Privacy Policy

Account data: name, work email, organization, and the domains you connect.

Operational data: DNS records read from public resolvers, DMARC and TLS reports forwarded to us, and metadata about the changes the Agent makes on your behalf.

Usage data: standard server logs (IP, browser, timestamps) and product analytics to understand how the service is used.

We use your data to operate the service, progress your domains toward enforcement, communicate with you about your account, and improve the product. We do not sell your data and we do not use it to train third-party models.

We share data with a small set of subprocessors that help us run the service (cloud hosting, transactional email, payment processing, customer support). The current list is available on request at privacy@authexlabs.com.

We use a small number of first-party cookies for session management and product analytics. We do not run third-party ad trackers on this site.

Under GDPR, the UK Data Protection Act, and similar frameworks, you have rights to access, correct, export, and delete your personal data. To exercise any of these, email privacy@authexlabs.com and we will respond within thirty days.

We retain account and operational data for as long as your account is active, and for a reasonable period afterwards to comply with legal obligations and to resolve disputes. Aggregate reports may be retained longer in anonymised form.

Data is encrypted in transit and at rest. Access is limited to a small number of staff on a need-to-know basis. Report any suspected vulnerability to security@authexlabs.com.

Privacy enquiries: privacy@authexlabs.com. Data controller: Authex Labs Ltd, Clyde Offices, 2nd Floor, 48 West George Street, Glasgow G2 1BP, United Kingdom.