This Privacy Policy explains what personal data BulkVerify (“BulkVerify”, “we”, “us”) collects when you use bulkverify.email, why we collect it, how long we keep it and which rights you have. If you have questions, contact us at [email protected].
1. Data we collect
Account data
When you register we collect your first name, last name, email address and password. Passwords are stored only as a secure one-way hash — we cannot read them. We also store your preferred language, the date you registered and verified your email, and the IP address and time of registration and of your most recent login.
Lists you upload
When you verify a list we process the file you upload, the email addresses it contains and the results we produce (status, reason, domain and MX information). We also store metadata about each verification job: file name, size, selected category, counts and timestamps.
Contact messages
If you use the contact form we store your name, email address, subject, message, language and IP address so we can answer you and prevent abuse.
Technical data
Like every website, our servers process technical data such as IP addresses, browser type and requested pages in server and security logs. We use these to operate the service, enforce rate limits and investigate errors and abuse.
Website statistics
We use our own statistics service (Megbil Stats) to understand how the website is used. It does not use cookies. It stores a random visitor identifier and a session identifier in your browser’s local storage and sends the page you visit and the referring page to our statistics server. We use this information only in aggregated form and do not use it for advertising.
2. Why we use your data and on what legal basis
- To provide the service (account, verification, downloads, emails about your jobs) — necessary to perform our contract with you.
- To keep the service secure and free from abuse (rate limits, bot protection, abuse detection, logs, operational archive) — our legitimate interest in running a free service safely.
- To answer your messages — our legitimate interest, or steps taken at your request.
- To improve the service with aggregated statistics — our legitimate interest.
- To comply with legal obligations, for example responding to lawful requests from authorities.
3. Lists you upload: your responsibility
The email addresses in your lists belong to other people. By uploading a list you confirm that you collected those addresses lawfully and that you are allowed to have them verified. Do not upload lists you obtained by purchase, scraping or other unlawful means. See our Acceptable Use Policy.
4. How long we keep data
Your downloadable files are removed from your account 24 hours after your verification is completed; operational records are retained separately in line with our policy. Uploaded lists and verification results are kept in an internal operational archive that is not accessible from the website, for service integrity, security, abuse prevention and improving verification quality. Account data is kept while your account exists. Details are in our Data Retention Policy.
5. Who we share data with
We do not sell, rent or trade personal data. We use a small number of service providers who process data on our behalf:
- Hosting provider — our servers and databases.
- Cloudflare — content delivery, DDoS protection and bot protection (Turnstile).
- Email delivery — our mail server sends verification, password and job-completed emails.
We may disclose data if required by law or to protect our rights, our users or the public.
6. International transfers
Our providers may process data in countries outside your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.
7. Security
We protect data with HTTPS, hashed passwords, CSRF and rate-limit protection, server-side file validation and private storage that is not reachable from the web. No system is perfectly secure, but we work to protect your data and will notify you where required by law.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to processing, and to lodge a complaint with a data protection authority. You can update your name and language and delete your account at any time in your account settings. For other requests, contact [email protected]. We may need to verify your identity before acting on a request.
9. Children
BulkVerify is not intended for anyone under 16 years of age. We do not knowingly collect data from children.
10. Changes
We may update this policy. The date at the top shows the latest version. If changes are significant we will inform registered users by email or on the website.