Privacy notice

Pistos DMARC is a product of Pistos Trust Labs. In this notice, “we” means Pistos Trust Labs, operating Pistos DMARC.

When you use the early access or contact form we collect your name, work email, company if you give it, the domain you name, and your message. We use it to reply to you and to set up your account. We do not sell it, and we do not send marketing email to people who only contacted us with a question.

Form submissions are stored on our servers and emailed to our team. To limit abuse we also keep your IP address and browser identifier with the submission and a short-lived rate-limit record.

This website does not use advertising trackers.

When you use Pistos DMARC, mailbox providers send DMARC reports about your domain to us. Aggregate reports contain sending IP addresses, message counts and authentication results. They do not contain message content.

Forensic (failure) reports, where you enable them and a receiver sends them, can contain message headers and part of a message, and may include personal data such as email addresses. They are processed to show you why a message failed, are available only to your account, and are removed after a retention period we state in the product.

Form submissions are kept while we are dealing with your request and for a reasonable period afterwards. Account data and reports are kept while you have an account, and deleted when you ask us to close it, except where we must keep a record by law.

You can ask to see, correct or delete the personal data we hold about you by emailing hello@pistosdmarc.com. We will reply within a reasonable time.

If we change this notice in a way that matters, we will say so on this page and, for account holders, by email.