Privacy Policy

1. Who Is Responsible for Your Data

DNSly is operated by Mykyta Uvarov Serhiyovych (Individual), Gagarina 32, Zhytomyr, 10002, Ukraine, who is the data controller for the personal data described in this policy. You can reach us at any time at support@dnsly.co. Full company and billing details are in our Terms of Service.

2. Data We Collect

When you use DNSly, we collect the following information:

• Account Information: Email address, first name, last name, company name
• Contact Details: Country and phone number (optional)
• Professional Information: Job title (optional)
• Domain Data: Domains you add to monitor, DNS records, and blacklist check results
• Usage Data: Login history, feature usage, and service interactions
• OAuth Data: If you sign up with Google, we receive your name, email, and profile picture from Google

3. How We Use Your Data

We use your information for the following purposes:

• To provide and maintain the DNSly service
• To send alerts about your domain health and blacklist status
• To send transactional emails (account confirmation, password resets, billing)
• To communicate important service updates and changes
• To provide customer support and respond to your inquiries
• To improve and optimize our service
• To prevent fraud and ensure security

We never sell your data to third parties, and we do not sell, licence or supply contact lists, lead data or marketing data to anyone.

4. Third-Party Services

DNSly uses the following third-party services to operate:

• Supabase: Database and authentication services (data stored in secure cloud infrastructure)
• Vercel: Hosting and deployment platform
• Resend: Delivery of transactional email to your own account address (sign-up confirmation, password reset)
• Paddle.com Market Ltd. (Paddle): Payment processing. Paddle is the Merchant of Record for all DNSly orders and handles checkout, invoicing and tax. We never see or store your card details.
• Telegram: Only if you choose to connect a Telegram chat for alerts. We send your domain alert notifications to the chat ID you link; you can disconnect at any time.

These services have their own privacy policies and security measures. We carefully select providers that maintain high security standards and comply with data protection regulations.

DNSly also queries public DNS resolvers, public DNSBL (blocklist) zones and RDAP registry services to perform its checks. These queries contain the domain or IP address being checked and no personal data about you.

5. Cookies

DNSly uses essential cookies only for authentication and maintaining your login session. We do not use tracking cookies or third-party advertising cookies. Session cookies are automatically deleted when you log out or close your browser.

6. Your Rights (GDPR)

If you are located in the European Union, you have the following rights under GDPR:

• Right to Access: Request a copy of all data we have about you
• Right to Rectification: Update or correct your personal information
• Right to Erasure: Request deletion of your account and associated data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to certain data processing activities
• Right to Restrict Processing: Request limitation of how we use your data

To exercise any of these rights, please email support@dnsly.co. We will respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. When you close your account, we delete your personal information within 30 days. Domain monitoring history and check results are anonymized and may be retained for service improvement and analytics purposes.

8. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using HTTPS/TLS
• Passwords are hashed using bcrypt
• Row-Level Security in the database, so each account can only read its own domains and scan results
• Regular dependency and security updates
• We never request or store your mailbox credentials and never read the contents of your email

9. Children's Privacy

DNSly is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email at least 14 days before the changes take effect. Continued use of DNSly after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Mykyta Uvarov Serhiyovych — Individual
Gagarina 32, Zhytomyr, 10002, Ukraine
support@dnsly.co