Privacy Policy
Last updated August 22, 2026
What we collect
When you run a scan, we process the domain name you submit and, if you choose to provide one, an email address (for example, when requesting a manual audit after reaching the free-scan limit). We don't require an account or any personal information to run a scan.
If you connect a sending platform (Instantly or Smartlead), we read your domain list to populate your workspace. We don't read campaign content, lead lists, or reply data.
Why we collect it
Domain names are used to run the DNS and blacklist lookups you requested. That's the product. Email addresses are used only to respond to the specific request you made when you gave one (sending an audit, following up on early access), not for unrelated marketing.
How it's stored
Scan-lead records (domain, score, and email address if provided) are stored in a Supabase (Postgres) database. The application connects with write-only access to this data through row-level security. It cannot read captured email addresses back out through its normal access path. Only the database owner can query this table directly.
What we don't do
We don't sell personal data. We don't share it with third parties for their own marketing. We don't use tracking cookies or third-party ad pixels on this site today.
Retention
Scan-lead records are retained so we can respond to the request associated with them and to maintain scan history for the domains you've checked. Rate-limit counters (used only to enforce the free-scan quota) are automatically deleted after 24 hours.
Your rights
You can request a copy of any data associated with your email address, or ask us to delete it, by emailing kasper@zachodigital.com. We'll respond within a reasonable time.
Changes to this policy
If this policy changes materially, we'll update the date above. We don't currently have a mailing list to notify separately.