Privacy Policy

• Account data: name, email address, password (hashed), company and country.
• Verification data: the email addresses you submit and the results we compute.
• Billing data: plan, credits, invoices and payment identifiers (card details are handled by Stripe/PayPal, not stored by us).
• Usage data: API requests, IP address, timestamps and rate-limit counters, used for security and analytics.
• Cookies: a small number of essential cookies/local storage entries needed to keep you signed in and remember your consent choice.

• to provide the verification Service and return results to you;
• to authenticate you, including sending email two-factor codes;
• to enforce quotas, rate limits and prevent abuse;
• to process payments and issue invoices;
• to communicate service updates and respond to support requests;
• to comply with legal obligations.

When you submit addresses for verification, we process them to perform syntax, domain, MX and SMTP checks. During an SMTP check we connect to the recipient’s mail server but we do not send email to the address. We store verification results so you can review reports and export them. You are the controller of this data; you must have a lawful basis to process it and you may request deletion at any time.

Where GDPR applies, we process personal data on the bases of performance of a contract (providing the Service), legitimate interests (security, abuse prevention, improving the Service), consent (non-essential cookies, marketing), and legal obligation.

We share data only with service providers that help us run the Service, including:

• Stripe and PayPal — payment processing;
• our hosting and email-delivery providers;
• Cloudflare — network, DNS and DDoS protection.

We do not sell your personal data.

We use only essential cookies/local storage by default. Non-essential cookies (such as analytics) are used only with your consent, which you can give or decline via the banner shown on your first visit and change at any time by clearing your browser storage.

We retain account data for as long as your account is active and as required to comply with legal obligations. Verification results are retained until you delete them or close your account. Rate-limit and short-lived security records are pruned automatically.

For security, compliance and audit purposes, we may additionally retain records of verification activity — including the address checked, the result returned, the requesting account and timestamps — on secure storage intermittently or for longer periods as needed, including after a result is deleted from your dashboard or an account is closed, for as long as reasonably necessary or as required by applicable law. Such records are access-controlled and protected as described above.

We protect data with encryption in transit (TLS), hashed passwords and API keys, encrypted secrets at rest, least-privilege access and email-based two-factor authentication. No method of transmission or storage is completely secure, but we work continuously to protect your data.

Depending on your location, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@verifyany.email. You also have the right to lodge a complaint with your local data-protection authority.

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.

We may update this policy periodically. Material changes will be posted here with a revised date and, where appropriate, notified to you.

For privacy questions or requests, email privacy@verifyany.email.