Your privacy choices

We use strictly necessary cookies to keep you signed in and secure. With your consent we also use analytics and marketing cookies. See our Cookie Policy.

Privacy Policy

Last updated: September 2026

This Privacy Policy explains what information AuthoriseMail collects, why we collect it, how we use and protect it, and the rights you have over your personal data.

1. Who we are

AuthoriseMail provides email intelligence and verification services (the “Service”). For account and billing data, AuthoriseMail acts as the data controller. When you submit email lists for verification, you are the controller and AuthoriseMail acts as your data processor.

You can reach us at any time at support@authorisemail.com.

2. Data we collect

  • Account data: name, email address, password hash, and authentication provider details.
  • Usage data: verification requests, API usage, credit transactions, audit logs, and IP addresses for security and rate limiting.
  • Uploaded data: email addresses and any additional columns contained in files you submit for verification.
  • Payment-related data: plan selections and billing records (card details are handled by our payment processor and never stored by us).
  • Support data: messages you send through our contact form or email.

3. Lawful bases for processing

We process personal data under the following lawful bases (GDPR Art. 6):

  • Contract — to provide the Service you signed up for, including verification, billing, and support.
  • Legitimate interests — security, fraud prevention, service improvement, and aggregate analytics.
  • Consent — optional marketing communications and non-essential cookies (you may withdraw at any time).
  • Legal obligation — tax, accounting, and regulatory record-keeping.

4. How we use data

  • Operate, maintain, and secure the Service (including real-time verification and abuse prevention).
  • Manage your account, credits, and billing.
  • Send transactional emails (verification, password reset, receipts) and, with consent, product updates.
  • Produce aggregated, de-identified statistics that cannot identify you.

5. Data retention

Verification results are retained while your account is active so you can export and audit them. Account data is kept for the life of the account plus the period required by tax and accounting law. You may request earlier deletion at any time (see Your rights).

6. Sharing and subprocessors

We do not sell personal data. We share data only with service providers who help us operate the Service under data-processing terms, such as cloud hosting, transactional email delivery, authentication (Google sign-in, where you choose it), and payment processing. A current list of subprocessors is available on request.

7. International transfers

Your data may be processed in countries other than your own. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

8. Your rights

To exercise any right, email support@authorisemail.com with the subject “Privacy request”. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your account and associated data (“right to be forgotten”).
  • Restriction & objection — limit or object to certain processing, including marketing.
  • Portability — receive your data in a structured, machine-readable format (self-serve exports are available in the dashboard).
  • Withdraw consent — for cookies and marketing, at any time, without affecting prior processing.

9. Marketing and unsubscribe

We only send marketing emails with your consent. Every marketing email contains an unsubscribe link, and you can also opt out from account settings or by contacting us. Transactional emails (security, receipts) are not marketing and are required to operate your account.

10. Security

We apply technical and organizational measures including encryption in transit, hashed passwords, least-privilege access, rate limiting, and audit logging. See our Security page for details. No method of transmission or storage is 100% secure; see the breach-handling section of our GDPR page.

11. Changes

We may update this policy from time to time. Material changes will be announced in the dashboard or by email before they take effect.

This document is provided as a professional template for AuthoriseMail and should be reviewed by qualified legal counsel before production launch.