Privacy Policy

1. Data We Collect

• - Account data: email, profile fields (name, company, timezone), authentication metadata.
• - Service data: domains submitted, scan outputs, monitoring statuses, support chat content.
• - Billing data: subscription status and identifiers from payment providers (not full card details).
• - Technical data: IP/log data for security, fraud prevention, and service reliability.

2. How We Use Data

• - To deliver product functionality (analysis, guided repair, monitoring, account access).
• - To process subscriptions and enforce plan-level entitlements.
• - To provide customer support and operational notifications.
• - To improve performance, security, and abuse detection.

3. Legal Bases (where applicable)

• - Contract necessity (service delivery, billing, account management).
• - Legitimate interests (security, fraud prevention, platform integrity).
• - Legal obligations (tax, accounting, lawful requests).
• - Consent where required by law (for specific communications/cookies, if enabled).

4. Data Sharing

• - With infrastructure and payment processors strictly required to run the service.
• - With legal authorities only when legally required.
• - We do not sell personal information to third parties.

5. International Transfers

If data is transferred across borders, we apply appropriate safeguards recognized by applicable law (for example, contractual safeguards and equivalent protection controls where required).

6. Data Retention

• - We keep personal data only as long as necessary for service, compliance, and dispute handling.
• - Retention periods vary by data category and legal obligations.
• - Data may be deleted or anonymized when no longer needed.

7. Security

• - We apply technical and organizational safeguards (access controls, least privilege, audit logging).
• - No system is perfectly secure; users should also protect credentials and endpoints.

8. User Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, or request portability of your data. EEA/UK users may also file complaints with local supervisory authorities. US residents may have state-specific rights under applicable privacy statutes.

9. Children

MailFix is not intended for children under the age threshold defined by applicable law in your region.