Privacy Policy

Information Collection and Use

Account Information: When you create an account, we collect certain personal information, including your name, email address, and any other information you choose to provide.

Log Data: We may also collect information that your browser sends whenever you visit SeatBelt Security. This log data may include information such as your IP address, browser type and version, the pages you visit, the time spent on those pages, and other statistics.

Cookies: We use cookies to personalize your experience, analyze usage patterns, and improve the overall functionality of SeatBelt Security. You can control the use of cookies at the individual browser level, and you can change or withdraw your analytics-cookie consent at any time using the “Cookie settings” control shown on the site.

DMARC Report Data: When you enable DMARC monitoring for a domain you control, mailbox providers send us aggregate DMARC reports about email claiming to come from your domain. To show you who is sending on your behalf, we process and store data contained in these reports, including the IP addresses of sending mail servers (which may belong to third parties) and the “header-from” domains observed. This information relates to email senders rather than to you, and we use it solely to provide your domain's authentication dashboards and reports.

Information Sharing and Disclosure

We will not sell, trade, or otherwise transfer your personal information to third parties without your consent. However, we may share aggregated demographic information not linked to any personal information with third parties for the purposes of analytics or advertising.

Service Providers / Subprocessors

To operate SeatBelt Security we rely on a small number of trusted third-party providers that process data on our behalf. We only share the information needed for each provider to perform its service, and each is bound by its own data-protection terms.

• Hetzner Online (Germany): Cloud server hosting and infrastructure where our application and database run.
• Google Cloud DNS: Hosting of DNS records used to set up and delegate your email authentication (SPF, DKIM, DMARC).
• Resend: Delivery of transactional emails such as account verification, alerts, and reports.
• Rybbit Analytics: Privacy-friendly, self-hosted website analytics that help us understand how the site is used.

Data Security

We implement a variety of security measures to ensure the safety of your personal information when you enter, submit, or access your personal information. However, please note that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your account information and the data associated with your domains for as long as your account is active and you need the service. You can delete a domain at any time, which permanently removes that domain's associated data from our systems, including its scan results and stored DMARC report data. When you close your account, we delete the personal information associated with it.

We may retain limited information for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements. Privacy-friendly analytics data is kept only in aggregate to help us understand site usage, and you can opt out of analytics cookies at any time.

Your Choices

You have the right to access, update, correct, or delete your personal information. If you wish to exercise any of these rights, please contact us using the contact information provided below.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting on this page. We encourage you to review this Privacy Policy periodically to stay informed about our information practices.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at (831) 277-3525 or visit our contact page.