Privacy Policy

Infraova monitors domain infrastructure on behalf of agencies and the clients they manage. That means handling DNS records, authentication configurations, and account details but never the content of anyone's email. This page explains exactly what is collected, why, and what control you have over it.

1. What Gets Collected

Account details (name, email, organization) created at signup; domain names submitted for monitoring; the DNS records and check results generated by scanning those domains; audit and usage logs tied to actions taken in your account; and billing details handled by Dodo Payments, our payment processor.

Infraova never accesses, reads, or stores the content of any email sent or received on a monitored domain. Monitoring is limited strictly to infrastructure-level signals DNS records, authentication status, and blacklist standing.

2. How That Data Gets Used

Collected data is used to run the monitoring checks themselves, deliver the alerts and reports you've configured, diagnose and fix issues with the platform, communicate with you about your account, and meet legal obligations where applicable. Nothing collected is used for purposes outside running the service you signed up for.

3. Storage and Security

Infraova runs on Supabase's infrastructure. Data is encrypted at rest and in transit, and row-level security at the database layer makes it architecturally impossible for one organization's data to be read by another. Monitoring data is retained for as long as your account stays active, plus 90 days after cancellation long enough to recover an account that was cancelled by mistake, short enough that data doesn't linger indefinitely.

4. Data Residency

Domain and account data is currently stored in a single region on Supabase's infrastructure. Region selection at signup and custom residency arrangements for Enterprise customers are on the roadmap but not yet available if regional data placement is a requirement for your organization, contact privacy@infraova.com before signing up so we can advise honestly on whether Infraova fits today.

5. Third-Party Services

Infraova relies on a small, deliberately limited set of providers: Supabase for the database and authentication layer, Dodo Payments for billing and checkout, and Resend for delivering alert and report emails. Each is bound by its own data processing terms, and none of them receive more data than is required to perform their specific function.

6. Your Rights Over Your Data

You can request access to, correction of, export of, or deletion of your personal data at any time by emailing privacy@infraova.com. Requests are handled personally and responded to within 30 days in practice, almost always sooner.

7. Cookies

Infraova uses only the functional cookies required for login sessions and authentication to work. There are no advertising cookies, no third-party tracking scripts, and data is never sold to anyone.

8. Changes to This Policy

If this policy changes in a way that materially affects how your data is handled, you'll be notified by email or an in-dashboard notice before the change takes effect not buried in a silent update.

9. Contact

Privacy questions or data requests go straight to privacy@infraova.com.