Legal

    Privacy Policy

    Last updated: October 29, 2025

    Introduction

    VeriMailX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email validation service.

    Information We Collect

    Account Information

    • Email address
    • Name and company information
    • Payment information (processed securely through third-party providers)
    • API keys and usage data

    Email Validation Data

    • Email addresses submitted for validation
    • Validation results and metadata
    • API request logs

    Usage Information

    • Log data (IP address, browser type, pages visited)
    • Device information
    • Cookies and similar technologies

    How We Use Your Information

    • Provide and maintain our email validation service
    • Process your transactions and send related information
    • Send administrative information and service updates
    • Respond to your inquiries and provide customer support
    • Improve and optimize our services
    • Monitor and analyze usage patterns and trends
    • Detect, prevent, and address technical issues and fraud

    Google User Data

    VeriMailX allows you to optionally connect your Google (Gmail) account so that the application can send emails on your behalf (for example, cold outreach, campaign sends, and seed/placement tests) and read message metadata required to track replies, bounces, and deliverability. This is an optional feature you explicitly initiate by clicking "Connect Gmail" inside your dashboard — it is not used for signing into VeriMailX.

    When you connect your Google account, we access the following Google user data strictly within the scope of the OAuth permissions you grant: your Google account email address, basic profile information (name, profile picture) returned by the OAuth consent screen, and — only for the scopes you approve — the ability to send emails from your mailbox and read message headers/metadata to detect replies and bounces.

    How we use Google user data:

    • To send emails from your connected Gmail account at your explicit request (campaigns, sequences, placement tests).
    • To read reply, bounce, and delivery metadata so we can show you accurate campaign statistics and conversation threads inside your VeriMailX dashboard.
    • To display your connected mailbox address and status in your account.

    How we do NOT use Google user data:

    • We do not sell, rent, trade, or transfer your Google user data to any third party.
    • We do not share your Google user data — including your connected Gmail address, OAuth tokens, or message content/metadata — with Cloudflare, Razorpay, Resend, or any other vendor. Those providers are used only for unrelated infrastructure (CDN/security, payment processing for purchases you make from us, and our own transactional system emails) and never receive your connected Gmail data.
    • We do not use Google user data for advertising or to build advertising profiles.
    • We do not use Google user data to train, develop, or improve any generalized or non-personalized AI/ML models.
    • We do not allow humans to read your email content, except (a) with your explicit consent, (b) when necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data is aggregated and anonymized for internal operations.

    Who Google user data is shared with: Google user data obtained through this integration is processed only by VeriMailX and stored on our cloud database provider, Supabase, Inc., which acts as a sub-processor under contractual confidentiality and data protection obligations and stores the data solely on our behalf so the application can function. Google user data is not shared with any other third party except when strictly required by valid legal process or to protect the rights, safety, and security of VeriMailX or our users. In the event of a merger, acquisition, or sale of assets, we will provide users with prior notice before any transfer.

    You can disconnect your Google account at any time from the dashboard, or revoke our access directly via Google account permissions. To request deletion of Google user data we hold, contact us at support@verimailx.com and we will delete it promptly.

    Sharing and Disclosure of Other Information

    Separately from Google user data (which is handled as described in the section above and is not shared with the vendors listed here), we do not sell or rent your personal information. Other personal data you provide to VeriMailX may be shared only in the following limited circumstances:

    • Service providers / sub-processors: Supabase, Inc. (database and hosting), Resend, Inc. (our own transactional system emails such as password resets and receipts — not your connected Gmail), Razorpay Software Pvt. Ltd. (payment processing when you purchase a plan), and Cloudflare, Inc. (DNS, CDN, and security). Each is bound by strict confidentiality and data protection obligations.
    • Legal compliance: When required by law, regulation, subpoena, or valid legal process.
    • Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to users.

    Data Retention

    We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Email addresses submitted for validation are retained for 90 days for analytics and quality improvement purposes, after which they are permanently deleted.

    Data Security

    We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

    • Encryption of data in transit and at rest
    • Regular security assessments and updates
    • Access controls and authentication mechanisms
    • Employee training on data protection

    Your Rights

    Depending on your location, you may have the following rights:

    • Access your personal information
    • Correct inaccurate data
    • Request deletion of your data
    • Object to processing of your data
    • Request data portability
    • Withdraw consent

    Contact Us

    If you have questions about this Privacy Policy or our data practices, please contact us at:

    Email: support@verimailx.com