Privacy Policy

EternalSender is an email trust registration and monitoring service for small businesses. You can reach us at [email protected]. This policy explains what information we handle, why, and the choices you have.

The public website does not require an account and does not use advertising or cross-site tracking cookies. We keep standard server logs (IP address, browser, requested page) for security and abuse prevention, retained for a limited period. When you email us, we keep the conversation so we can answer you and keep a record of what was agreed.

Registered clients receive an account to sign in at eternalsender.com/client. The portal holds: authentication data (your email address and a securely hashed password, we can never see the password itself); account profile (company name, primary contact); service records (registered domains, sender addresses, provider registration status, monitoring checks and monthly reports). Access is enforced by row-level security: your account can read only its own records, never another client's. Monitoring checks and reports are produced automatically by our monitoring agent and written to your account's records.

All payments are processed by Stripe on Stripe's own secure, PCI-compliant pages, this website never sees, receives or stores your card number, security code or expiry. Stripe returns only a safe display reference (for example, "Visa •••• 4242") so you can identify your card in your dashboard. Your card is stored by Stripe, and recurring subscription charges and renewal notices are handled through Stripe. For details of Stripe's own handling of payment data, see Stripe's privacy policy at stripe.com.

We never ask for and never store card numbers or security codes on this website; we never ask for your email account passwords or provider account passwords (registrations are performed in your name with your involvement); and we do not read, copy or store the contents of your email.

We share data only with the parties necessary to run the service: Stripe (payment processing, card data and charges); the portal platform provider that hosts our client login and dashboard (authentication and record storage); and public DNS resolvers used by our monitoring checks (your domain's public DNS records, which are publicly readable by design). We do not sell your data or share it with advertisers, and we do not send your information to any other third party except as required by law.

We keep service records (domains, senders, checks, reports, billing history) for as long as your account is active, and after cancellation for as long as needed to honour warranties and satisfy tax and accounting obligations. Standard website logs are retained for a shorter, limited period. You can request deletion of your data at any time (see Your choices).

Passwords are hashed with a modern algorithm by our authentication provider and are never visible to us. Data in transit is protected with TLS. Access to client records is limited by row-level security to the owning account, and administrative access to the production database is restricted to the service role used by our monitoring agent. The public website does not host any form that accepts card or password data beyond the portal sign-in described above.

You can request a copy of your data, corrections, or deletion of your account and data by emailing [email protected]. You can change or cancel your subscription at any time from the billing section of your client dashboard, or by email. Deleting your account does not erase billing records we are required to keep for tax purposes.

The service is intended for businesses and is not directed to children. We do not knowingly create accounts for anyone under 16.

If we materially change this policy we will notify active clients by email before the change takes effect, and the "Last updated" date above will change. Continued use after that date means you accept the updated policy.