Privacy Policy

This Privacy Policy explains how LeoVerifier (“we”, “us”, or “our”) collects, uses, and protects information when you use our email verification service (the “Service”). We act as a data processor for the email addresses you submit for verification, and as a data controller for your account information.

1. Information we collect

• Account data: your email address, role, account and plan details, and authentication events (magic-link sign-ins and sessions).
• Submitted data: the email addresses you send for verification, and the verification results.
• Usage data: API key identifiers, request counts, timestamps, quota and rate-limit counters, and technical logs needed to operate the Service.
• Device data: IP address and standard request metadata, used for security and abuse prevention.

2. How we use information

• To provide email verification and return results.
• To authenticate users, issue and manage API keys, and enforce quotas and rate limits.
• To secure the Service, detect and prevent abuse and fraud, and debug issues.
• To communicate service-related notices, such as sign-in links.
• To comply with legal obligations.

3. Legal bases

Where applicable law requires, we process personal data on the basis of performance of a contract, our legitimate interests in operating and securing the Service, your consent (where requested), and compliance with legal obligations. When you submit third-party email addresses, you are responsible for having a lawful basis to do so.

4. Retention

We retain account and usage data for as long as your account is active and as needed to provide the Service. Submitted email addresses and their results may be cached for a short period to improve performance and reduce cost, and are then removed or aggregated. We may retain limited records longer where required for security, billing, or legal compliance.

5. Sharing and disclosure

We do not sell personal data. We share data only with service providers who help us operate the Service (such as hosting, database, and email delivery providers) under appropriate confidentiality and data-protection obligations, and when required by law or to protect our rights, users, or the public.

6. Security

We use technical and organizational measures to protect data, including encryption in transit (HTTPS/TLS), hashed API keys and single-use sign-in tokens, same-origin protections, rate limiting, strict security headers, and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Subject to applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object or request portability. To exercise these rights, contact privacy@leomail.xyz. If you submit data about others, they may direct requests to you as the controller of that data.

8. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

9. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to secure the Service. See our Cookie Policy for details.

10. Changes

We may update this Policy from time to time. Material changes will be communicated through the Service or by email, and the “last updated” date above will reflect the latest revision.

11. Contact

Questions about privacy? Contact privacy@leomail.xyz.