Privacy Policy
This policy explains what personal information VerifyEmail handles, why, and the choices you have. We don't sell your data, full stop.
1. Who We Are
VerifyEmail is an email verification and deliverability platform operated by 47labz ("we", "us"), at https://tryverifyemail.com. For the purposes of data-protection law, the data controller for the information described in Section 2(a) is 47labz, contactable at team@tryverifyemail.com.
2. Our Two Roles
Because of what we do, we handle personal data in two distinct roles. The difference matters:
- (a) As a controller: for your relationship with us
- When you visit our site, create an account, pay, or contact support, we decide how your personal data is used. This Privacy Policy governs that data.
- (b) As a processor: for the lists you verify
- When you upload email addresses to verify, those belong to your contacts, and you decide why they're processed. There, you are the controller and we act on your instructions as your processor. That relationship is governed by our Data Processing Agreement and our GDPR page, not by this policy.
3. Information We Collect
Information you give us
- Account data: name, email address, password, and organisation details.
- Billing data: handled by our payment provider Polar; we receive limited confirmation and invoice details, not your full card number.
- Support data: messages and attachments you send us.
- Customer Data: the email addresses and related fields you submit for verification. We process these as your processor (see Section 2).
Information we collect automatically
- Usage and log data: IP address, device and browser type, pages and API endpoints used, timestamps, and similar diagnostics.
- Cookies and similar technologies: see our Cookie Policy.
4. Connected AI assistants (ChatGPT, Claude and similar)
You can connect VerifyEmail to a third-party AI assistant such as ChatGPT or Claude, or to a similar assistant that supports our connector. When you do, you authorise that assistant to act on your VerifyEmail account, and it becomes one more way for you to submit addresses to us. This section explains what that connection sends us and what it does not.
- What the assistant sends us. Two things only: (a) the email addresses you ask the assistant to verify, and (b) an identifier for your linked VerifyEmail account, supplied through the OAuth authorisation you grant when you connect. We treat those addresses exactly as we treat addresses submitted through the dashboard or the API: they are Customer Data, we process them as your processor (see Section 2), and the results appear in your verification history. They are kept under the same rule as every other verification result, described in Data Retention, and you can delete them from your account at any time.
- What we do not receive. We do not receive your conversation with the assistant, your prompts beyond the address itself, files you have shared with the assistant, or any other chat content. The connector passes us the address to verify and nothing around it.
- Who is responsible for what. The assistant provider (for example OpenAI for ChatGPT, or Anthropic for Claude) is a separate, independent controller of your conversation and of the account you hold with them. Their own privacy policy governs that data; ours governs what reaches us. Connecting an assistant does not add any recipient of your data on our side: the categories of recipients and the sub-processors listed in How We Share It are unchanged.
- What the assistant can and cannot do. The access token we issue to an assistant is scoped to email verification and to reading your account balance. It cannot change your account, manage API keys, make purchases, or reach any other part of the Service.
- Disconnecting. You can revoke an assistant's access at any time, either from Settings → Connected apps in your VerifyEmail dashboard or from the connected-apps or integrations settings inside the assistant itself. Once revoked, the assistant can no longer act on your account. Verification results already produced stay in your history under the retention rule above until you delete them.
5. How We Use It
We use the information above to:
- provide, maintain and secure the Service, and verify the addresses you submit;
- process payments, manage credits, and send service and account messages;
- provide support and respond to your requests;
- monitor, prevent and investigate abuse, fraud and security incidents;
- improve the Service and develop new features (using aggregated or de-identified data wherever possible); and
- comply with our legal obligations and enforce our agreements.
We do not sell your personal data, and we do not use the contents of your uploaded lists for advertising or to build profiles.
6. Legal Bases
Where the GDPR or UK GDPR applies, we rely on these legal bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure, support and improve the Service, balanced against your rights), consent (for non-essential cookies and any optional marketing, which you can withdraw at any time), and legal obligation (for example tax and accounting records). Our full GDPR disclosures are on the GDPR page.
8. International Transfers
We operate from India and use providers that may store or process data in other countries, so your information may be transferred internationally. Where we transfer personal data of individuals in the EEA or UK to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), together with additional measures where needed. You can ask us for more detail about these safeguards using the contact below.
9. Data Retention
We keep personal data only as long as we need it. In particular:
- Uploaded lists and verification results are kept for 360 days on every plan, or until you delete them; you can delete them at any time, and deletion is permanent (no soft-delete or hidden copies).
- Account data is kept while your account is open and deleted within 30 days of account closure.
- Billing and tax records are kept for as long as the law requires us to keep them.
- Logs and security data are kept for a limited period for diagnostics and abuse prevention.
10. Security
We protect your data with appropriate technical and organisational measures, including: encryption in transit (TLS) and at rest (AES-256), least-privilege access controls, and monitored infrastructure. No system is perfectly secure, but we work to protect your data and to respond quickly if something goes wrong. If a breach affects your personal data, we will notify you and any regulator as required by law.
11. Your Privacy Rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; and to withdraw consent. To exercise any of these, email team@tryverifyemail.com. We will respond within the time the law requires (usually within 30 days). You will not be charged for a reasonable request, and you can complain to your local data-protection authority if you are unhappy with our response.
If your request concerns email addresses someone else uploaded to verify, we may need to refer you to that customer (the controller), and we will help them respond.
12. California Privacy (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion, to correct it, and to not be discriminated against for exercising your rights. We do not sell or share your personal information as those terms are defined under California law. To exercise your rights, contact team@tryverifyemail.com.
14. Children's Privacy
The Service is for business use and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
15. Changes
We may update this policy from time to time. If a change is material, we will give reasonable notice. The version posted on this page is always the current one.
16. Contact
For any privacy question or request, email team@tryverifyemail.com, or write to 47labz (VerifyEmail), India.