Privacy Policy | Notify.domains

1. Who operates this service

The service is provided by Web X.0 Media LLC, a Washington limited liability company doing business as Notify.domains ("Notify.domains," "we," "us"). Michael Cyger is the founder. Day-to-day monitoring and alerts run automatically. There is no separate support team reading customer watch lists.

There are no separate customer-support employees or contractors with routine access to customer accounts or monitoring lists. When human access is needed, it is handled as described in Section 8.

2. Information we collect

We collect information in these categories:

Account and profile data: such as your name, email address, and credentials used to sign in.
Billing data: whether you have a subscription, plus the details we need for invoices and payment history. Payment card numbers and related payment-method details are collected and stored by our payment processor (Stripe), not on our servers.
Domain monitoring data: domain names you add, which alerts you want, which alerts you have turned off, and the history of what we track on each name (for example whether it is registered, DNS records, auction or for-sale listings, whether the website loads, and certificate dates). This also includes optional connections you turn on, such as Slack, Telegram, a webhook, or extra email recipients you invite.
Connected assistants: if you connect an AI assistant, the account data that assistant asks for on your behalf. That is account status, the domains you watch, names waiting for payment, alerts, and the email settings you tell it to change.
Communications: messages you send us (for example through contact or support), plus the details we need to reply.
Technical and security logs: records that may include IP addresses, the time, the browser or app that connected, and error details. We use these to keep the service secure, fix problems, and prevent abuse.
Cookies and similar technologies: see Section 5.

3. How monitoring uses external services

All monitoring is automated. Our systems check public sources on an ongoing basis or when you refresh data. Those requests may send the domain name being checked (and sometimes related technical details) to the operator of each source. We combine the responses with your account so you can see changes over time and receive alerts.

Examples of external data we use include:

Registration data (WHOIS and RDAP): the public registration record and nameservers, from the registry or the registrar. WHOIS is the long-standing public record. RDAP is the newer lookup many registries publish for the same kind of information.
DNS records: the public address and mail records for the domain.
Reputation and security: public lists of domains reported for malware or spam.
Website and certificate: our servers may open the website, follow a redirect, and record the result (for example whether the site loads). When the site presents a security certificate, we read its dates.
Auction and marketplace listings: we check whether a name is listed for sale or at auction at the venues we watch.
Screenshots: when conditions are met we may capture a homepage screenshot for display in the product.

Companies we name on this page:

Stripe: payments and billing. Payment card numbers and related payment-method details are collected and stored by Stripe, not on our servers.
Amazon S3: screenshot image files stored for display in the product.

One-off tools. Some pages (like tools) offer a single registration, DNS, pricing, or blocklist check. Those pages say whether that check is saved or tied to an account. Unless you sign in and add the domain to monitoring, we do not treat that check as part of your watch list.

Important distinction: much of the underlying domain information we retrieve is already public (for example registration summaries or listing pages). What we commit to here is how your Notify.domains account ties those domains to you. We do not publish your personal watch list or sell access to it as marketing data. Individual third parties may still log their own traffic according to their policies when we check those sources.

4. How we use your information

We use personal and monitoring data to:

Provide monitoring, dashboards, history, and alerts
Authenticate users and prevent fraud or abuse
Process subscriptions and billing through Stripe
Deliver email and optional connections you turn on (Slack, Telegram, a webhook address you give us, extra recipients)
Return account data to an AI assistant you have connected, limited to what you approved and what that assistant asks for
Run the service, keep it secure, fix problems, and make it more reliable
Respond to support requests and legal notices where required

Customer watch lists and conflict of interest. We do not use your monitored domain list, alert history, or account activity to guide Web X.0 Media LLC, its owners, or anyone who works there in pursuing domain names for our own business. Customer watch lists are not searched for business opportunities, shared with other customers, or sold.

While a domain name remains on your watch list and your account has an active paid subscription or active free trial, Notify.domains and anyone who works for its parent company, Web X.0 Media LLC (including any future employees or contractors with access to customer account data), will not go after that domain name. That includes registering, backordering, bidding on, or making offers to acquire it. A domain on your watch list is enough. You do not need to be actively trying to buy it.

This promise applies only while your account has an active paid subscription or active free trial. It does not apply after your free trial expires or your subscription ends. If you remove a domain from monitoring, this restriction no longer covers that domain name.

5. Cookies, local storage, and similar technologies

We use:

Essential cookies that keep you signed in and protect the account.
Google reCAPTCHA on some forms, when it is turned on, to reduce automated abuse. Google may set or read cookies under Google’s policies.
Saved browser settings for choices such as light or dark mode.

You can control cookies through your browser. Blocking essential cookies may prevent sign-in or parts of the app from working.

6. Other companies that handle data

We share data with companies that handle it for us, or that receive it because you chose to send notifications there. Categories include:

Payments: Stripe (the card form, the billing page, and the payment notices Stripe sends us).
Hosting and storage: the companies that host the site and its database. Amazon Web Services (S3) stores screenshot images.
Email delivery: the service that sends account email, such as receipts and alerts.
Telegram (optional): when you connect Telegram alerts, we send the alert text to Telegram so it can reach the chat you linked.
Monitoring sources: registry, registrar, marketplace, auction, DNS, reputation services, and screenshot capture described in Section 3.
Bot protection: Google (reCAPTCHA).
Connected assistants: the AI app you choose to connect. We send account data to that app when it asks, using the connection you approved. We do not run that app. What it stores from the conversation is covered by its provider's privacy policy.
Affiliate and referral networks: when you click a registrar or marketplace button, we may send you through a partner link (for example Impact) so they can tell the visit came from us if you buy. Those companies may set their own cookies. We do not send your account, watch list, or billing data with that click. The link may include the domain name you clicked.

We do not sell your personal information to anyone, including data brokers and advertisers.

7. User-directed sharing

If you connect Slack, Telegram, a webhook (a web address you give us), or add additional email recipients to alerts, you tell us to send the alerts there. You are responsible for the privacy practices of the tools and inboxes you connect.

If you connect an AI assistant, you instruct us to answer that app's requests for your account status, watched domains, and alerts, and to apply email-setting changes you confirm through it. You are responsible for which app you approve. Disconnect it anytime from Notification Settings, under Connected assistants.

If you click a registrar or marketplace link, you leave Notify.domains for that company’s site. We may earn a commission if you complete a purchase. That does not change the price you pay. The partner’s privacy policy then applies to whatever they collect on their site.

8. Human access to customer data

Day-to-day monitoring runs automatically. Nobody reviews your watch list by hand as part of normal operation. When a person does need access, for example to fix a problem, answer a support request you opened, stop abuse, or meet a legal duty, that access is limited to the founder (Michael Cyger). We do not have a separate support staff with standing access to customer accounts.

The other companies listed above may access data only as needed to do their job (for example Stripe processing a payment, or Amazon storing a screenshot).

9. Security

We protect the service in ways that fit what it stores, including an encrypted connection when you use the site in a browser (the lock icon) and limits on who can reach the servers and passwords. No way of storing or sending information is perfectly secure. If we learn of an incident that affects your personal information in a material way, we will notify you as the law requires.

10. Data retention

We keep account and monitoring data while your account is active and for a reasonable period afterward to resolve disputes, comply with law, and restore from backups. Billing records may be kept longer where tax or financial rules require. Security logs are kept for a limited recent period, long enough to prevent abuse and to diagnose problems. When an assistant uses your account, we keep a record of the app, what it did, the IP address, and the time for 180 days, then delete those records.

You can permanently delete your account from Profile (Delete Account), after confirming with your password or a passkey when available. Some information may persist in backups or where retention is legally required.

11. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, and to object to certain processing. You can:

Update account details in the product where available
Delete your account from Profile, or contact us if you need help
Turn off optional email where those controls exist (receipts, renewal notices, and security email may continue)
Disconnect optional connections (Slack, Telegram, webhooks, extra recipients)
Disconnect a connected assistant from Notification Settings, under Connected assistants

To exercise privacy rights, contact us using the details in Section 17. We may need to verify your request.

12. International users

We are based in the United States. If you access the service from another country, your information may be handled and stored in the U.S. or in countries where the companies that work for us operate. Where the law requires it, we use an approved way to send personal information across borders.

13. Children

Notify.domains is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

14. California residents

If California law applies, you may have additional rights regarding personal information (including rights to know, delete, and opt out of certain “sales” or “sharing” as defined under California law). We do not sell personal information for money. For requests, use the contact method in Section 17.

15. Changes to this policy

We may update this policy to reflect product or legal changes. We will post the revised policy on this page and update the “Last updated” date and the document version line under the title. If a change is material, we will provide additional notice where appropriate, for example by email or an in-product message.

What you accepted at checkout. When you first pay, we save which version of the Terms of Service and Refund Policy you accepted, so we can show that if a payment is disputed. Privacy Policy updates appear on this page. They do not change the Terms or Refund version you already accepted.

16. Governing law

This Privacy Policy is governed by the laws of the State of Washington, United States. If another place's rules would point to a different state's law, Washington law still applies.

17. Contact

For questions about this policy or privacy requests, contact: https://notify.domains/contact/?to=legal