We collect the minimum data required to provide the email validation service. This includes:

• Email addresses you submit for validation (encrypted at rest).
• Usage data such as the number of emails checked and jobs run.
• Audit logs recording when and how your data is accessed.
• Account information: email, hashed password, billing details.

We process your data solely to validate and correct email lists. All submitted email addresses are encrypted at rest using AES-256-GCM and indexed via SHA-256 hashes, so the plaintext is never stored in a searchable form.

Validation involves syntax checks, typo detection, DNS MX record lookups, disposable domain matching and role-based filtering. We never send emails to the addresses you validate.

Validated email data is retained for 365 days by default, after which it is automatically purged. The retention period is configurable from your account settings.

Audit logs are retained for the lifetime of your account to satisfy GDPR accountability requirements. Account-level data is removed within 30 days of account deletion.

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Export your data in a portable, machine-readable format.
• Request correction or deletion of your data.
• Object to or restrict certain processing activities.
• Withdraw consent at any time.

You can exercise these rights directly from your dashboard or by contacting us at the address below.