Privacy Policy

• Account data — your name, email address, password (hashed), and company, when you sign up.
• Email addresses you submit for verification — the addresses you check via the dashboard, API, or bulk uploads, and the results we return.
• Usage data — API requests, verification counts, credits consumed, and basic logs (IP, timestamp) for security and rate limiting.
• Billing data — handled by our payment processor (Razorpay). We do not store your full card details.

To verify an address we run technical checks — syntax, DNS/MX lookups, and an SMTP “handshake” with the destination mail server. We never send an actual email to the address being checked and never transmit your message content. Verification results may be retained to power your history, billing, and the feedback loop that improves accuracy.

• To provide, operate, and secure the verification service.
• To bill you and prevent abuse.
• To improve accuracy — domain-level and (where you report outcomes) address-level signals refine future scoring.
• To respond to support requests and send service-related notices.

We do not sell your data or the addresses you verify, and we do not use them to send marketing on your behalf.

We share data only with service providers that help us run Purelist — for example our cloud hosting and our payment processor (Razorpay) — under agreements that limit their use of it. We may disclose data if required by law.

We keep account data while your account is active. Verification records and aggregated domain-level statistics are retained to provide history and improve accuracy. You can request deletion of your verification data or close your account at any time (see “Your rights”).

Passwords are hashed, traffic is encrypted in transit (HTTPS), and access to production data is restricted. No method of transmission or storage is 100% secure, but we work to protect your data with reasonable safeguards.

Depending on your location (e.g. GDPR / CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these, contact us via the contact page.

You are responsible for having a lawful basis to process the email addresses you submit for verification, and for complying with applicable privacy and anti-spam laws.

We use only the cookies/local storage needed to keep you signed in and run the app. We do not use third-party advertising cookies.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions about this policy? Reach us through the contact page.