Privacy Policy
Last updated: 31 August 2026.
This describes what SF Email Verifier actually does with data, not what a template says it might do. Where a limit exists it is stated as a number, and where a capability does not exist it is not claimed.
1. What we collect
Three separate things, kept for different reasons:
- Account data. Your email address, your name if you give one, and a password hash. If you sign in with Google we receive your email address and name from Google and never see your password.
- Billing data. Handled entirely by our payment providers. We store which plan you are on and your provider-side customer reference. We never see or store card numbers.
- Verification input. The email addresses you submit, and for the email finder the person name and company domain you type. This is other people’s personal data, which is why the rest of this page matters.
We also keep ordinary server logs (IP address, timestamp, endpoint) for security and debugging.
2. How long we keep it
- Bulk jobs: 7 days. The list you upload, the result rows, and both CSV files are deleted automatically 7 days after the job is created. You do not have to do anything.
- Delete a job yourself at any time. Deleting a job from your dashboard removes the uploaded file, the results, and the result CSV immediately, without waiting for the 7 days.
- Verification verdicts: cached for up to 30 days. When an address gets a definitive answer we remember that answer for up to 30 days so that checking it again is instant and does not contact the receiving mail server a second time. The cache holds the address and its verdict. It is not linked to whoever submitted it, and it is not used to build profiles.
- Account data: until you delete the account.
- Server logs: rotated on a short cycle and not used for anything except operating the service.
3. What we do not do
We do not sell data. We do not share it with advertisers. We do not use submitted addresses to train machine learning models, and we do not build or sell email lists from what passes through the service.
4. Who else processes your data
Running the service means using other companies. These are the ones that can see data, and what each one sees:
- Amazon Web Services and Hostinger: hosting for the application, database, and the service that performs SMTP checks.
- Vercel: hosting for the website you are reading.
- Freemius and SSLCommerz: payment processing.
- Google: optional sign-in, reCAPTCHA on signup and password reset, and delivery of transactional email such as receipts and password resets.
- Sentry: error monitoring. A crash report can contain the request context that caused it.
- Telegram: used only to alert us when something breaks. Alerts carry technical context, which can occasionally include an address that triggered a fault.
- Microsoft Clarity and Google Analytics: website analytics, described in section 5.
We are a small operation and this list is short on purpose. If you need it in writing for a vendor review, ask and we will confirm it.
5. Cookies, analytics, and session recording
The site sets one cookie to remember your cookie choice, plus the cookies needed to keep you signed in. Nothing else loads until you press Accept on the banner.
If you accept, we load Google Analytics with IP anonymisation and Microsoft Clarity, which records your session: the pages you visit, where you move and click, and how far you scroll. This is used to find confusing parts of the interface. If you decline, neither one loads at all. You can change your mind by clearing this site’s cookies in your browser.
6. Your rights
If you are in the EU, the UK, or a region with comparable law, you have the right to access, correct, export, restrict, or erase your personal data, and to object to processing.
Deleting your account works and is immediate. Use Settings in your dashboard, or email us. It removes your account, your jobs, and your uploaded files.
For anything else, email info@sfemailverifier.com. We answer within 30 days, usually far sooner.
7. Where data is processed
Our servers are outside the EU, so data about EU residents is transferred out of the EU. If you are an EU business sending us other people’s addresses, our GDPR page covers the arrangement you need.
8. Changes
If we change something that matters, we will change the date at the top and email account holders. Quietly rewriting this page is not something we will do.