Privacy Policy

Last updated October 25, 2026

Who we are

DKIMkit is operated by Praveen Kumar, India, which is responsible for your personal data. Contact: pk9880651678@gmail.com.

What we collect

• Account details: your email address and the name you give us.
• Credentials you provide: email provider API keys and DNS provider tokens or keys. They’re encrypted at rest and used only to perform the operations you request. Our own API keys are stored only as one-way hashes.
• Domain data: domain names, DNS records, verification status, and any tenant ids or metadata you send with them.
• Usage records: which domains were active on which days, used to calculate usage and bills.
• Technical data: IP addresses and request details in our server logs, used for security, rate limiting and troubleshooting.

Cookies

We use one cookie, a session cookie that keeps you signed in to the dashboard. It’s strictly necessary for the Service. We don’t use advertising or analytics cookies, and we don’t track you across other sites.

How we use it

To provide and secure the Service, send sign-in emails and service notices, calculate usage, respond to you, and meet legal obligations. We don’t sell personal data, and we don’t use it for advertising.

Who we share it with

Only service providers that help us run the Service, under appropriate safeguards:

• The email provider you connect (SendGrid, Postmark, Mailgun or Amazon SES): to authenticate your domains.
• Twilio SendGrid: sending our sign-in emails.
• DNS providers you connect (such as Cloudflare or Amazon Route 53): to manage the records you ask us to.
• Our hosting and database providers: to store and run the Service.

We may also disclose data when the law requires it.

International transfers

Our providers may process data in countries other than yours. Where the law requires it, we rely on appropriate safeguards for these transfers.

How long we keep it

Account data, credentials and domain data are kept while your account exists, and credentials are deleted as soon as you remove them or the domain. When you delete a domain, its usage records stay, because we need them for billing and accounting. When your account is closed, we delete your data within 30 days, except records we must keep by law. Server logs are kept for a limited time for security.

Security

Connections use HTTPS. Credentials are encrypted with AES-256-GCM and API keys are hashed. Access to production systems is restricted. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires it.

Your rights

Depending on where you live, including under the EU and UK GDPR and India’s Digital Personal Data Protection Act, 2023, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. To exercise them, email pk9880651678@gmail.com. You can also complain to your data protection authority.

Your customers’ data

If you use the Service for your own customers, you decide what data you send us about them, and we process it on your behalf to provide the Service.

Children

The Service is for businesses and isn’t intended for children.

Changes

We’ll post updates here and tell you by email about significant changes.