GDPR

This page explains how Analyzemail, operated by Advanced Applied Science LLC, handles personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR. Our privacy policy has the full detail.

Who is responsible for what

Your lists: when You upload a list or check addresses through the API, You are the controller of that data and we are Your processor. We use it only to run the checks You asked for and to show You the results, and we do not use it for anything else.

Your account: for Your own account details, payments and the Site’s cookies, we are the controller.

Lawful basis

As a controller You need a lawful basis for keeping and checking the addresses on Your lists, for example consent or legitimate interest, and for the email You later send to them. Verifying addresses You may not lawfully email does not make that email lawful.

For our own processing, we rely on the contract with You for running Your account, on legal obligations for invoices and tax records, on legitimate interest for keeping the Services secure, and on consent for analytics and marketing cookies.

How checks touch the people on Your list

A check looks up the address’s domain in DNS and asks its mail server whether the mailbox exists. No message is sent to the person, and nothing is stored about them beyond the result in Your account and a short-lived cache of that result.

Where data is stored

Data is stored on servers in the United States. Where the GDPR requires it, transfers rely on the Standard Contractual Clauses in our providers’ data processing agreements. Our service providers are listed in the privacy policy.

Security

Connections to the Site and API are encrypted with TLS. Access to Your lists requires Your login or one of Your API keys, which You can revoke at any time. Bounced addresses You import are stored only as one-way hashes.

Retention and deletion

Lists and results stay in Your account until You delete them. Deleting a list removes the uploaded file and its results. To close Your account and remove everything in it, email us and we will do so within 30 days.

Data processing agreement

If You need a data processing agreement under Article 28, email [email protected] and we will send ours for signature.

Requests from individuals

If someone asks You about their data on a list You checked with us, we will help You answer. If they write to us directly, we will tell them to contact You and, where You ask us to, act on Your instructions. You can reach us at [email protected].