Privacy Policy
Last updated: 21 October 2026
1. Who we are
MailValid is an email verification service run by Bits42 Internet Technologies Private Limited ("MailValid", "we", "us"), a company registered in India.
This policy explains what information we collect, why we collect it, who we share it with and what choices you have. It applies to our website (mailvalid.io), dashboard and API.
2. Email addresses and lists you verify
When you check email addresses with MailValid, through the dashboard, a file upload or the API, here's what we keep:
- Uploaded lists: we save each list you upload, including any extra columns in the file, together with the results. This lets you see your history and download your results again from the dashboard.
- Single checks: we save each address you check, together with its result.
- Verification records: we keep a record of each address checked and its result. This helps us avoid re-checking the same address.
- Short-term cache: we keep a temporary copy of recent results, which is cleared after 7 days.
We use this data only to provide the Service to you. We never sell it, share it or use it for marketing.
For these lists and addresses, you are in control of the data and we only process it on your instructions. Uploaded files can contain other personal information, such as names in extra columns, so only upload what you need checked. If you need a Data Processing Agreement (DPA), email sachin@mailvalid.io.
3. Information we collect about you
Account information
- Your name and email address
- Company name, if you provide it
- Your password, stored only in scrambled (hashed) form that can't be read
- If you sign in with Google: your name and email address from your Google account
- API keys, stored only in hashed form
Billing information
- Your plan, credit balance and purchase history
- Payment confirmations and transaction IDs
Payments are handled by DodoPayments. We never see or store your card details.
Usage information
- IP address, browser and device type
- Pages you visit and actions you take on our site and dashboard
- API usage: which endpoints you call, when, and the response status
- How you first found us, for example the website or ad that sent you
Messages
- Emails and support messages you send us
4. How we use your information, and why we're allowed to
| What we do | Why we're allowed to |
|---|---|
| Create and run your account, verify emails, store your results and manage credits | To provide the service you signed up for |
| Process payments and send invoices | To provide the service, and because tax law requires it |
| Keep the service secure and prevent abuse | Our legitimate interest in protecting MailValid and its users |
| Send service emails (receipts, low-credit alerts, security notices) | To provide the service |
| Send product news and offers | Our legitimate interest, or your consent where the law requires it. You can unsubscribe at any time. |
| Analytics and improving the product (Google Analytics, PostHog) | Your consent, given through our cookie banner |
| Meet legal obligations and enforce our Terms | Legal obligation |
6. Who we share information with
We never sell, rent or trade your information. We share it only with service providers who help us run MailValid, and only as much as they need:
| Provider | What they do | Where |
|---|---|---|
| Amazon Web Services (AWS) | Hosting and database | United States |
| DodoPayments | Payment processing | United States and India |
| Sign in with Google, Google Analytics | United States | |
| PostHog | Product analytics and session replays | United States |
| AWS and Google | Sending account and product emails | United States |
We may also share information:
- with authorities, if the law or a court order requires it
- with a buyer, if MailValid is sold or merged. You'd be told before your information came under a different policy.
7. How long we keep information
| Information | How long |
|---|---|
| Uploaded lists and their results | Until you close your account, or sooner if you ask us to delete them |
| Single checks and their results | Until you close your account, or sooner if you ask us to delete them |
| Verification records (address and result) | We don't currently delete these automatically. You can ask us to delete records of addresses you checked at any time. |
| Short-term results cache | 7 days |
| Account information | Until you close your account |
| API access logs | 30 days |
| Credit and payment records | As long as your account exists, plus 7 years (tax and accounting law) |
| Analytics data | Up to 12 months |
| Support emails | 1 year |
To delete any of your lists, results or records, email sachin@mailvalid.io.
8. How we protect information
- All traffic is encrypted (HTTPS/TLS).
- Passwords and API keys are stored only in hashed form. An API key is shown once, when you create it.
- Data is encrypted while stored.
- We use rate limits and abuse protection to stop misuse.
- Only our application servers and authorised staff can access the database.
9. International transfers
MailValid is based in India, and our servers are in the United States. When your information is transferred outside your country, we protect it with recognised safeguards, such as the European Commission's Standard Contractual Clauses.
10. Your rights
Depending on where you live, you can:
- get a copy of your personal information
- correct information that's wrong
- delete your account and your information, including your lists and results
- receive your information in a commonly used format you can take elsewhere
- object to, or ask us to limit, certain uses of your information
- withdraw your consent at any time, for example for analytics through Cookie settings. This doesn't affect anything done before you withdrew it.
- unsubscribe from marketing emails using the link in any email
- complain to your local data protection authority
If you're someone whose email address was checked by one of our customers, contact that customer first. You can also contact us, and we'll help.
To use any of these rights, email sachin@mailvalid.io. We'll reply within 30 days.
11. Grievance officer (India)
Under India's Digital Personal Data Protection Act, 2023, you can contact our Grievance Officer:
Sachin Bapure
Founder and Grievance Officer
Bits42 Internet Technologies Private Limited
C/O Chandrakant Bapure, Bapure Nivas, First Floor, Degloor Road, Udgir, Maharashtra 413517, India
Email: sachin@mailvalid.io
We'll respond within 7 days.
12. Children
MailValid isn't intended for anyone under 18, and we don't knowingly collect information from children.
13. Changes to this policy
If we make important changes, we'll email you at least 30 days before they take effect. The date at the top of this page shows when the policy was last updated.
14. Contact
Bits42 Internet Technologies Private Limited
C/O Chandrakant Bapure, Bapure Nivas, First Floor, Degloor Road, Udgir, Maharashtra 413517, India
Email: sachin@mailvalid.io