Back to Home

Privacy Policy

Last updated: September 30, 2026

1. Introduction

Verifly ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our email verification service.

2. Information We Collect

Account Information

  • Email address (for account creation and login)
  • Name (optional)
  • Company name (optional)
  • Payment information (processed by Stripe, not stored by us)

Usage Data

  • Email addresses submitted for verification
  • API request logs (endpoint, timestamp, response code)
  • Credit usage and purchase history

Technical Data

  • IP address
  • Browser type and version
  • Device information

3. How We Use Your Data

We use your information to:

  • Provide and maintain the email verification service
  • Process payments and manage your account
  • Send service-related communications
  • Prevent fraud and abuse
  • Improve our service and develop new features
  • Comply with legal obligations

4. Data Retention

  • Email verification results: Cached for 24 hours, then deleted
  • Bulk job data: Retained for 30 days, then automatically deleted
  • Account data: Retained while your account is active
  • API logs: Retained for 90 days for debugging and security

5. Data Security

We implement industry-standard security measures:

  • All data transmitted via HTTPS/TLS encryption
  • API keys are hashed using SHA-256
  • Database encryption at rest
  • Regular security audits and monitoring
  • Access controls and authentication

6. Data Sharing

We do NOT sell your data. We share personal data only with service providers that process it on our behalf to run Verifly, and only as needed for the purposes below:

  • Email verification infrastructure (Million Verifier): Receives the email addresses you submit so their deliverability can be checked. It does not receive your account details.
  • Supabase: Database and authentication provider
  • Amazon Web Services: Application hosting
  • Stripe, Plisio and Coinbase Commerce: Card and optional crypto payment processing
  • Anthropic and OpenRouter: AI processing of messages you send to our support chat
  • Email delivery providers: Sending service and support emails
  • Law enforcement or regulators: When required by law

Categories of data shared: submitted email addresses (verification provider), account and billing details (payment and database providers), and support messages (support chat and email providers).

6a. Connected Apps (OAuth)

You can connect Verifly to third-party apps, such as ChatGPT, using a secure OAuth sign-in. You choose whether to allow each connection on our consent screen.

  • What a connected app can do: verify the email addresses and lists you ask it to (using your account's credits), create and read bulk verification jobs, and read your credit balance, usage and basic account details (email, name, company).
  • What it cannot do: manage API keys, buy credits, change billing or settings, or delete your account.
  • What we receive: only the inputs the app sends to our tools (for example, the addresses to verify) plus the access token that identifies your account. We do not receive your chat history.
  • Retention: requests from connected apps are handled and retained exactly as described in Data Retention above.
  • Your control: disconnect the app at any time from that app's settings, or contact support@verifly.email and we will revoke its access. The connected app's own handling of your data is governed by its provider's privacy policy.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing
  • Restriction: Limit how we use your data

To exercise these rights, contact us at support@verifly.email (or privacy@verifly.email) or through the dashboard.

8. Cookies

We use essential cookies for:

  • Authentication and session management
  • Security and fraud prevention

We do not use advertising or tracking cookies.

9. International Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or dashboard notification. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights:

  • Email: support@verifly.email
  • Privacy requests: privacy@verifly.email
  • Support page: verifly.email/support
  • Dashboard support chat