Privacy Policy

1. Information we collect

• Account information: your name, email address and sign-in details, collected through our sign-in provider, Clerk. If you sign in with Google, we receive your basic Google profile.
• Email addresses you submit: the addresses and lists you upload, paste or send through the API or an AI agent for verification (“Customer Data”), and the verification results.
• Billing information: purchases are handled by Stripe. We receive the purchase amount, the credit pack and payment status. We never see or store your full card number.
• API keys: we store only a one-way hash and a short prefix of each key, never the full key.
• Usage and technical data: credit balance and transaction history, API usage, and standard server logs such as IP address, browser type and request times.
• Cookies and analytics: we use cookies needed to keep you signed in (set by Clerk). We also use Google Analytics, which sets cookies to measure how visitors use our website (pages viewed, approximate location, device and browser). We do not use advertising cookies. You can opt out of Google Analytics with Google's opt-out browser add-on or by blocking cookies in your browser.

2. How we use information

• To verify the email addresses you submit and show you the results.
• To run your account, process payments and keep track of your credits.
• To secure the Service, prevent abuse and fraud, and enforce our Terms.
• To provide support and send important service or account messages.
• To understand and improve how the Service performs.

We do not sell personal information and do not use Customer Data for advertising.

3. How verification works with your data

• We first run free checks ourselves: syntax, typo detection, disposable and role-address detection, and DNS lookups of the address's domain.
• Addresses that need a mailbox-level check are sent to our email verification provider (currently MillionVerifier), which contacts the recipient's mail server to check the mailbox exists. No email is sent to the address.
• To avoid repeat lookups, we keep a cache of recent verification results for up to 30 days. The cache is keyed by email address and is not linked to your account.

4. Service providers we share data with

We share information only with providers that help us run the Service, under their own data protection terms:

• Clerk: sign-in and account management.
• Supabase: database hosting for accounts, credits, API keys and verification history.
• Stripe: payment processing.
• Google Analytics: website usage analytics. We do not send the email addresses you verify to Google.
• Email verification providers (currently MillionVerifier): mailbox-level checks.
• Hosting and infrastructure providers: running the website and API.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of our business, in which case this policy will continue to apply.

5. How long we keep data

• Account, credit and payment records: for as long as your account is open, and afterwards as required for tax, accounting and legal purposes.
• Verification history (the addresses you checked and their results): until you delete it or close your account.
• Shared result cache: up to 30 days per address.
• Server logs: typically no longer than 90 days.

To delete your verification history or your account, email support@bouncehound.com from your account email address. We will complete the request within 30 days.

6. Security

Data is encrypted in transit. Our database is only reachable by our servers, API keys are stored as hashes, and payment details stay with Stripe. No system is perfectly secure, so we cannot guarantee absolute security; we will notify you of a breach affecting your data as required by law.

7. Your rights

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. We do not sell or “share” personal information as those laws define it. To make a request, email support@bouncehound.com. We will not discriminate against you for exercising your rights. You can also complain to your local data protection authority.

8. Email addresses of other people

When you submit addresses that belong to other people, you act as the controller of that data and we process it on your behalf to provide the Service. You are responsible for having a lawful basis to collect and verify those addresses. If you are a person whose address was checked through BounceHound and you have questions, contact us and we will help where we can.

9. International transfers

We are based in the United States and our providers may process data in the US and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by our providers.

10. Children

BounceHound is a business service and is not directed to children under 16. We do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy. If changes are material, we will notify you by email or in the dashboard before they take effect. The effective date at the top shows when it was last updated.

12. Contact

Two Cases LLC · support@bouncehound.com