Privacy Policy

1. Who We Are

EmailVerifyerAPI is an email-verification service operated by a small independent team based in Montréal, Québec, Canada. We are the controller for personal data processed through this service.

For questions about this policy, or to exercise your rights, contact us at [email protected].

2. Data We Collect

2.1 Account data

If you create an account, we collect your name, email address, and (optionally) your company name. For paid plans, billing details are collected and processed by our third-party payment provider, so we do not store full card numbers ourselves.

2.2 Verification data

When you use the single-address hero tool, the email address you enter is processed in real time on stateless infrastructure and is never written to disk or stored in any database. No personal data from the free tool is retained after the response is returned.

For batch jobs submitted via the dashboard or API, uploaded addresses are stored temporarily to facilitate processing and are automatically deleted within 30 days of job completion.

2.3 Usage and log data

When you use account or API features, our servers keep standard technical logs (such as request timestamps, API-call metadata and error logs) needed to operate, secure and debug the service. These logs do not contain the email addresses you verify with the browser tool.

2.4 Cookies and similar technologies

The site uses only essential, first-party storage: remembering your language, theme, and accessibility preferences in your browser, and keeping you signed in if you have an account. We do not use third-party advertising cookies. See section 9 and our Cookie Policy for details.

3. How We Use Your Data

We use the limited personal data we hold to: provide and maintain the service; authenticate your account; process payments for paid plans; respond to support requests; keep the service secure and prevent abuse; and meet our legal obligations. If you opt in, we may email you product updates, and you can unsubscribe at any time.

We do not sell personal data to third parties. We do not use email addresses submitted for verification for any purpose other than returning the verification result.

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on: performance of a contract (Art. 6(1)(b)) to provide your account and the service; legitimate interests (Art. 6(1)(f)) to secure the service and prevent abuse; consent (Art. 6(1)(a)) for optional marketing emails; and legal obligation (Art. 6(1)(c)) to retain records such as invoices.

5. Data Sharing and Sub-processors

We share personal data only with the service providers needed to run EmailVerifyerAPI, including our hosting/infrastructure provider, our payment processor for paid plans, and our email-delivery provider. We do not share your data with advertisers. A current list of sub-processors is maintained on our Compliance page.

We require all sub-processors to implement appropriate technical and organisational measures and to process personal data only on our documented instructions.

6. International Data Transfers

EmailVerifyerAPI is operated from Canada, which the European Commission recognises as providing an adequate level of data protection for commercial organisations. Where any personal data is transferred outside the EEA to a country without an adequacy decision, we rely on the EU Standard Contractual Clauses to safeguard it.

7. Data Retention

• Hero tool (single address): Not retained; processed and discarded in real time.
• Batch job data: Deleted within 30 days of job completion.
• Account data: retained for the life of your account and deleted within 90 days of account closure, unless we must keep it longer by law.
• Billing records: retained for the period required by applicable tax and accounting law (commonly up to 7 years).
• Server logs: retained for up to 90 days, then deleted or anonymised.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Restriction: ask us to pause processing while a dispute is resolved.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email [email protected]. We will respond within 30 days, as required under the GDPR, and may ask you to verify your identity first.

If you believe your rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

9. Cookies

We keep cookies and local storage to a minimum and use them only for essential, first-party purposes: a session cookie that keeps you signed in, and browser storage for your language, theme, and accessibility preferences. See our Cookie Policy for the exact list, by name.

Because we use only essential first-party storage — no advertising, no analytics, no cross-site tracking — the law doesn't require a consent banner today. We show a cookie preference banner anyway, so you can see exactly what we use and choose for yourself, and so we're ready to ask for real consent the moment that ever changes. If we add analytics or any other non-essential cookie, we will update this section and the Cookie Policy first, and request consent before it's set.

10. Children's Privacy

Our service is directed to businesses and professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us immediately at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before the new version takes effect, and will post the updated policy on this page with a revised "Last updated" date. Continued use of the service after the effective date constitutes acceptance of the revised policy.

12. Contact Us