Version: 1.0
Effective Date: October 9, 2026
DMARC Viewer ApS ("DMARCViewer", "we", "us", or "our") respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR), applicable Danish data protection legislation, and other applicable laws.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit dmarcviewer.com, create an account, use our services, or contact us.
For personal data processed for our own business purposes, the Data Controller is:
DMARC Viewer ApS
VAT No.: DK46747755
Registered address: [Insert registered business address]
Denmark
Email: legal@dmarcviewer.com
Website: https://dmarcviewer.com
Where we process DMARC report data on behalf of a Customer, that Customer ordinarily acts as Data Controller and DMARC Viewer ApS acts as Data Processor under our Data Processing Agreement.
Depending on your interaction with the Service, we may process:
Account information
Technical information
Billing information
Payment card information, where applicable, may be handled by an external payment service provider. The provider and its processing arrangements must be identified in the applicable payment information.
Customer-controlled DMARC information
Communications
We process personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Creating and managing individual accounts | Article 6(1)(b), contract |
| Providing subscribed services to individual customers | Article 6(1)(b), contract |
| Managing business customer representatives | Article 6(1)(f), legitimate interests |
| Billing, bookkeeping, and tax compliance | Article 6(1)(c), legal obligation |
| Responding to inquiries | Article 6(1)(b) or 6(1)(f), as applicable |
| Preventing abuse and protecting infrastructure | Article 6(1)(f), legitimate interests |
| Complying with legal requests | Article 6(1)(c), legal obligation |
| Optional marketing communications | Consent under Article 6(1)(a), or another lawful basis where permitted |
| Non-essential analytics or cookies | Consent where required |
Our legitimate interests include operating a secure SaaS platform, preventing fraud, maintaining business communications, and improving reliability.
Where consent is required, you may withdraw it at any time without affecting the lawfulness of processing performed before withdrawal.
Where we act as Data Processor for Customer DMARC data, the Customer is responsible for establishing the relevant legal basis.
DMARCViewer processes DMARC reports to help Customers understand email authentication performance and identify potential configuration problems or unauthorized sending activity.
Aggregate reports (RUA) ordinarily contain authentication metadata, IP addresses, domain information, and related technical information.
Forensic reports (RUF) may contain email addresses, headers, excerpts, message content, and potentially sensitive information.
Customers are responsible for ensuring that reporting configurations and submitted information comply with applicable law.
We do not use Customer-controlled report data for independent advertising or unrelated profiling.
DMARCViewer may use cookies or similar technologies necessary for:
Optional analytics, personalization, or marketing technologies shall be used only where permitted by applicable law, including obtaining prior consent where required.
Users must be able to refuse or withdraw consent to non-essential technologies without losing access to functionality that does not depend on them.
Where non-essential technologies are deployed, the website shall provide appropriate information about their purposes, providers, and duration.
We may disclose personal data to authorized service providers where necessary for legitimate operational purposes.
Providers identified in our Terms and Conditions include:
The extent to which each provider processes personal data depends on the services actually supplied.
We may also disclose information to competent authorities where required by applicable law.
We do not sell personal data.
Emails sent to support@dmarcviewer.com and legal@dmarcviewer.com may be automatically forwarded to authorized personnel at Computernørden ApS, a separate Danish legal entity providing technical and administrative support.
Such communications may contain personal data.
They shall be processed for responding to inquiries, providing support, administering the Service, and fulfilling applicable legal obligations.
Where Computernørden ApS acts as a processor, an appropriate Article 28 GDPR agreement shall govern the processing.
We seek to protect personal data in accordance with European data protection requirements.
Where personal data is transferred outside the European Economic Area, we shall ensure that an appropriate legal mechanism applies, such as:
Additional safeguards shall be implemented where required.
Information about relevant transfers and safeguards may be requested through legal@dmarcviewer.com.
We retain personal data only as long as necessary for the relevant purpose or as required by applicable law.
The following categories are subject to documented retention schedules:
| Category | Retention principle |
|---|---|
| Account information | During account operation and the applicable post-closure retention period |
| Domain configurations | While required for the Service and the applicable deletion period |
| RUA reports | According to the documented report retention schedule |
| RUF reports | According to the documented forensic report retention schedule |
| Historical statistics | According to the applicable plan and retention schedule |
| Support correspondence | As long as reasonably necessary for support, disputes, and legal obligations |
| Billing and accounting records | For the applicable statutory accounting retention period |
| Security logs | According to the documented security log retention schedule |
| Backups | Until overwritten or deleted under the documented backup schedule |
The specific retention durations must be published in this section before this Policy is finalized.
Following account closure, personal data shall be deleted or anonymized according to the applicable schedule, unless continued retention is legally required.
Where DMARC Viewer ApS acts as Data Processor, Customer-controlled data shall also be handled according to the applicable Data Processing Agreement.
We implement appropriate technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, and destruction.
Measures include, as applicable:
Security measures are reviewed in light of relevant risks.
Subject to applicable GDPR requirements and limitations, you may have the right to:
To exercise your rights concerning data controlled by DMARC Viewer ApS, contact legal@dmarcviewer.com.
We will respond within the time limits required by applicable law, ordinarily within one month.
Where your request concerns data controlled by one of our Customers, we may direct you to that Customer.
If you believe your personal data has been processed unlawfully, you may lodge a complaint with:
Datatilsynet — Danish Data Protection Agency
Website: https://www.datatilsynet.dk
You may also have the right to complain to the competent supervisory authority in another EU or EEA Member State.
The Service is intended for adults and persons authorized to represent organizations.
We do not knowingly offer accounts to children.
Personal data relating to minors may nevertheless appear incidentally in Customer-controlled DMARC reports. Such processing remains subject to applicable law and the relevant Data Processing Agreement.
DMARCViewer automatically analyzes technical email authentication data and generates statistics, alerts, and recommendations.
These activities are intended to evaluate email authentication and infrastructure security.
The Service is not intended to make solely automated decisions about individuals that produce legal or similarly significant effects within the meaning of Article 22 GDPR.
Certain information, such as account identifiers and authentication details, is necessary to provide the Service.
Without this information, we may be unable to create or maintain an account.
Optional information is identified as such where collected.
We may update this Privacy Policy to reflect legal, technical, or operational changes.
The latest version and its effective date will be published on our website.
Where changes materially affect the processing of personal data, we will provide appropriate notice and obtain consent where legally required.
For privacy inquiries, data subject requests, or questions concerning this Policy:
DMARC Viewer ApS
VAT No.: DK46747755
Denmark
Email: legal@dmarcviewer.com
Website: https://dmarcviewer.com
This Privacy Policy should be read together with our Terms and Conditions and, where applicable, our Data Processing Agreement.