Privacy Policy

Bounceable provides email verification and deliverability tooling. For the personal data described below, Bounceable acts as a controller for data about your account and use of the Service, and as a processor acting on your instructions for the email addresses you submit for verification.

• Account information — your name, email address, and authentication credentials. If you sign in with Google, we receive basic profile information from your Google account.
• Billing information — your plan, subscription status, and transaction history. Card details are collected and processed directly by Stripe; we do not store full payment-card numbers.
• Verification data — the email addresses and related input you submit to be checked (see section 3).
• Usage and technical data — API requests, log data, IP address, approximate location, and device and browser information, collected to operate and secure the Service.
• Cookies — strictly necessary cookies used to keep you signed in and to maintain your session (see section 10).

When you submit an address, we process it to perform checks such as syntax validation, domain and MX lookups, disposable and role-account detection, catch-all detection, and SMTP mailbox probing. To perform SMTP checks, we connect to the recipient mail server associated with the address.

We may cache verification results for a limited period to improve performance and reduce repeat lookups. Cached results expire automatically after a retention window that varies by result type. We process this data to provide results to you and do not use the addresses you submit to send marketing or for our own independent purposes.

• to provide, maintain, and improve the Service;
• to process payments and manage your subscription;
• to authenticate users and secure accounts;
• to detect, prevent, and investigate fraud, abuse, and security incidents;
• to provide support and respond to your requests; and
• to comply with legal obligations and enforce our terms.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service), our legitimate interests (to secure and improve the Service and prevent abuse), consent (where required, such as for certain communications), and compliance with legal obligations.

We do not sell your personal data. We share it only with service providers (subprocessors) who help us run the Service, and only as needed, including:

• Stripe — payment processing and billing;
• Cloud hosting and database providers — to run the application and store account data;
• Caching providers — to temporarily store verification results and rate-limit state;
• Background-processing providers — to run asynchronous jobs related to verification; and
• Recipient mail servers — contacted during SMTP checks to determine deliverability.

We may also disclose data to comply with the law, enforce our agreements, protect rights and safety, or in connection with a merger, acquisition, or sale of assets.

We retain account and billing data for as long as your account is active and as needed to comply with legal and accounting obligations. Verification results are cached only for a limited period and then expire automatically. Log and usage data are retained for a limited period for security and operational purposes.

We use technical and organizational measures to protect personal data, including encryption of data in transit, hashing of account passwords, encryption of API key secrets at rest, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. Residents of California and similar jurisdictions may have rights to know what we collect, request deletion, and opt out of the “sale” or “sharing” of personal data — which we do not do. We will not discriminate against you for exercising these rights.

To exercise a right, contact us at privacy@bounceable.io. If you submitted another person’s address to us as part of verification, direct your request to the customer who controls that data.

We and our providers may process personal data in countries other than your own. Where we transfer data internationally, we rely on appropriate safeguards, such as standard contractual clauses, to protect it.

We use strictly necessary cookies to authenticate you and maintain your session. We do not use cookies to serve third-party advertising. You can control cookies through your browser, but disabling necessary cookies may prevent you from signing in.

The Service is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, please contact us so we can delete it.

Your use of the Service, and any dispute relating to your privacy or this policy, are also subject to our Terms of Service — including its limitation of liability and its binding arbitration and class-action-waiver provisions — and are governed by the laws of the State of Texas, United States, without regard to its conflict-of-law principles.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy questions or requests, contact us at privacy@bounceable.io. See also our Terms of Service.