Effective September 2026.
senderframework.com is an email authentication monitoring service. In this policy, "we" and "us" mean senderframework.com, and "you" means anyone who uses our website or service.
Questions about privacy: support@senderframework.com
Our website, the free domain check, the paid service, and the emails we send you. It does not cover other companies' websites that we link to.
| Your account | Your name or company name, your email address, and your password, which we store only in a scrambled form we cannot read back. We also record when you sign in, and, if the link that brought you to us said so, its campaign name and the site you came from. |
| Billing | Your plan and whether it is paid. Card details go straight to our payment processor; we never see or store your card number. |
| Your domains | The domains you add, and their public DNS records, which anyone on the internet can already look up. We keep a history of what we find. To see whether your domain, your mail servers or the servers that send email as you are on a spam list, we look them up on public spam lists such as SpamCop, PSBL, SURBL and URIBL. Each lookup shares only a domain name or a server's internet address, nothing else. |
| DMARC reports | Reports that email providers such as Google and Microsoft send us because your DNS asks them to. They list the servers that sent mail as your domain, how many messages, and whether those messages passed authentication. |
| Safe delivery (TLS) reports | If your DNS asks for them, email providers send us a daily count of how many of their emails to you arrived over a private connection, and for any that didn't, the reason, your mail server's name and address, and the address of their server that tried. They carry no message content and nothing about who wrote to you. |
| Test messages | Messages you choose to send to your test address. We keep their headers (sender, recipients, subject and the servers they passed through) and our review of them. We read the body only to look for an unsubscribe link, then discard it. |
| The free check | The domain you type in. We keep the result for about an hour so a repeat visit is quick, and your internet address briefly, to stop the tool being overused. |
| The free email test | Your email address, when you asked, the internet address you asked from, and when you clicked the confirmation link, and, if the link that brought you to us said so, its campaign name and the site you came from. When you send us your test email, we keep only its result: pass or fail for each check, a score, and the problems we found. We don't keep the email itself, what it says, or its headers. |
| Tips and offers | Only if you tick the box for them: when you agreed, the internet address you agreed from, and the exact words you agreed to. Every one of these emails has a link to stop them, and stopping is one click. |
| Emails we send you | A record of each one (the address, the type and the date), so we can show it was sent and never send it twice. |
| Support | What you write to us, and our replies. |
| Server logs | Our web server records internet addresses, the pages requested, your browser's name and the page that linked to us. We use these logs for security, to fix problems, and to count visits: how many people came, which pages they read and which sites sent them. We count them ourselves; no analytics company sees them. We don't set any cookie or store anything in your browser to do it. |
DMARC reports contain no message content, no subject lines and no recipient addresses. The only email content we ever handle is a test message you send us yourself, and its body is discarded once checked. We don't buy information about you from anyone.
We don't use your information for advertising, and we don't use it to train AI models.
We use two small cookies, both needed for the site to work: one keeps you signed in, and one stops other websites from submitting our forms in your name. There are no analytics, advertising or tracking cookies, and our emails don't track whether you open them or click their links.
Only the companies that help us run the service, and only what each one needs:
| Stripe | Takes card payments and keeps billing records. |
| Postmark | Delivers the alerts and reports we send you. |
| Our hosting provider | Runs the servers the service and its data live on. |
| Backup storage | Holds our backups, which are encrypted before they leave our servers, so the storage company cannot read them. |
We will also share information if the law requires it, such as a valid court order, or to protect someone's safety. If senderframework.com is ever sold or merged, your information would move to the new owner under this same policy, and we would tell you first. We never sell your information.
DMARC reports show how a company's email is set up, so we guard them closely. A domain's report data is shown only to the account that has proved it controls that domain, by publishing its own reporting address in the domain's DNS. Adding a domain is not enough, and there is no way around this rule, even for our own staff.
On servers in the United States. If you use the service from another country, your information is sent to and handled in the United States under this policy.
| Test-message headers | 10 days, then deleted. A one-line result for each sending service is kept up to 90 days, so monitoring knows which of your services sign correctly. |
| Raw report emails | 90 days, in case a report needs to be read again. |
| Your domains' data | While the domain is on your account. When you remove a domain or close your account, everything about that domain is deleted 90 days later, so someone who comes back doesn't lose their history. Ask us and we will delete it sooner. |
| Free check results | About an hour. |
| Web server logs | 90 days, then deleted. |
| Free email test | If you never click the confirmation link, 7 days. Otherwise 90 days, unless you asked for tips and offers: then we keep your address until you unsubscribe, and delete it within 90 days after that. |
| Billing records | As long as tax and accounting law requires. |
| Backups | Our encrypted backups expire on a rolling schedule, so information we delete also leaves the backups. |
No system is perfectly secure. If we ever learn of a breach that affects your information, we will tell you promptly and explain what happened.
Depending on where you live, such as California or the European Union, the law may give you more rights, like objecting to how we use your information or complaining to a data protection authority. We honor these requests from everyone, wherever you live. We use your information because we have a contract with you, and because we have a legitimate interest in running and securing the service. Write to support@senderframework.com and we will answer within 30 days.
senderframework.com is a business service and isn't meant for anyone under 16. If we learn we have information from a child, we will delete it.
If we change this policy, we will update the date at the top. If a change is significant, we will email account holders before it takes effect.
support@senderframework.com