Privacy policy
Last updated: 12 July 2026
What we collect
Your email address (it's your sign-in and where alerts go), the domains you ask us to watch, and the results of the checks we run on them. If you use the full audit, we also receive the test emails you deliberately send to your private test address: we parse the technical headers and store a bounded excerpt of the content for the checks, then discard the raw message. We never connect to your inbox and never see your correspondence.
What we do with it
We run deliverability checks, watch your setup on a schedule, and email you when something breaks or — rarely — when something about your account needs attention. If you ask for AI-generated fixes or analysis, the relevant check results and email excerpts are processed by our AI provider to generate them. We don't sell data, run third-party advertising trackers, or use your data to train AI models.
Who processes it for us
Vercel (hosting), Supabase (database), WorkOS (sign-in), Stripe (payments — card details never touch our servers), Resend (the emails we send you), Cloudflare (receiving your test emails), Abusix (blocklist lookups on your domain and sending IPs) and Anthropic (AI-generated fixes and analysis). Each receives only what its job requires.
The free checker tools
The free tools on this site look up public DNS records for whatever domain is typed in. Results are cached briefly so repeat checks are instant, and requests are rate-limited by IP address. No account is created and no email address is required to use them.
Retention and deletion
We keep your account data while your account exists. Email bodies from test sends are pruned on a schedule; check results and score history are kept so we can show you trends. Want everything deleted? Email us at the address below and we'll remove your account and its data.
Your rights & contact
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Contact: support@inboxdecay.com.