Privacy
Your infrastructure is visible. Your email isn't.
Infraova needs access to the infrastructure that keeps domains and email running — DNS records, authentication configuration, reputation signals, and operational events. It does not need access to the contents of your emails.
Last updated: September 3, 2026
Infrastructure data
DNS · authentication · reputation · certificates
Never accessed
Email contents · messages · attachments
Your control
Access · export · correction · deletion
What Infraova processes
Infrastructure data — not email contents.
Infraova operates at the infrastructure layer. Monitoring a domain does not require reading the emails sent through that domain.
Infraova can process
Infraova does not access
Why we collect data
We collect only what the service needs to operate.
Run monitoring
Collect technical infrastructure information needed to perform health checks across monitored domains.
Operate workflows
Maintain proposals, approvals, remediation results, verification results, and operational history.
Send alerts and reports
Use your configured communication details to deliver notifications and PDF reports.
Run your account
Store account, organization, team, billing, and usage information required to provide Infraova.
Connected infrastructure
When you connect infrastructure.
Connecting a provider gives Infraova access to the infrastructure capabilities required by that integration. That access is used to monitor, detect, propose, and — when approved — execute remediation changes.
↓ Connect
↓ Read infrastructure state
↓ Monitor
↓ Detect a problem
↓ Propose a change
You approve · Human decision required
↓ Execute approved change
↓ Verify
↓ Record
Infrastructure changes that fall within Infraova's remediation workflow require an explicit approval from an authorized user before execution. A connected provider gives Infraova the access required to operate — not the right to act without a decision.
Data protection
Built around organizational isolation.
Encryption
Data is encrypted in transit and at rest across all stored and transmitted information.
Organization isolation
Database-level controls separate organization data. One organization cannot access another's data.
Access controls
Access is limited according to account and organizational role permissions.
Operational records
Important infrastructure actions are recorded with timestamps and associated users for accountability.
Infraova is built on Supabase's infrastructure, which is SOC 2 Type II certified. Infraova itself has not completed an independent SOC 2 certification. If compliance certification is a requirement for your organization, contact us before signing up.
Data residency
Where your data is stored.
Domain and account data is currently stored in a single region on Supabase's infrastructure.
Current
Single-region storage
All data stored in one region on Supabase infrastructure
Planned
Regional selection
Custom Enterprise residency options in development
If regional data placement is a requirement for your organization, contact privacy@infraova.com before signing up so we can advise whether Infraova currently fits your requirements.
Third-party services
A deliberately limited set of providers.
Each provider receives only the information necessary for its role in providing the service.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database and authentication | Account and infrastructure data |
| Dodo Payments | Billing | Billing information |
| Resend | Alert and report delivery | Email addresses and message metadata required for delivery |
Your control
You control your data.
Access
Request the personal data associated with your account.
Correct
Ask us to correct inaccurate information.
Export
Request an export of your data.
Delete
Request deletion of your personal data.
Requests are handled personally and normally answered within 30 days.
Cookies
Functional cookies only.
Infraova uses functional cookies required for authentication and login sessions. Nothing else.
Policy changes
If our data practices change, we'll tell you.
Material changes to this policy will be communicated by email or through an in-dashboard notice before they take effect. We will not make material changes to how we handle your data without telling you first.
Questions
Questions about privacy?
Privacy questions and data requests go directly to our team.
privacy@infraova.com