Privacy Policy
Last updated: 2026-08-06
This policy explains how ListCheckup handles personal data in connection with ListCheckup. It covers two distinct relationships, which the law treats differently.
1. Two roles
Your account data. For information about you as a customer, meaning your name, email address, billing records, and usage logs, we are the controller. We decide why and how it is processed.
Addresses you submit for checking. For the email addresses you upload, we are a processor acting on your instructions. You remain the controller and are responsible for having a lawful basis to process those addresses.
2. What we collect
| Data | Purpose | Basis |
|---|---|---|
| Account details (name, email, password hash) | Providing the Service, authentication, support | Contract |
| Billing records | Payment, invoicing, tax records | Contract and legal obligation |
| Usage logs (job counts, timestamps, credits spent) | Metering, rate limiting, abuse prevention | Contract and legitimate interests |
| Submitted email addresses and their results | Performing verification you requested | Processed on your instructions |
3. How submitted addresses are handled
- Addresses are used solely to perform the verification you requested and return results to you.
- They are never sold, rented, shared, or used to build marketing lists.
- No email is ever sent to a submitted address, and the address holder is not notified that a check occurred.
- Verification results may be cached for a limited period so that repeat checks of the same address do not require contacting the mail server again. Cached records can be purged on request.
- This cache is shared and is keyed by the address checked, not by who checked it. It records what a mail server said about an address, and holds nothing about the customer who asked. Closing an account therefore does not empty it — doing so would discard answers other customers have paid for without removing any personal data belonging to the account being closed. It is purged on request as above.
- Uploaded files and their results are deleted according to your account's retention setting, and in any case within 90 days by default.
Uploaded addresses are transmitted securely and are never written into web server access logs.
4. Where data is processed
Processing and storage take place on servers located in the European Union. Verification necessarily involves contacting the recipient's own mail server, which may be located anywhere; only the address being checked is disclosed in that exchange, as it would be if you sent the message yourself.
5. Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Contabo GmbH | Server hosting | Germany (EU) |
| Paddle.com Market Ltd | Payment processing, merchant of record | United Kingdom |
| Cloudflare, Inc. | DNS and content delivery | Global |
We will give notice before adding a sub-processor that handles submitted addresses.
6. Retention
- Account data: for the life of the account, then deleted within 30 days of closure.
- Billing records: retained as long as tax law requires.
- Uploaded lists and results: per your retention setting, 90 days by default.
- Usage logs: 12 months.
7. Your rights
If you are in the EU or UK you may request access to your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Account data can be exported and the account deleted from within the application, or by writing to hello@listcheckup.com. We respond within one month.
Where we act as processor, requests from the people whose addresses you submitted should be directed to you as controller. We will assist you in responding.
You also have the right to complain to your local data protection authority.
8. Security
Data is transmitted over TLS. Passwords are stored only as hashes. Access to production systems is restricted to key-based authentication and limited to personnel who need it.
9. Cookies
The marketing site sets no tracking or advertising cookies. The application sets a session cookie strictly necessary for keeping you signed in.
10. Children
The Service is intended for business use and is not directed at children under 16.
11. Changes and contact
Material changes will be announced before they take effect. For any privacy question, contact ListCheckup at hello@listcheckup.com.