Privacy policy

What we process

Alignmarc analyzes aggregate authentication reports. Those reports contain no message content: only authentication statistics per sending IP address — volume, SPF and DKIM results, and the disposition applied. We neither request nor process forensic reports (the ruf tag), which would carry headers from real messages and therefore third parties’ personal data.

Account data

We keep your name, your email address, your password as a hash, and, for paid accounts, the billing information required. Payments are processed by Stripe: we store no card data.

Location and retention

The servers and the database are in France, at Scaleway. Report reception passes through the European region of our email provider, the only link outside France. The original XML reports are archived, encrypted at rest, for thirteen months, then purged automatically. Aggregated data follows the history depth of your plan.

Processors

Mailgun (European Union region) for report reception, Scaleway (France) for infrastructure, Stripe for payments, and Flare (European Union) for technical error reporting. Flare receives neither your IP address, nor your cookies, nor your session content, all of which are stripped before sending. A standard data processing agreement is available on request.

Your rights

You have the right to access, rectify, erase, restrict and port your data. Deleting your account from your settings erases all of your domains, reports and archives. You may also lodge a complaint with the CNIL, the French data protection authority.

Cookies

We set one session cookie, strictly necessary for authentication to work. No advertising trackers, no third-party analytics. Fonts are hosted on our own infrastructure: no request is made to any third-party service when a page is displayed.