Privacy Policy

1. Introduction

DNS Assistant ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our DNS and WHOIS monitoring service ("the Service"). By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

Account Information: When you register, we collect your username, email address, and password (stored using 256 bit hashing). Organization administrators may provide additional details such as organization name and billing email.

Billing Information: Payment processing is handled by Stripe. We do not store credit card numbers. We retain transaction records including amounts, dates, and subscription status.

DNS and WHOIS Data: We store DNS query results and WHOIS lookup data for the domains you add to the Service. This data is used to provide monitoring, change detection, and alerting functionality.

Usage Data: We collect information about how you interact with the Service, including login timestamps, IP addresses, API usage, feature usage, and token consumption.

Audit Logs: We maintain audit logs of significant account actions for security and compliance purposes, including login attempts, configuration changes, and alert acknowledgments.

3. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Service; process transactions and manage subscriptions; send alerts and notifications based on your configured preferences; detect and prevent security incidents, fraud, and abuse; enforce our Terms of Service and acceptable use policies; communicate with you about service updates, maintenance, and support; generate anonymized, aggregate analytics to improve our platform.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: We use third-party services including Stripe (payments), email delivery provider, SMS provider, and WHOIS data providers. These providers only receive data necessary to perform their services.

Within Your Organization: Organization administrators can view usage data, domain records, and alert history for users within their organization, as defined by the role-based access control system.

Legal Requirements: We may disclose information if required by law, subpoena, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

We retain your account data for as long as your account is active. DNS and WHOIS monitoring data is retained according to your subscription plan's history limits. Audit logs are retained for security and compliance purposes. Upon account deletion, we remove your personal data within 180 days, except where retention is required by law or for legitimate business purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing of your data; request data portability; withdraw consent where processing is based on consent. To exercise these rights, please contact us at the email below.

7. Cookies and Tracking

The Service uses essential cookies for authentication and session management.

8. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to such transfers.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us.