Legal
Privacy Policy
This Privacy Policy explains how Stefan Lenders, operating as Lenders-IT, handles personal data in connection with the DMARC Dashboard application.
Effective date: June 11, 2026
1. Data we process
Depending on how you use the application, the service may process account information, login and security data, IMAP mailbox connection details, DMARC aggregate report data, and technical logs generated to operate and secure the service.
- User profile information such as name, email address, and account preferences.
- Authentication and security data, including password hashes, two-factor settings, and passkey metadata.
- IMAP account configuration, including encrypted mailbox credentials stored by the application.
- DMARC report content imported from configured mailboxes, including sender domains, aggregate authentication results, and related metadata.
- Operational logs used for troubleshooting, security monitoring, and service reliability.
2. Why we process data
Data is processed only as needed to authenticate users, connect to mailboxes, import DMARC reports, display analytics, secure accounts, and maintain the service.
3. How mailbox and DMARC data is used
The application reads messages from configured IMAP folders to identify DMARC aggregate reports. Relevant XML payloads are parsed and stored so the dashboard can present authentication and delivery insights. Messages may be moved to configured processed or error folders as part of mailbox housekeeping.
4. Security measures
Reasonable technical measures are used to protect stored data, including encrypted storage for sensitive credentials, authenticated access controls, and optional multi-factor authentication features.
5. Data retention
Data is retained only for as long as it is needed for service operation, reporting history, security, backup, or legal compliance. Retention periods may vary depending on account settings and operational requirements.
6. Sharing of data
Personal data is not sold. Data may be disclosed only when necessary to provide the service, comply with legal obligations, investigate abuse, or protect the rights, property, and security of the operator or users.
7. Your choices and rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may request additional information about how your data is handled.
8. Policy updates
This policy may be updated from time to time to reflect operational, legal, or product changes. The latest version will be published on this page.