Privacy Policy
Effective November 11, 2026. This policy describes the InboxMonitor service operated by InboxVigil.
Who we are
InboxVigil is the operator of InboxMonitor. The operator is Kris Lind, Wisconsin, USA. An LLC is to be formed. Until then, InboxVigil is the operator name. Contact support@inboxvigil.com.
Account data
We store the email address you use to sign up, your name, and a password hash if you set a password. We also store the workspace name, client names, the sending domains you add, any DKIM selectors you add, and the history of DNS check results for those domains.
Billing
If you subscribe, Stripe processes your card. We store the Stripe customer ID and subscription IDs needed to manage the plan, the price you selected, trial dates, and invoice status. We do not store your full card number.
Sign-in links, alerts, and the weekly digest are sent through an email delivery provider to the address on the account or the workspace alert address. The message contains the alert text and a link back to your workspace.
Vigo
Questions you ask Vigo are sent to an AI model provider, Google Gemini through the Vercel AI Gateway, to generate the answer.
The “Want a person to reply?” form asks for your email and the message so support can respond. We store those and send them to support@inboxvigil.com.
Service providers
The service runs on Vercel for hosting, Neon for the database, and Stripe for payments. Email is sent through an email delivery provider.
Slack
If you add a Slack webhook on a plan that includes Slack, we store that URL and post alert messages to it. Slack then receives the alert text.
Shared reports
On plans that include client reports, a report page is available at a link we generate. Anyone with the link can view the report. Share it only with intended recipients. On Agency Pro, a name and logo URL you set can appear on that report instead of InboxVigil.
Domain and DNS data
For each domain you add, we query public DNS for SPF, DKIM, DMARC, MX, and reverse DNS, and we query two IP blocklists, PSBL and 0spam. Domain-based lists and Spamhaus are not included yet. We also request the registration date from RDAP when a registry publishes it. We do not send mail from the domains you monitor.
Cookies and sessions
We set a session cookie so you stay signed in. It identifies the session on our server. We do not use it for advertising.
Retention
We keep account, domain, and check data while the workspace is open. You can ask us to delete the workspace by emailing support@inboxvigil.com. We delete the workspace data after we verify the request, except billing records Stripe retains and anything we must keep for a legal claim.
Contact
Questions about this policy: support@inboxvigil.com.