Privacy Policy

PilotVerify (pilotverify.net) is operated by PILOTLAB LLC, 304 S. Jones Blvd, Las Vegas, Nevada 89107, USA (“PilotVerify”, “we”, “us”). This policy explains what personal data we collect when you use our website, dashboard and API, why we collect it, who we share it with, how long we keep it, and the choices you have.

For account, billing, website and security data we act as the controller. For the email lists you upload for verification, we act as a processor on your behalf. The GDPR & Data Protection page explains these roles in more detail.

Account information

When you sign up we collect your name, email address and password (stored only as a bcrypt hash, never in plain text), your workspace name, your role in the workspace and whether your email address has been verified.

Billing information

We store your Stripe customer ID and a record of each purchase (amount and credits). Card details are entered on Stripe Checkout and never reach our servers.

Verification data (service data)

When you verify addresses through the dashboard, a bulk CSV upload or the API, we process the email addresses you submit, the results we return (status, syntax, MX, disposable, catch-all and SMTP checks, and the reason for the result) and, for CSV uploads, the original row data in your file. Uploaded CSV files are stored in Amazon Web Services S3 in the us-east-2 (Ohio) region.

API keys

We store the API keys created for your workspace and when each key was last used.

Sign-in and sign-up security logs

Each time someone signs up, signs in (successfully or not) or signs out, we record the event type, the time, the IP address, the browser’s user agent, the browser, operating system and device type we derive from it, and the country when our hosting provider supplies it. We use these logs to keep accounts secure and to detect fraud and abuse.

Free email verifier on our homepage

If you use the free verifier on our homepage without an account, we store the email address you checked, the result, your IP address and your user agent, so we can apply rate limits and prevent abuse.

Contact form

If you contact us through the website we receive your name, email address, company (optional) and message.

Staff actions

We keep an audit log of actions our staff take on customer accounts, such as credit adjustments, role changes and viewing an account to provide support.

Cookies and analytics

We use a small number of essential cookies, and optional analytics and marketing cookies only if you allow them. See our Cookie Policy for the full list.

We use personal data to:

• provide the service: run verifications, show results and keep your account working;
• process purchases and keep billing records;
• send service emails such as email verification, password resets and purchase confirmations;
• protect accounts, detect fraud and abuse, and enforce rate limits;
• answer support and contact requests;
• understand how the website is used so we can improve it;
• comply with legal, tax and accounting obligations.

If you are in the EEA or UK, the legal basis for each purpose is set out on our GDPR & Data Protection page.

We share personal data only with service providers that help us run PilotVerify, under contracts that limit how they may use it:

To check whether a mailbox exists, our own verification servers connect to the recipient’s mail server. No email is sent to the address being checked.

We may also disclose data:

• when required by law, or to protect our rights, users or the public;
• to a buyer or successor if our business is merged, acquired or sold, in which case we will let you know.

We use reasonable technical and organisational measures to protect personal data, including:

• encrypting traffic between your browser or API client and our servers (HTTPS);
• storing passwords only as bcrypt hashes;
• keeping card data off our servers by using Stripe Checkout;
• logging sign-in activity and staff actions on accounts;
• limiting access to customer data to staff who need it.

No system is completely secure. If a breach affects your personal data, we will notify you without undue delay. You can help by keeping your password and API keys private.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• have your data deleted;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time (for example, for analytics or marketing cookies);
• complain to your local data protection authority.

To make a request, email support@pilotverify.netwith the subject “Privacy request”. We may need to confirm your identity first. If your data is in a list that one of our customers uploaded, we will refer you to that customer, because they control that data.

California residents:we do not sell personal information. If you opt in to marketing cookies, the Meta Pixel may count as “sharing” for cross-context behavioural advertising under the CPRA. You can opt out at any time through cookie settings, or send a “Do Not Sell or Share” request to support@pilotverify.net.

PilotVerify is based in, and processes data in, the United States. If you are outside the US, your data will be transferred there. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. See International transfers for details.

PilotVerify is a business service for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, tell you by email or with a notice in the app.

Questions about this policy or your data:

• Email: support@pilotverify.net(subject “Privacy request”)
• Phone: 1 888 370 6801
• Post: PILOTLAB LLC, 304 S. Jones Blvd, Las Vegas, Nevada 89107, USA