Privacy policy

Last updated: 18 September 2026

1. Who we are

MailOK ("we") provides email verification services. This policy explains what we collect when you use the website, the dashboard and the API, and how we handle it.

2. What we collect

Account information: your name, email address and a password hash when you register.
Payment information: handled by Stripe; we store the transaction reference, amount and the credits bought, never your card number.
Addresses you verify: the email addresses you submit and the result of each check, so you can see and download them.
Usage and technical data: the IP address, browser and time of requests, credit movements, and server logs.
Free preview: the addresses checked from the landing page and the result, with the requester's IP.

3. How we use it

to run the verification service and show you your results;
to manage your account, credits and payments;
to send service emails (verification link, password reset, a finished list, billing);
to prevent abuse and keep the service secure;
to meet legal obligations.

We do not sell your data and we do not use the addresses you verify for anything else.

4. Retention

Uploaded files are deleted as soon as they have been processed. Generated export files are removed 30 days after a list is finished; the results themselves stay in your account until you delete the account. Account and billing records are kept while your account is active and as long as the law requires afterwards. Server logs are kept for up to 90 days.

5. Security

Data is encrypted in transit (TLS). Passwords are stored as salted hashes. Access to production systems is restricted. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

6. Processors

We rely on service providers to run MailOK: hosting, Stripe for payments, Cloudflare for bot protection and content delivery, and an email delivery provider for service emails. They process data on our instructions.

7. Your rights

Depending on where you live you can ask to access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. You can delete your account yourself from the settings page. For anything else, write to us.

8. Cookies and local storage

The dashboard keeps your session in your browser's local storage. We do not use advertising or cross-site tracking cookies.

9. International transfers

Data may be processed in countries other than your own. Where required we rely on appropriate safeguards for such transfers.

10. Changes

We may update this policy. Significant changes are announced by email or in the service.

11. Contact

Privacy questions: [email protected] or the contact form.