Privacy Policy

Last updated: January 5, 2026

1. Introduction

DriftSensor ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our DNS monitoring service ("Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly, including:

  • Account Information: Name, email address, password, and company name when you create an account
  • Payment Information: Billing address and payment details (processed securely by Stripe)
  • Domain Information: Domain names you add for monitoring
  • Communication Data: Information in emails, support tickets, or feedback you send us

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

  • Usage Data: Pages visited, features used, actions taken
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, referring URLs
  • Cookies: Session and preference cookies (see Section 6)

2.3 DNS Information

To provide our monitoring service, we query publicly available DNS records for the domains you add. We do not access your DNS management credentials or make changes to your DNS configuration. The DNS data we collect includes:

  • DNS record types, names, and values
  • Historical DNS record changes
  • Security configuration data (SPF, DMARC, DKIM, etc.)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Send you alerts and notifications about DNS changes you've subscribed to
  • Process payments and send you related billing information
  • Respond to your comments, questions, and support requests
  • Send you technical notices, updates, and administrative messages
  • Monitor and analyze trends, usage, and activities in connection with our Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Personalize and improve your experience with the Service

4. Information Sharing and Disclosure

We may share your information in the following situations:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, such as payment processing (Stripe), email delivery, and hosting. These providers are bound by contractual obligations to keep personal information confidential.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share your information for other purposes with your consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
  • Access Controls: Access to personal information is limited to employees who need it to perform their jobs.
  • Infrastructure: Our infrastructure is hosted on secure cloud providers with SOC 2 compliance.
  • Authentication: We support two-factor authentication (2FA) for all accounts.
  • Regular Audits: We conduct regular security assessments and penetration testing.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information:

  • Essential Cookies: Required for the Service to function (e.g., authentication, security)
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how you use the Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

DNS monitoring data (historical records and changes) is retained according to your plan's history retention period (7 days to 1 year depending on plan).

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information
  • Data Portability: Request a copy of your data in a portable format
  • Objection: Object to processing of your personal information
  • Restriction: Request restriction of processing of your personal information

To exercise any of these rights, please contact us at privacy@driftsensor.com. We will respond to your request within 30 days.

9. Children's Privacy

Our Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us so we can take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We will also notify you via email for material changes.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Email: privacy@driftsensor.com
  • Address: San Francisco, CA, United States

For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@driftsensor.com.