Privacy Policy
Last updated: July 26, 2026
Contents
1. Overview
At Email Validator (“we,” “us,” “our”), operated by N-Software, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our email verification platform at email-validaton.com (“the Service”).
We act as a Data Processor for the email lists you upload for verification. We act as a Data Controller for your account information. Both roles are governed by this Policy and applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
2. What Data We Collect
2.1 Information You Provide Directly
| Category | Examples | Purpose |
|---|---|---|
| Account Information | Email address, name (optional), password hash | Account creation, authentication, communication |
| Billing Information | Transaction records, plan type, credit balance | Service provisioning, payment processing |
| Email Lists | Email addresses uploaded for verification | Validation & verification processing |
| API Usage Data | API key, request metadata, IP address | Rate limiting, abuse prevention |
| Communications | Support tickets, emails, feedback | Customer support & service improvement |
2.2 Information Collected Automatically
- Log Data: IP address, browser type, pages visited, timestamps, referring URLs. Used for debugging, security monitoring, and analytics.
- Analytics Data: Aggregated usage statistics via Matomo (self-hosted, no third-party sharing).
- Cookies: Session cookies for authentication and CSRF protection. See our Cookie Policy.
2.3 Payment Information
We do not collect, store, or process credit card numbers, bank account details, or other sensitive payment credentials. All payments are handled by Lemon Squeezy, our Merchant of Record. You can review their privacy policy at lemonsqueezy.com/privacy.
3. How We Use Your Data
- Service Delivery: To verify email addresses, process bulk uploads, generate verification reports, and provide API responses.
- Account Management: To authenticate users, manage credits, process subscriptions, and send service-related communications.
- Improvement: Aggregated, anonymized data to improve accuracy algorithms and user experience.
- Security: To detect, prevent, and investigate fraud, abuse, unauthorized access, and terms of service violations.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable government requests.
4. Email List Verification Data
This section specifically addresses the email addresses you submit for verification, which we consider the most sensitive aspect of our Service:
- We do NOT store, sell, share, rent, or reuse the email addresses you upload for verification beyond the purposes of providing the Service.
- Uploaded email addresses are processed in-memory during verification and temporarily stored in our database to generate verification reports.
- Verification results are retained for your convenience (to view history and re-download reports) and are deleted according to our retention schedule below.
- We do NOT use your uploaded email lists for our own marketing, testing, algorithm training (using identifiable data), or any purpose unrelated to your specific verification request.
5. Legal Bases for Processing (GDPR)
For users in the European Economic Area (EEA) and the United Kingdom, we process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account creation and authentication | Performance of a contract (Terms of Service) |
| Email verification processing | Performance of a contract |
| Payment and billing | Performance of a contract |
| Service communications | Performance of a contract |
| Security monitoring and abuse prevention | Legitimate interests |
| Aggregated analytics | Legitimate interests |
| Marketing communications (if opted in) | Consent |
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 30 days after deletion |
| Email lists & verification results | 90 days after verification (for history/reports) |
| API request logs | 30 days (for rate limiting and abuse detection) |
| Server logs | 30 days (rotated automatically) |
| Billing records | 10 years (legal tax requirements) |
| Database backups | 2 days (rotated automatically every 10 minutes) |
You may request earlier deletion of your uploaded email list data by contacting us.
7. Data Sharing & Third Parties
We do NOT sell, rent, or trade your personal data. We share data only with the following categories of service providers, strictly as necessary to provide the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Lemon Squeezy | Payment processing (Merchant of Record) | Order metadata (not card data) |
| Brevo (Sendinblue) | Transactional emails (welcome, notifications) | Email address, name |
| Hetzner Online GmbH | Server hosting (Frankfurt, Germany) | All stored data (EU-based) |
| noez.de | SMTP relay / IP transit | SMTP traffic only (pass-through) |
| Verifly | Yahoo-specific email validation | Email address (for verification) |
| Matomo (self-hosted) | Web analytics | Anonymized page view data |
All third-party providers are contractually obligated to process data only according to our instructions and to maintain appropriate security measures.
8. Cookies & Tracking
We use minimal cookies necessary for the Service to function:
- Session cookie: Required for login authentication and CSRF protection. Expires when you close your browser.
- Matomo analytics: Self-hosted analytics using first-party cookies. IP addresses are anonymized. No data is sent to external analytics providers.
For detailed information, see our Cookie Policy.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS 1.3/HTTPS for all connections)
- Encryption at rest (database files on encrypted storage)
- Password hashing (bcrypt with per-user salt)
- Firewall and rate limiting to prevent abuse
- Regular automated database backups (every 10 minutes)
- Principle of least privilege for system access
- Content Security Policy (CSP) headers to prevent XSS and injection attacks
- CSRF protection on all form submissions
No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (“right to be forgotten”).
- Restriction: Request restriction of processing under certain conditions.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at privacy@email-validaton.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
11. International Data Transfers
Our servers are located in Frankfurt, Germany (European Union). All data processing occurs within the EU. We do not transfer personal data outside the European Economic Area. If this changes, we will update this Policy and implement appropriate safeguards (such as Standard Contractual Clauses) as required by GDPR.
12. Children's Privacy
Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a notice on our website. The “Last updated” date at the top of this page reflects the most recent revision.
14. Contact & DPO
For privacy-related inquiries or to exercise your data rights, contact:
- Email: privacy@email-validaton.com
- Data Controller: N-Software
- Website: email-validaton.com
We aim to respond to all privacy-related inquiries within 48 hours.