Security and data

We store the account email, name, and password hash, the workspace and client names, the domains you add, DKIM selectors you save, check history, alert settings, and billing IDs from Stripe. We do not store full card numbers. We do not ask for mailbox passwords, 2FA codes, or API keys.

The app is hosted on Vercel. The database is Neon. Checks read public DNS and public RDAP and blocklist data. We do not send mail from the domains you monitor.

Check history stays with the workspace until you remove a domain or delete the account. Deleting the account removes the workspace data we store. Email us at support@inboxvigil.com to ask for a copy or a deletion. The Privacy Policy is the longer version.