Privacy Policy

Last updated: June 10, 2026

1. Who we are

Email Verification API ("we", "us") operates emailverificationapi.io, the verification API and the associated dashboard. This policy explains what personal data we process and why, in line with the EU/UK General Data Protection Regulation (GDPR).

2. Email addresses submitted for verification

Addresses you submit — via the API, bulk jobs, the dashboard, or the free on-page checker — are processed transiently: we use them to perform live DNS, SMTP and provider-level checks and to return a result. They are not used for marketing, not sold, and not shared beyond the processors listed below. For account holders, results (address plus status, reason and flags) are retained in your job history so you can re-download them; you can delete jobs at any time. Free-checker submissions are not retained beyond short-lived operational logs.

3. Free-tool quota tracking

To enforce the free checker's daily limit (5 checks per day) and to prevent abuse, we record the requesting IP address with a counter and timestamp. This data is used solely for rate limiting and security, retained on a short rolling window, and then deleted. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in protecting the service.

4. Account and billing data

For account holders we store: your email address, password hash, API keys, plan and credit balance, and usage records (endpoints called, volumes, timestamps) needed for billing and abuse prevention. Payments are processed by Stripe; card details go directly to Stripe and never reach our servers — we receive a payment reference and receipt metadata only. Legal bases: performance of a contract (Art. 6(1)(b)) and legal obligations for accounting records (Art. 6(1)(c)).

5. Cookies and logs

This marketing site sets no advertising or third-party tracking cookies. The dashboard uses a strictly necessary session cookie for login. Server logs (IP address, user agent, request path, status) are retained briefly for security and debugging.

6. Processors and transfers

We share data only with processors required to run the service: our hosting provider (EU data centres), Stripe (payments), and a transactional email provider (account notifications). We never sell personal data. Where a processor operates outside the EEA/UK, transfers are protected by standard contractual clauses or an adequacy decision.

7. Retention

Free-check quota records: short rolling retention. Account data: life of the account plus up to 30 days after deletion. Billing records: as required by tax law. Verification job results: until you delete them or your account closes.

8. Your rights

You may request access to, rectification of, or erasure of your personal data; restriction of or objection to processing; and a portable copy of data you provided. If you believe your address was verified by one of our customers, contact us and we will explain the transient processing that occurred and honour applicable rights. You can also lodge a complaint with your supervisory authority.

9. Contact

Privacy questions and data-subject requests: [email protected]. We respond within 30 days.