Privacy Policy

This is a placeholder draft. Final policy will be reviewed by counsel before launch.

1. What we collect

To provide services, we collect:

• Account info: name, email, organization, billing address, phone
• Registrant info for domains you register (per ICANN requirements)
• Payment info via Stripe (we don't store card data ourselves)
• Email content stored in mailboxes you have hosted with us
• DNS records and zone configuration
• Support communications (emails to/from us)
• Usage logs (login times, dashboard activity, IP addresses)

2. Why we collect it

• To register and renew your domains (required by ICANN/registries)
• To host your email and resolve your DNS
• To bill you and account for payments
• To answer your support requests
• To investigate fraud and abuse

3. WHOIS & public records

ICANN requires registrant information to be associated with every registered domain. On TLDs that allow WHOIS privacy (.com, .net, .org, .io, .co, .ai, .xyz, .shop), we include free WHOIS privacy by default — your personal details are masked behind a proxy. On TLDs that don't allow privacy (.us, .nyc), registrant info is public per registry rules.

4. Who we share with

• OpenSRS / Tucows: our underlying registrar. Required to provide registration services.
• Domain registries (Verisign, PIR, Neustar/GoDaddy Registry, etc.): registrant info per registry policy.
• Stripe: payment processing.
• Email hosting partner: where your mailbox content actually lives.
• Legal/government: only when legally required (subpoena, court order, ICANN-mandated disclosure).

We do not sell your data. We do not run ad networks. We do not share with marketing platforms.

5. How long we keep it

Account info: as long as you're a customer + 7 years for tax records.
Mailbox content: as long as you have a mailbox with us. Deleted within 30 days of mailbox closure.
Logs: 90 days for support; 1 year for security/abuse investigation.

6. Your rights

You can request to see, export, correct, or delete your data at any time. Email hello@modusdom.com. We respond within 30 days. Note that some data (active domain registrant info) cannot be fully deleted while a domain is registered — ICANN requires it to exist.

7. Security

TLS everywhere. Bcrypt for passwords. 2FA available. Annual security review. We do not encrypt mailbox content at rest beyond what our email hosting partner provides — if you need provider-side encryption (HIPAA, attorney-client), tell us at signup.

8. Contact

Privacy questions: hello@modusdom.com