Privacy

Last updated October 14, 2026

Who is responsible

The controller of personal data processed through EmailSecOps is Savas OÜ, registry code 14062178, VAT EE101896809, Sepapaja tn 6, 15551 Tallinn, Estonia .

What we collect

Account details (name, email, password hash, and the early-access products you tick at signup), team and billing details you enter, the domains you add and the results of the checks we run on them, DMARC aggregate reports you route to us, alert destinations you configure, and API usage logs (route, status, timestamp, IP).

DMARC reports

Aggregate reports contain sending IP addresses and counts, not message content. We store the raw report files so the parsed data can be rebuilt, for as long as your plan's history window. Forensic (ruf) reports are not accepted.

Free tools

Inputs to the public tools are cached for ten minutes to absorb repeated lookups and are not linked to a person. Requests are rate-limited by IP.

Contact and early-access requests

When you write to us through the contact form we keep your name, email address and message, and, if you are signed in, your account and team, to answer you and, for an early-access request, to invite you when the product opens. Ask us to delete them at any time.

Processors

Stripe for payments, Cloudflare for content delivery, DNS and the bot check on the contact form, our hosting and email providers for running the service and delivering alerts and invitations. We do not sell data and we do not send marketing email to your monitored domains.

AI assistants you connect

If you connect an AI assistant (Claude, ChatGPT, Cursor or another MCP client), the results its tools request are sent to that assistant's provider and handled under its terms. You can revoke the connection at any time.

Your rights

Export or delete your data any time by removing domains and the team, or by writing to Savas OÜ at the address above. Deleting a team removes its domains, checks, reports and alerts.