Privacy Policy
Last updated: May 17, 2026
This is a placeholder draft. Final policy will be reviewed by counsel before launch.
1. What we collect
To provide services, we collect:
- Account info: name, email, organization, billing address, phone
- Registrant info for domains you register (per ICANN requirements)
- Payment info via Stripe (we don't store card data ourselves)
- Email content stored in mailboxes you have hosted with us
- DNS records and zone configuration
- Support communications (emails to/from us)
- Usage logs (login times, dashboard activity, IP addresses)
2. Why we collect it
- To register and renew your domains (required by ICANN/registries)
- To host your email and resolve your DNS
- To bill you and account for payments
- To answer your support requests
- To investigate fraud and abuse
3. WHOIS & public records
ICANN requires registrant information to be associated with every registered domain. On TLDs that allow WHOIS privacy (.com, .net, .org, .io, .co, .ai, .xyz, .shop), we include free WHOIS privacy by default — your personal details are masked behind a proxy. On TLDs that don't allow privacy (.us, .nyc), registrant info is public per registry rules.
4. Who we share with
- OpenSRS / Tucows: our underlying registrar. Required to provide registration services.
- Domain registries (Verisign, PIR, Neustar/GoDaddy Registry, etc.): registrant info per registry policy.
- Stripe: payment processing.
- Email hosting partner: where your mailbox content actually lives.
- Legal/government: only when legally required (subpoena, court order, ICANN-mandated disclosure).
We do not sell your data. We do not run ad networks. We do not share with marketing platforms.
5. How long we keep it
Account info: as long as you're a customer + 7 years for tax records.
Mailbox content: as long as you have a mailbox with us. Deleted within 30 days of mailbox closure.
Logs: 90 days for support; 1 year for security/abuse investigation.
6. Your rights
You can request to see, export, correct, or delete your data at any time. Email hello@modusdom.com. We respond within 30 days. Note that some data (active domain registrant info) cannot be fully deleted while a domain is registered — ICANN requires it to exist.
7. Security
TLS everywhere. Bcrypt for passwords. 2FA available. Annual security review. We do not encrypt mailbox content at rest beyond what our email hosting partner provides — if you need provider-side encryption (HIPAA, attorney-client), tell us at signup.
8. Contact
Privacy questions: hello@modusdom.com