Public DNS observations
When you enter a domain into our scanner, we query published DMARC, SPF, and MX records from public recursive DNS services (including Cloudflare 1.1.1.1 and Google 8.8.8.8). We also check selected public website responses, common subdomain pointers and file paths. We do not access your mailboxes, user accounts, email content, or internal servers.
Scan results are reused from a process-local memory cache for up to 60 seconds to reduce repeated DNS work. Expired entries are removed during later cache activity or when the process stops. We do not sell domain scan results.
Review requests and client intakes
When you request Shield Setup and accept this notice, we record your name, company, business email, role, industry sector, domain, and any optional context you choose to provide. The request may also include the first landing path and referring site path stored for this browser session. If the URL contained campaign tags, it may include the source, medium, and campaign. We use these details to respond, understand which path produced the request, perform the agreed baseline review, and prepare your DNS configuration.
Submitting an intake request does not add you to marketing email lists or automated newsletters. We never request, accept, or store email passwords, bank credentials, or private client files.
Storage and ownership
Intake details are sent through Resend to Kova's business email inbox for Alphonzo Cirton to review. Our email providers process and retain these messages as part of delivering and storing email. When Shield Setup is complete, you receive your client-owned Shield Record. We retain engagement records as needed to fulfill the agreed work and verify delivery.
Abuse prevention and telemetry
To limit abuse, the scanner uses process-local, fixed-window counters keyed by the client IP address and domain. Counters stop limiting requests after 60 seconds; expired entries are removed during later rate-limit activity or when the process stops. The scanner does not emit raw IP addresses or scanned domains in application scan logs. Hosting and network-provider logs are separate from these application counters; their retention settings require operational verification. No third-party advertising tracking scripts, cross-site trackers, or marketing pixels are used on this site.
Questions and access requests
To inspect, correct, or request deletion of any intake information you have submitted, contact Alphonzo Cirton directly at al@kovaos.co.