Privacy policy

We verify email addresses for a living, so we take the data behind them seriously.

Published by

Company
Confirmail
Contact
support@confirmail.io

1. Who is responsible

Confirmail is operated by Confirmail. For your account data and for the measurement of our advertising we are the data controller. For the email lists you upload we act as a processor: we handle them only on your instructions, to verify them. Contact: support@confirmail.io.

2. What we collect

  • Account data: your name, email address, password (stored only as a secure hash), team members and settings.
  • Data you submit: email addresses and lists you verify, names and domains you search, and the results.
  • Billing data: handled by Paddle, our merchant of record. We receive the purchase, amount and invoice reference, never your full card number.
  • Usage data: technical logs (IP address, browser, pages, API requests) used for security, limits and support.
  • Advertising measurement: with your consent where required, which of our ads brought you and whether you then signed up or bought. Details in section 4.

3. Why we use it

  • To provide the service and your results (performance of our contract with you).
  • To bill purchases and plans, and keep invoices as the law requires (legal obligation).
  • To secure the service, prevent abuse and fix problems (legitimate interest).
  • To send account emails: confirmations, receipts, finished lists, low-credit alerts. You can turn optional notifications off in your settings.
  • To measure which of our Google Ads campaigns bring sign-ups and purchases (your consent in the European Economic Area, the United Kingdom and Switzerland; our legitimate interest in measuring our advertising elsewhere).

4. Cookies and ad measurement

We use a small number of cookies and similar technologies. Some are needed for the website and the app to work (signing in, remembering your consent choice, counting the free checks of the live demo). Others measure our advertising.

Advertising measurement tells us which of our ads lead people to sign up and buy, so we can stop the ones that do not work. For this, our advertising partner (Google) may receive the ad you came from, these actions, and a protected, one-way encoded (hashed) version of your email address, never your email address in readable form.

  • In the European Economic Area, the United Kingdom and Switzerland, advertising measurement is off by default and starts only if you click Accept in the banner.
  • Elsewhere, it is on by default and you can refuse it.
  • You can change your mind at any time with the Cookie settings link at the bottom of the website. Refusing does not affect your use of Confirmail.

Google processes this data under the Google Ads Data Processing Terms. See also how Google uses information from sites that use its services.

5. How long we keep it

  • Uploaded lists and their results: deleted automatically 30 days after upload.
  • Account data: as long as your account exists. Deleting your account deletes it.
  • Billing records: as long as tax law requires.
  • Advertising measurement: kept by our advertising partner under its own retention rules. We keep no copy of what is sent.

6. Service providers

We never sell your data or your lists. We work with a few providers, only to run the service and under contract: hosting and database, our verification infrastructure, payment processing (Paddle, our merchant of record), account emails, and advertising measurement (Google, see section 4).

Some of them are outside your country; these transfers are protected by standard contractual clauses or equivalent safeguards.

7. How we verify without emailing anyone

To check a mailbox we connect to the recipient's mail server and ask whether the address exists, then close the connection before any message is sent. The people on your lists never receive anything from us, and the addresses on your lists are never sent to Google or used for advertising.

8. Security

Data travels over HTTPS. Passwords and API keys are stored as hashes, integration credentials are encrypted, and access is limited to what is needed to run the service.

9. Your rights

You can access, correct, export or delete your data, withdraw your consent to ad measurement at any time (Cookie settings), object to some uses, and complain to your data-protection authority. Most of this is available directly in your account; for anything else write to support@confirmail.io and we answer within 30 days.

Questions about this page? Write to support@confirmail.io. See also our Terms, Privacy policy and Refund policy.