Privacy & retention

We keep as little as possible, for as short as possible.

What we store #

Single verifications: never stored with the address. The ledger keeps a SHA-256 hash and the status.
Domain cache: MX results per domain for 24 hours. Nothing about the local part is cached.
Lists: address and status per row, so you can export them, purged 30 days after the job was created. Delete a list any time from the dashboard.
API keys: SHA-256 hashes only, shown in full once at creation.
Logs: addresses and keys are redacted.

The ledger records that a lookup ran and for which domain, never the guessed addresses.

Deleting your account removes your lists, keys, tickets and ledger. Ask us from Support.