Grow with us: Join Postmark's new referral partner program and start earning
Learn more
x

Privacy Policy

Effective Date: May 3, 2022

This Privacy Policy applies to the websites www.dmarcdigests.com and www.postmarkapp.com (the “Sites”), together with the Postmark and DMARC Digests web applications and services (the “Services”), owned and operated by AC PM LLC (collectively, “AC PM”, “we”, “us”, or “our”). This Privacy Policy describes how AC PM collects, uses, shares and secures the personal information you provide, as well as the information about our customers' customers or end users that we process on behalf of our customers. It also describes your choices regarding use, access, correction and deletion of your personal information.

1. How we collect information: #

We collect the following personal information from you:

1.1 Information that you provide to us about yourself #

When you sign up for the Services, we ask you for information such as

  • Contact Information, such as name, email address, mailing address, or phone number;
  • Demographic information, such as age, education, gender, interests and zip code
  • Billing Information, such as credit card number and billing address;
  • Unique Identifiers, such as username, account number or password;
  • IP address;
  • Information about your business, such as company name, company size, business type.

If you do not provide this information, we will not be able to provide the Services to you.

1.2 Information you provide to us about your customers, end users, and contacts #

For the provision of our Services to you, you provide us with information which may identify your customers, end users or employees. Such information includes:

  • Email addresses;
  • IP addresses;
  • Content of emails sent through Postmark.

You may also provide us personal information about your contacts such as Name and email address where we can send receipts of your purchases. When you provide us with personal information about your contacts we will only use this information for the specific reason for which it is provided. If you believe that one of your contacts has provided us with your personal information and you would like to request that it be removed from our database, please contact us at the contact information below.

1.3 Information collected automatically #

When you use our Services, we use cookies and similar technologies to collect information about your location, and your activities on our website, information about your device and log information. This is described in more detail below. These cookies and similar technologies collect anonymized Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data.

AC PM allows Google Analytics and Snowplow Analytics to use these technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole for the purpose of analytics.

You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our website or service. We do not use, or allow the use of cookies or similar technologies in connection with your customers' data.

Google Analytics:

We use a tool called “Google Analytics” to collect some information we listed above about your use of the Services. We use the information we get from Google Analytics to improve the Services and to help you improve your Application. In order to collect this information, Google Analytics may set cookies on your browser or mobile device, or read cookies that are already there. Google Analytics may also receive information about you from apps you have downloaded, that partner with Google. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to the Services to another application which partners with Google, is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. Please review those and see http://www.google.com/policies/privacy/partners/ for information about how Google uses the information provided to Google Analytics and how you can control the information provided to Google. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on for Google Analytics which can be found here.

2. Purpose and legal basis of the processing #

To the extent EU or UK data protection law applies to our processing of information about you, we act as the "data controller". To the extent EU or UK data protection law applies to our processing of your customer or end user data, you serve as the "data controller" or "data processor" and we serve as the "data processor" or "data sub-processor".

To perform the Services: We use your information to identify you, process your payment, provide you with technical support and assistance; and communicate with you about the Services via email. For example we will contact you to notify you of any issues with the Services or any suspicious activity in your account. The legal basis for these uses in the performance of the contract with you.

To Optimize or improve the Services: We use your information to authenticate you, prevent fraud and abuse of our Services and perform research. The legal basis for these uses is our legitimate interest in the improvement and optimization of our service offerings and in ensuring the security of our services and we apply appropriate safeguards to protect your information (see Section 4 below).

3. How we share your information #

We share information with service providers, as required by law, and in connection with the protection and enforcement of our legal and contractual rights.

With Service Providers: We share your information with third parties who provide services on our behalf to help with our business activities. This includes: payment processing, providing customer service, sending marketing communications (this does not include information about your customers), conducting research and analysis and providing cloud computing infrastructure. The legal basis for sharing this information is our legitimate interest in providing our Services efficiently and we implement measure to safeguard your information.

With Public Authorities or Law Enforcement: In certain situations, AC PM may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose your personal information as required by law (such as to comply with a subpoena or other legal process), when we believe in good faith that disclosure is necessary to protect our rights, when we believe there is a violation to our Terms of Service (see Postmark Terms of Service), to protect your safety or the safety of others, to investigate fraud, to respond to a government request, if we are involved in a merger, acquisition, or sale of all or a portion of our assets, or if we are involved in a bankruptcy or liquidation proceeding. The legal basis for this is our legitimate interest in protecting our legal rights and those of others, compliance with legal obligations and our legitimate interest in fulfilling legal obligations imposed by legal authorities outside of the EU or the UK.

Prevent fraud and abuse of the Services: We will share information to prevent or detect fraud or to address technical issues and if we believe it is necessary to investigate, prevent, or take action regarding situations that involve abuse of the Services infrastructure. The legal basis for this is our legitimate interest in the maintaining the security of our Services.

We also process and share information in an aggregated, de-identified manner, where the information is shared as part of a statistical report and does not contain personal information.

4. Security #

The security of your personal information is important to us. We implement adequate measures to protect the personal information submitted to us, both during transmission and once it is received. AC PM takes steps to ensure that all source code, files and data remain private and confidential. Due to the sensitive nature of source code we take this very seriously and make it our primary concern for all customers. We restrict access to personal information to AC PM employees, contractors and agents who need to know that information in order to operate, develop or improve our service. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations. If you have any questions about the security of your personal information, you can contact us at the contact information below.

5. Rights with respect to your information #

Upon request AC PM will provide you with information about whether we hold any of your personal information. You may access, correct, obtain a copy of or request deletion or transfer of your personal information by logging into your account or by contacting us at the contact information below. We will respond to your request within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

AC PM acknowledges that you have the right to access your personal information. AC PM has no direct relationship with your customers or end users whose personal data it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to AC PM’s Client (the data controller). If requested to remove data we will respond within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

If you are a resident of the European Economic Area or the United Kingdom, you may have the right to object to, or request that we restrict, certain processing activities. You may also have the right to make a complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm (for EEA residents) or https://ico.org.uk/global/contact-us (for UK residents).

6. Your choices with respect to the information #

We use and disclose personal information in ways that are consistent with your expectations and choices. Accordingly, we will provide you with the opportunity to choose (opt out) whether your personal information is to be used for a purpose that is materially different from the purpose(s) for which it was collected or subsequently authorized. You will be provided with clear, conspicuous and readily available mechanisms to exercise your choices. To do so, please email us your request any time at [email protected], and we will respond to your request within a reasonable timeframe.

Promotional Email communication: You may sign-up to receive email or newsletters or other communications from us. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you or by contacting us at the contact information below.

Google Analytics: see http://www.google.com/policies/privacy/partners/ for information about how Google uses the information provided to Google Analytics and how you can control the information provided to Google. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on for Google Analytics which can be found here.

7. Data retention #

We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

Even if you delete your account, keep in mind that the deletion by our third party providers may not be immediate and that the deleted information may persist in backup copies for a reasonable period of time.

8. Policy regarding children #

The Services are not directed to children under the age of 16. We do not knowingly collect, and therefore do not sell, Personal Information from children under 16. If you are under 16, please do not use the Services and do not provide any personal information to us. If you become aware that a child under 16 has provided us with personal information without your consent, please contact us at [email protected]. If you are a California resident under the age of 18 and you wish to remove publicly available content, please contact us at [email protected] with the subject line “California Eraser”.

9. International data transfers #

Your personal information may be transferred to, stored, and processed by us and our affiliates and other third parties outside the country in which you reside, including, but not limited to the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. By using any of our Sites, you agree to this transfer, storing, or processing.

9.1 If you're based in the EEA OR THE UK #

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), your personal information may be processed outside of the EEA or the UK and in countries that are not subject to an adequacy decision by the relevant authority. In this event, we will ensure that the recipient of your personal information offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of data as approved by the European Commission. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.

You can view a detailed description of our GDPR efforts on this page.

9.2 Transfers of information not from the EEA, or the UK or Switzerland #

To the extent that personal information is transferred to the United States from countries other than countries within the European Economic Area, the United Kingdom or Switzerland, including personal information that is transferred from Canada, we employ similar safeguards such as selecting third party vendors carefully, ensuring personal information will be used and disclosed only as set out in this privacy policy and that it is protected by appropriate security safeguards.

However, in connection with these transfers of personal information, your personal information may be subject to privacy laws that may not provide the same protection as your country of residence. For example, government entities in such other countries may have certain rights to access your personal information. By using the Sites or using our Services that this privacy notice relates to you are consenting to this transfer of your personal information.

10. California residents #

This Section only applies if you are a California resident.

In the preceding 12 months, we have collected the following categories of personal information as defined under the California Consumer Privacy Act:

  • Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, and account name;
  • Characteristics of protected classifications under state or federal law, such as age or gender;
  • Commercial Information, including records of Services purchased and credit card or other payment information;
  • Internet or electronic network activity information, information, including, but not limited to, browsing history, search history, and information regarding your interaction with the Services including an internet website, application, or advertisement;
  • Geolocation data, such as an IP address;
  • Professional or employment related information;
  • Education information; and
  • Inferences drawn to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

For more specific examples of the personal information we collect, please see Section 1 above. The business and commercial purposes for which we have disclosed this information in the preceding 12 months are described in Section 2 of this policy and the categories of third parties to whom we have made such disclosures are described in Section 3 of this policy.

In addition, please see our Privacy Notice for California Residents, which is incorporated into this Privacy Policy by this reference.

11. Browser Do Not Track (DNT) #

The Services honor and enforce Do Not Track preferences. Do Not Track (DNT) is a privacy preference you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For all the details, including how to turn on Do Not Track, visit donottrack.us.

12. Changes to this Privacy Policy #

We may need to update this policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy, and we may provide you with additional notice (such as adding a statement to our homepage or sending you an email notification). We encourage you to periodically review this page for the latest information on our privacy practices.

13. Privacy questions / feedback #

If you have questions or concerns about this Privacy Policy, please contact us at [email protected].