Privacy policy

Who is responsible for your data

This policy is published by the administrator of the blacklistmonitoring.com service ("we", "us"). You can reach us about anything in this policy at [email protected].

What we collect

• Account data. Your email address, a hashed password, your workspace name and the settings you choose.
• Monitoring data. The domains, IP addresses and ranges you add, the results of our DNS checks, alert settings and the addresses of channels such as Slack or webhook URLs.
• DMARC reports. Aggregate reports sent by mailbox providers to the reporting address of your workspace. They contain sending IP addresses, message counts and authentication results, not message content.
• Reputation data. If you connect a mailbox provider reputation source, we read the domain and IP reputation and spam rate data it exposes, with read-only access.
• Inbox placement tests. The test messages you send to our seed mailboxes and where they landed.
• Free check. The domain or IP you type, the result, and a one-way hash of your IP address, kept to allow one free check per visitor.
• Billing data. Plan, invoices and payment status. Card details are entered on the payment operator's page and never reach our servers.
• Technical logs. IP address, browser and request logs used for security and troubleshooting, kept for up to 30 days.

Why we use it

To run the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interest), to send account and alert emails you asked for (contract), and to meet tax and accounting duties for paid plans (legal obligation). We do not sell personal data and do not use it for advertising.

Who receives it

We share data only with service providers that help us run the service, under contracts that limit their use of it: a hosting provider in the European Union, a payment operator, an email delivery provider for account and alert emails, and the messaging tools you connect yourself (for example your Slack workspace or webhook endpoint). We do not use third-party advertising or analytics trackers.

Cookies

We set only cookies that the service needs to work: a session cookie, a security token that protects forms, and a cookie that remembers that you are signed in. There are no advertising or tracking cookies, which is why we do not show a cookie banner.

How long we keep it

Monitoring history is kept for the history period of your plan. When you delete a domain, its history is deleted. When you delete your account, your data is deleted within 30 days, except invoices that the law requires us to keep.

Your rights

You can access, correct, export or delete your data, object to processing or ask us to restrict it. Most of this is available in your account settings. For anything else write to [email protected]. If you are in the EU or UK you can also complain to your local data protection authority.

International transfers

Some providers may process data outside your country. Where that happens we rely on standard contractual clauses or an equivalent safeguard.

Changes

We will post any change on this page and, for material changes, email account owners before it takes effect.