Privacy Policy

1. Introduction

EmailCheck ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email deliverability checking service (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Service, we collect:

• Account Information: Name, email address, password, and company information
• Payment Information: Processed securely through Lemon Squeezy, our Merchant of Record. We do not store your credit card details directly.
• Domain Data: Domain names and email configurations you submit for checking
• Support Communications: Information provided when you contact customer support

2.2 Automatically Collected Information

When you use the Service, we automatically collect:

• Usage Data: Check history, feature usage, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Analytics Data: Page views, time spent, navigation paths (via analytics tools)
• Cookies and Tracking: Session tokens, preferences, authentication cookies

2.3 DNS and Technical Data

To provide our Service, we query DNS records (SPF, DKIM, DMARC) and check blacklist databases for the domains you submit. We store these results temporarily for caching purposes and to provide your check history according to your subscription tier.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Perform domain checks, generate reports, and provide deliverability recommendations
• Account Management: Create and maintain your account, process subscriptions, and handle billing
• Service Improvement: Analyze usage patterns to improve features and user experience
• Customer Support: Respond to inquiries, troubleshoot issues, and provide technical assistance
• Communication: Send transactional emails, service updates, and marketing communications (with your consent)
• Security: Detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., Stripe for payments, Cloudflare for DNS resolution, Vercel for hosting)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, subpoena, or legal process
• Protection of Rights: To protect our rights, property, or safety, or that of our users or the public
• With Your Consent: When you explicitly authorize us to share your information

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Check history is retained according to your subscription tier: 7 days for Free, 90 days for Basic, and unlimited for Pro and Agency plans. Cached DNS results are retained for 24 hours. After account deletion, we retain minimal information for legal compliance and fraud prevention purposes for up to 7 years.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest for sensitive data
• Secure authentication using bcrypt password hashing and JWT tokens
• Regular security audits and vulnerability assessments
• Access controls and least-privilege principles
• Payment processing through PCI-DSS compliant providers (Stripe)

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at privacy@em-check.com. We will respond within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your logged-in session
• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Improve service performance and user experience

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

9. Third-Party Services

Our Service integrates with the following third-party services:

• Lemon Squeezy: Merchant of Record for payment processing, tax compliance, and invoicing (see Lemon Squeezy's Privacy Policy)
• Cloudflare: DNS resolution and CDN services
• Vercel: Hosting and infrastructure
• Upstash: Redis caching services
• Resend: Transactional email delivery

These services have their own privacy policies governing their use of your information. We encourage you to review their policies.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

For EU customers requiring a Data Processing Agreement (DPA), please contact us at privacy@em-check.com.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: