Launch draft — website owner must publish a final privacy policy identifying the legal operator, registered address, contact method, cloud storage location, retention process, processor agreements, and complaint process BEFORE enabling cloud uploads.
Every CSV or TXT you upload is saved automatically to private Supabase Storage, including if you never verify the file, and including when you are not signed in. A corresponding metadata record is held in a private administrator-only table. Signed-in customers can view or download originals for 30 days after upload. Guest upload receipts are visible in the same browser for 30 days. These customer views expire automatically; the administrator copy and its private metadata are retained after that period unless a valid erasure obligation applies. Authorised administrators can access these originals strictly to administer the service. These files are not used to market to uploaded contacts or sold. Upload only lists you are legally authorised to store and process.
If saving fails, the website displays an error and checking stays unavailable until a copy is stored. Hiding or removing a file from the customer view does not delete the administrator copy. Permanent erasure requests must be handled by the website operator under applicable law; an indefinite retention policy cannot override legal rights. Limited service-provider backups and legally required records may remain for the period described in the operator's published retention policy. Pending/failed uploads and anonymous upload retention must be addressed by the operator before public launch.
When you click Clean & verify after signing in, the selected full email addresses are sent from your browser to the website’s server-side checking function to identify domains and account for credits. That function sends only domain names to DNS resolvers for MX lookups, not full email addresses. Each new Clean & verify action charges for its eligible unique addresses, including addresses checked in earlier runs. A request identifier prevents a network retry of the same batch from charging twice. Technical domain DNS results may be cached for 48 hours without waiving the charge. Crypto checkout sends necessary order and transaction details to NOWPayments, not uploaded mailing-list contents.
Account email addresses are used to determine whether you qualify for the personal-email or company-domain introductory offer. Email confirmation is required for credits to be usable. Daily credits are granted no more than once per calendar day (UTC).
We use account authentication, a private storage bucket, row-level access controls, and server-only secrets. No online service is risk-free. Contact the operator for a copy of the full policy, deletion requests, or to report a security issue.
Operator contact: [ADD OPERATOR COMPANY NAME, CONTACT EMAIL AND ADDRESS BEFORE LAUNCH]