We don't sellCalifornians' data. Or anyone's.

This notice supplements our Privacy Policy for California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). It explains the categories of personal information we handle, the rights you hold, and how to use them.

In the past 12 months we have collected these statutory categories of personal information, all for the business purposes in our Privacy Policy:

• Identifiers — name, email, account ID, IP address.
• Customer records — company, billing details processed by our payment vendor.
• Commercial information — plan, credits, purchase history.
• Internet activity — log and usage data, API request metadata.
• List content you submit — email addresses uploaded for verification, which we process strictly as your service provider.

We do not knowingly collect sensitive personal information for the purpose of inferring characteristics, and we do not collect data from consumers we know to be under 16.

We have not sold and do not sell personal information, and we have not shared it for cross-context behavioral advertising in the preceding 12 months. The email addresses you upload are processed only to produce verdicts — VALID CATCH-ALL INVALID — and then returned to you.

We disclose information to vetted service providers (hosting, payments, analytics) only under contracts that forbid them from using it for their own purposes. That is a service-provider disclosure, not a sale.

Subject to verification, you can exercise the right to:

• Know the categories and specific pieces of personal information we have collected, and our sources and purposes.
• Delete personal information we hold, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of any sale or sharing — though we do neither, we honor opt-out signals including Global Privacy Control.
• Limit use of sensitive personal information.
• Non-discrimination — we will never penalize you for exercising these rights.

Submit a request from your dashboard or email [email protected] with the subject “California Rights Request.” You may use an authorized agent with proof of authorization.

• We verify your identity against existing account data before acting.
• We respond within 45 days, extendable once by another 45 days.
• Requests are free unless excessive or repetitive.

For questions about this notice or your California rights, contact our privacy team at [email protected]. If you have a disability and need this notice in an alternative format, we'll provide one on request.