Privacy Policy

This policy applies to VerifyEmail's website, accounts, dashboard, APIs, and related support. It does not govern third-party services that publish their own privacy notices.

We collect account details such as your name and email address; a one-way password hash; hashed API keys and key metadata; verification requests, results, usage counters, and logs; subscription and transaction references supplied by Stripe; and technical request data needed for security and operation. We do not store your plaintext password or the complete value of an API key after it is issued.

You may submit email addresses belonging to other people. We process those addresses only to provide verification, security, usage records, and service reliability. We do not use submitted addresses to send marketing email. You are responsible for having a lawful basis and providing any notice required to submit this data.

We use information to create and secure accounts, authenticate API requests, perform email verification, identify disposable and catch-all domains, enforce quotas and rate limits, process subscriptions, prevent abuse, troubleshoot the service, communicate operational matters, and comply with law.

We disclose information only to service providers that help operate VerifyEmail, including hosting and infrastructure providers and Stripe for payments; to DNS resolvers and receiving mail systems as technically required to perform a check; when required by law; or in connection with a business reorganization. We do not sell personal information or submitted email addresses.

We retain account and billing records while your account is active and as needed for security, legal, tax, and dispute purposes. Verification history is retained to provide account records and detect abuse. Deliverability cache entries are retained for the configured cache period. We delete or anonymize information when it is no longer reasonably needed, subject to backup and legal obligations.

We use access controls, password hashing, API-key hashing, encrypted transport where configured, request limits, and operational monitoring to protect information. No networked service is completely secure, so you must protect your credentials and notify us if you suspect unauthorized access.

VerifyEmail and its service providers may process information in countries other than yours. Where required, we rely on contractual safeguards or another lawful transfer mechanism.

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where processing relies on consent. You may also complain to your local data-protection authority. Some information may be retained when the law permits or requires it.

VerifyEmail is a business service and is not directed to children. You must be legally able to enter into these Terms to create an account. Contact us if you believe a child has provided personal information improperly.

We may update this policy as the service or law changes. We will post the revised policy with a new effective date and provide additional notice when a material change requires it.

Questions or privacy requests may be sent to [email protected]. To protect an account, we may need to verify your identity before completing a request.