacy
Short version: we store DNS records and the aggregate reports mailbox providers send about your domains. We do not read your email, because we never receive it.
What we store
- DNS records. The SPF, DKIM, DMARC and MX records published on domains you ask us to monitor. These are public: anyone can query them.
- DMARC aggregate report data. Reports that mailbox providers send about your domains. These contain sending IP addresses, message volumes, and pass or fail results for each source. They do not contain message content, subject lines, recipients, or attachments, because aggregate reports never carry those.
- Account data. The email address and company name you sign up with, and the domains you choose to monitor.
Why we store it
To tell you when something changes. A record check on its own is a snapshot; the value is in comparing today against yesterday, which requires keeping yesterday.
How long we keep it
Aggregate report data is kept for 13 months, then purged by a monthly job. Thirteen months rather than twelve so a year-over-year comparison always has both ends. If you cancel, stored report data is deleted within 30 days.
Where the analysis happens
On our own infrastructure. Report parsing, the daily checks and the plain-English summaries all run on hardware we operate. Report content is not sent to any third-party processor, and it is not sent to any external language model provider.
Who else sees it
Nobody outside WatchDMARC, except the payment processor that handles your subscription, which receives your billing details and never receives your report data.
Your rights
Under GDPR and CCPA you can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, and ask for a copy. Email privacy@watchdmarc.com and we will respond within 30 days.
Cookies
This site sets no analytics cookie unless you choose to allow one. The choice itself is stored in your browser, not on our servers.