Privacy Policy
Effective date: October 28, 2026 Who we are: Mainsprout, a brand of Xtended Services Group Inc. ("Mainsprout", "we", "us"), which runs mainsprout.com. Contact: hello@mainsprout.com, 701 Market St, St. Louis, MO 63101
This policy explains what information we collect, why, how long we keep it, and who else handles it. The short version: we collect only what we need to run your check or do the work you paid for, we send results only to your business's own email domain, and we don't sell your data.
1. What we collect
When you request a free check (the form on mainsprout.com):
- Your name
- Your business name
- Your business website
- Your email address, which must be at your business's own domain
- Technical details sent automatically with the form: the IP address the request came from and the date and time it was submitted. We use these to spot spam and abuse.
When we run the free check, we look up public information about your business:
- Your domain's public DNS records (for example MX, SPF, DKIM and DMARC). These are visible to anyone on the internet, and we look them up the same way any mail server would.
- For an AI visibility check, the public answers AI assistants give about your business (such as ChatGPT, Google's AI answers and Perplexity) and your public business listings, such as your Google Business Profile and directory listings.
When you buy a paid service:
- The details you give us on our access form, such as your name and role, email, phone number, your domain, where your domain and email are managed, who manages them, the other services that send email for your business, and good times for a call.
- Our email conversations with you, including your written approval of each change.
- A copy of your DNS records from before and after our changes, so the work can be undone if needed.
- Payment records from Stripe, such as your name, email, amount paid and the date. We don't receive or store your full card number. Stripe handles that under its own privacy policy: https://stripe.com/privacy
When you book a call: bookings are made through Google Calendar, which collects the name and email address you enter so it can send you the invitation. Google handles that under its own privacy policy: https://policies.google.com/privacy
When you opt out: the email address (or whole domain) you ask us to stop emailing.
What we don't collect: we never ask for or store your passwords.
Cookies and analytics: our website doesn't set cookies or load analytics or tracking scripts. Our web host may keep standard server logs, such as IP addresses and pages requested, for security and troubleshooting.
2. How we use it
- To run your free check and email you the results.
- To reply to you and, if you ask, to do paid work for you (Email Security Setup, $149 per domain).
- To process payment and keep business and tax records.
- To prevent spam and abuse of our forms.
- We may send a small number of follow-up emails about your results or our services. You can opt out anytime on our opt-out page or by replying "stop", and we won't email you again.
3. Who sees your results
- Results are emailed only to an address at the checked business's own domain. We keep a copy in our own mailbox.
- We never post or display results publicly, on our site or anywhere else.
- We don't share your results with anyone outside the service providers listed in Section 5, unless you ask us to or the law requires it.
4. We don't sell your data
We don't sell your personal information or your business's information, and we don't share it for advertising.
5. Service providers who handle data for us
We use a small number of outside services to operate. They process data on our behalf:
- Website and email hosting: Hostinger. Our website runs on Hostinger, and our hello@mainsprout.com mailbox is hosted there. Form submissions and copies of check results arrive as email in that mailbox, which is where they're stored. The website also keeps a short log of form requests and our opt-out list on the server, outside the public website, to prevent spam and honor opt-outs.
- Call booking: Google Calendar.
- Payments: Stripe.
We don't use any other outside service to handle your information. If that changes, we'll update this list.
6. Access to your accounts
For paid work, you may invite us into your DNS or email provider with limited access, or walk through changes with us on a screen-share. We don't keep any access after the job is done. We remove ourselves from your account, ask you to confirm the access is gone, and don't keep any login or invitation. We never ask for or store your password.
7. How long we keep things
| What | How long we keep it |
|---|---|
| Free check requests (form data, IP address, timestamp) | 12 months from submission, then deleted |
| Free check results | 12 months from when we sent them, then deleted |
| Spam-prevention counters (a scrambled form of your IP address) | 24 hours |
| Access form details and records of paid work (emails, approvals, before/after DNS copies) | 24 months after the job ends, then deleted |
| Payment and invoice records | As long as the law requires for tax and accounting |
| DMARC reports we receive for you, if any | 90 days after our follow-up ends |
| Opt-out requests | As long as needed to make sure we don't email you again |
8. Your choices
You can ask us to see, correct or delete the information we hold about you or your business by emailing hello@mainsprout.com. We'll respond within 30 days. We may need to keep payment records where the law requires it. Public information, such as your DNS records and website, stays public because you publish it, not us.
9. Security
We keep data in password-protected accounts and limit who can see it. No system is perfectly secure, so we can't guarantee it, but we'll tell you without undue delay if we learn your information was exposed.
10. Children
Our services are for businesses. We don't knowingly collect information from children under 13.
11. Changes
If we change this policy, we'll update the effective date above. If a change is significant, we'll say so on the site.
12. Governing law and contact
This policy is governed by Missouri law. Questions or requests:
Mainsprout 701 Market St St. Louis, MO 63101 hello@mainsprout.com