DMARCShield.net

Privacy Policy

Effective date: October 26, 2026

This Privacy Policy explains how DMARCShield.net ("DMARCShield," "we," "us," or "our"), collects, uses, and shares information when you visit DMARCShield.net, use our checkout pages, or use the DMARCShield customer portal (app.dmarcshield.net, and any prior or successor portal address) and related email authentication monitoring and reporting services (together, the "Service").

1. Information We Collect

1.1 Information you give us

  • Account and contact information: your name, business name, email address, phone number (if provided), login credentials, and messages you send us.
  • Billing information: your billing name, address, and payment details are entered on our checkout pages and processed by our payment processor, Stripe. We do not store full payment card numbers on our side. We may receive limited billing details from Stripe, such as the card brand, the last four digits, the expiration date, and transaction history.
  • Domain and DNS information: the domains you add to the Service, your DNS records (such as DMARC, SPF, DKIM, MTA-STS, and BIMI records), information about the services that send email for your domains, and any configuration settings, logos (for BIMI), or access you give us for setup.

1.2 DMARC report data

When you point your DMARC reporting addresses to the Service, email receivers (such as mailbox providers) send us reports about email that uses your domains. This data is processed on your behalf. It may include:

  • Aggregate reports: sending IP addresses, sending and receiving domains, authentication results (SPF, DKIM, DMARC), message counts, dates, and the reporting organization.
  • Forensic/failure reports (where enabled and provided by receivers): these may include portions of individual email headers, such as sender and recipient email addresses, subject lines, dates, and message identifiers. Some reports may contain other personal information about the people who sent or received the messages.

1.3 Information collected automatically

  • Website and portal usage: when you visit our website, checkout pages, or portal, we and our providers may automatically collect information such as your IP address, browser and device type, pages viewed, referring pages, and dates and times of visits.
  • Cookies and similar technologies: we and our providers use cookies, local storage, and similar technologies as described in Section 1.4.

1.4 Cookies, analytics, and advertising technologies

Website and checkout pages (dmarcshield.net). Our website and checkout pages are hosted on a third-party website and funnel platform (GoHighLevel). On these pages:

  • the funnel platform sets a visitor-identifier cookie and records visit and session information (such as pages viewed, referring source, and approximate location derived from IP address) so we can operate pages and forms and attribute sign-ups and purchases to visits;
  • a live chat widget provided by the funnel platform loads on our pages;
  • Cloudflare provides DNS, security, and website analytics, and may set a security cookie used to detect bots;
  • on checkout pages, Stripe processes payment details and may use cookies and device information for fraud prevention, and Cloudflare Turnstile and hCaptcha may be used to tell humans from bots. Google Pay may load if it is available in your browser; and
  • we do not use advertising or retargeting cookies or pixels (such as Meta/Facebook, Google Ads, LinkedIn, or TikTok pixels) on these pages.

Customer portal (login and account pages). The customer portal is provided using third-party infrastructure and service providers. It currently loads the following technologies through Google Tag Manager:

  • Google Analytics, to measure use of the portal;
  • Google Ads conversion and remarketing tags, which can use cookies to measure ad performance and to build audiences for showing ads on other websites;
  • Mouseflow, a session analytics tool that can record how visitors interact with portal pages, such as clicks, scrolling, and mouse movement; and
  • Bugsnag, an error-monitoring tool.

Your choices. You can block or delete cookies through your browser settings. If you block cookies, some parts of the Service may not work. You can also use Google's ad settings and the Google Analytics opt-out browser add-on. For your California opt-out right regarding advertising, see Section 7.

2. How We Use Information

We use information to:

  • provide, operate, and maintain the Service, including processing DMARC reports and showing you dashboards, reports, and alerts;
  • create and manage your account and authenticate you;
  • process payments, free trials, renewals, and setup fees;
  • perform setup and configuration work you request;
  • give you customer support and respond to your requests;
  • send you service-related messages, such as account, billing, renewal, security, and policy-change notices;
  • send you marketing emails about our services, where permitted (you can opt out at any time with the unsubscribe link or by contacting us);
  • monitor, secure, troubleshoot, and improve the Service, and prevent fraud and abuse; and
  • comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We share information with third-party service providers that help us run the Service, only as needed for them to perform services for us. These include providers of:

  • website, funnel, checkout, and CRM hosting (for example, GoHighLevel);
  • payment processing (Stripe);
  • DNS and network services (for example, Cloudflare);
  • email delivery for account and service messages;
  • DMARC report processing and platform infrastructure (third-party infrastructure and service providers that host the customer portal and receive and process DMARC reports); and
  • analytics, session analytics, error monitoring, and advertising measurement for our website and portal (for example, Google, Cloudflare, Mouseflow, and Bugsnag), as described in Section 1.4.

We may also share information:

  • with your direction or consent, such as when you connect alerting tools (for example, Slack, Discord, or webhooks) or ask us to work with your DNS or email provider;
  • for legal reasons, when we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is needed to protect the rights, property, or safety of us, our customers, or others; and
  • in a business transfer, such as a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We do not sell personal information for money. Google Ads tags on the customer portal (see Section 1.4) may be considered "sharing" for cross-context behavioral advertising under California law. See Section 7 for how to opt out.

4. Data Retention

We keep account information, billing records, domain and DNS information, and DMARC report data for as long as your account is active and up to 30 days after your account is suspended, and then we delete it, except where we must keep it longer by law. This also applies to backups. We may also keep information for longer when needed to resolve disputes or enforce our agreements.

5. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, such as access controls and encrypted (HTTPS) connections to our website and portal. Two-factor authentication is available for portal accounts. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials safe and for securing your own DNS and email accounts.

6. Your Choices

  • Account information: you can review and update your account information in the portal or by contacting us.
  • Marketing emails: you can unsubscribe at any time using the link in the email. We will still send service-related messages.
  • Cookies: you can block or delete cookies in your browser settings.
  • DMARC reports: you can stop sending reports to the Service at any time by changing the reporting addresses in your DMARC DNS records.

7. California Privacy Rights

We are based in California. If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), may give you the following rights, to the extent it applies to us:

  • Right to know: to request the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it.
  • Right to delete: to request deletion of personal information we collected from you, subject to legal exceptions.
  • Right to correct: to request correction of inaccurate personal information.
  • Right to opt out of sale or sharing: we do not sell personal information for money. The Google Ads tags on our customer portal (Section 1.4) may be considered "sharing" of personal information (such as cookie identifiers, IP address, and page activity) with Google for cross-context behavioral advertising. You have the right to opt out of this sharing. To opt out, email [email protected] with the subject line "Do Not Sell or Share My Personal Information." We also honor Global Privacy Control (GPC) signals sent by your browser as an opt-out request, to the extent we can identify you.
  • Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes that would require offering this right.
  • Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

Categories of personal information we collect (in the last 12 months): identifiers (such as name, email address, IP address); customer records and commercial information (such as billing details and purchase history); internet or other network activity (such as website and portal usage, including session analytics and advertising cookie identifiers); and, within DMARC report data, identifiers such as email addresses and IP addresses of people sending or receiving email using your domains. We collect it from you, from your use of the Service, from email receivers that send DMARC reports, and from our service providers. We use and disclose it for the business purposes described in Sections 2 and 3, and we may share cookie identifiers and portal activity with Google for advertising, as described above.

How to make a request: email [email protected] with the subject line "California Privacy Request." We will need to verify your identity before responding, usually by confirming information associated with your account. You may use an authorized agent. We may ask the agent for proof that you authorized them, and we may ask you to verify your identity directly. We will respond within the time required by law.

Shine the Light: California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Data we process for customers: for DMARC report data, we generally act as a service provider to our customer (the domain owner). If your information appears in a DMARC report for a domain owned by one of our customers, please contact that domain owner to make your request. We will help our customers respond as required.

8. Visitors from the European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, the UK, or Switzerland, the following also applies.

Roles. For account, billing, website, and support information, we are the controller. For DMARC report data that we process on behalf of customers, the customer is the controller and we act as a processor on their behalf. If you need a data processing agreement, contact us.

Legal bases. We process personal information: to perform our contract with you (providing the Service and processing payments); for our legitimate interests (operating, securing, and improving the Service, preventing fraud, and processing DMARC reports to protect domains against spoofing and abuse); to comply with legal obligations; and with your consent where required (for example, for certain cookies or marketing). You may withdraw consent at any time.

Your rights. Subject to applicable law, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, email [email protected].

International transfers. We are based in the United States, and our service providers may process information in the United States and other countries. Those countries may have different data protection laws from yours. Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses offered by our providers.

9. Children's Privacy

The Service is a business service. It is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

10. Third-Party Sites and Services

The Service may link to or integrate with third-party websites and services, such as your DNS provider, email providers, Stripe, or alerting tools. Their privacy practices are governed by their own policies, not this one.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For material changes, we will give reasonable notice, such as by email or in the customer portal.

12. Contact Us

DMARCShield.net
Los Angeles, California
Email (privacy requests and general questions): [email protected]