Privacy Policy

Account Information

• Company name
• Contact name (first and last)
• Email address
• Phone number (optional)

Payment Information

• Processed securely by Square (PCI DSS compliant)
• We do not store credit card numbers
• We only store transaction IDs and amounts

Usage Information

• DNS query logs (domains, timestamps)
• Client computer names
• IP addresses (for service delivery)
• Client installation data

• Service Delivery: To provide DNS security services
• Billing: To process payments and manage subscriptions
• Support: To respond to customer inquiries
• Security: To detect and prevent threats
• Improvements: To enhance our services

We will never: Sell your data, share without consent, or use for advertising

Security Measures

• ✅ Encryption in Transit: All data transmitted over HTTPS/TLS
• ✅ Encryption at Rest: Database encryption enabled
• ✅ Access Controls: Role-based access to data
• ✅ Audit Logging: All access logged and monitored
• ✅ Rate Limiting: Protection against abuse
• ✅ Input Validation: All input sanitized and validated
• ✅ Secure Coding: OWASP best practices followed

• Account Data: Retained while subscription is active + 90 days
• DNS Logs: Retained for 90 days (for security analysis)
• Payment Records: Retained for 7 years (legal requirement)
• Deleted Accounts: All data permanently deleted within 30 days

Under GDPR and CCPA, you have the right to:

• ✅ Access: Request a copy of your data
• ✅ Correction: Update incorrect information
• ✅ Deletion: Request account and data deletion
• ✅ Portability: Export your data
• ✅ Opt-Out: Unsubscribe from marketing emails

To exercise these rights, email: privacy@htrn85dns.com

Cookies We Use

Third-Party Cookies: Square may set cookies for payment processing. See Square's privacy policy for details.

• Square: Payment processing (PCI DSS Level 1)
• Email Provider: For sending activation codes and receipts
• CDN Providers: For serving website resources

All third-party services comply with GDPR and industry security standards.

Our services are intended for business use only. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, it will be deleted immediately.

Your data may be processed in the United States or other countries. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Encryption in transit and at rest
• Regular security audits

In the unlikely event of a data breach:

• We will notify affected users within 72 hours
• We will notify relevant authorities as required by law
• We will provide details on the breach and remediation steps

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Email notification to all active customers
• Prominent notice on our website
• Update to the "Last Updated" date above

If you have any questions about this Privacy Policy or our data practices: