Privacy Policy

Last updated: February 2026

Introduction

Wontbounce Inc. ("Wontbounce", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you access our website at wontbounce.com and use our email verification services (collectively, the "Service"). This policy applies to all users worldwide and is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Data Controller

Wontbounce Inc. is the data controller responsible for your personal data. If you have any questions about how we process your data, you can reach us at [email protected].

Lawful Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

Contract performance: Processing necessary to provide the Service you have signed up for, including account management, email verification, and billing.
Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention and security monitoring, provided these interests do not override your rights. We do not use your verification data or results to train models or improve accuracy.
Legal obligation: Processing necessary to comply with applicable laws and regulations.
Consent: Where required, we will obtain your explicit consent before processing, such as for marketing communications. You may withdraw consent at any time.

Information We Collect

Account Information

When you register via Google OAuth, we collect:

Email address (for authentication and account identification)
Full name (from your Google profile)
Profile picture (from your Google account)

Email Verification Data

When you use our verification service, we process:

Email addresses submitted for verification
Verification results and associated metadata
Uploaded files (CSV, Excel, TXT) containing email lists
API request logs and timestamps

Technical Information

We automatically collect:

IP address and approximate geolocation
Browser type, version, and device information
Operating system
Access times, pages viewed, and referring URLs

Payment Information

Payment processing is handled entirely by our third-party payment processor, Creem. We do not store your credit card number, bank account details, or other financial information on our servers. We only receive confirmation of your subscription status, plan type, and transaction identifiers.

How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain the email verification Service
To process your verification requests and deliver results
To manage your account, subscriptions, and credit balance
To monitor usage, enforce plan limits, and prevent abuse
To maintain the performance and reliability of our infrastructure
To provide customer support and respond to your inquiries
To comply with legal obligations and enforce our Terms of Service
To detect and prevent fraud, abuse, and security threats

Data Retention

We do not store your verification data or results. For the limited data we do collect (account info, logs), here is how long we keep it:

Account information Until account deletion or upon request

Email addresses submitted for verification Never stored; processed in memory and immediately discarded

Verification results Never stored; returned to you and discarded

Uploaded files (CSV, XLSX, TXT) Deleted immediately after processing

Technical and access logs 90 days

Billing and transaction records As required by applicable tax and accounting laws

Information Sharing and Disclosure

We do not sell, trade, or rent your personal data or verification results to anyone, under any circumstances. We do not use your verification data for any purpose other than returning results to you. We may share limited account information only in the following circumstances:

Service providers: Trusted third-party vendors who help us operate the Service (e.g., cloud hosting, payment processing via Creem, analytics). These providers are contractually bound to process data only on our behalf and in accordance with this policy.
Legal requirements: When required by law, regulation, court order, or governmental authority.
Protection of rights: To protect the rights, property, or safety of Wontbounce, our users, or the public.
Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case you will be notified.
With your consent: For any purpose you have explicitly agreed to.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection. When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms under Article 46 of the GDPR.

Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
Preference cookies: To remember your settings and preferences.
Analytics cookies: To understand how the Service is used and to improve it. These are anonymized where possible.
Security cookies: To detect and prevent fraud and unauthorized access.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect core functionality of the Service.

Your Rights

Depending on your location, you have the following rights regarding your personal data:

Right of access

Request a copy of the personal data we hold about you.

Right to rectification

Request correction of inaccurate or incomplete personal data.

Right to erasure ("right to be forgotten")

Request deletion of your personal data, subject to legal retention obligations.

Right to data portability

Receive your personal data in a structured, commonly used, machine-readable format.

Right to restrict processing

Request that we limit how we use your data in certain circumstances.

Right to object

Object to processing based on legitimate interests or for direct marketing.

Right to withdraw consent

Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are in the EU, you also have the right to lodge a complaint with your local Data Protection Authority.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

The right to know what personal information we collect, use, and disclose.
The right to request deletion of your personal information.
The right to opt out of the "sale" of personal information. We do not sell your personal information.
The right to non-discrimination for exercising your CCPA rights.

Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. For significant changes, we may also send a notification to your registered email address. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Wontbounce Inc.
Email: [email protected]