🎬 Introducing BillionVerify Video Tutorials: short guides to verifying emails, free tools, and cleaning leads.Watch videos
BillionVerify
Sign In

Privacy Policy

How we collect, use, retain, and protect data related to the Service

Effective: November 9, 2026

This Privacy Policy explains how BillionVerify ("we," "us," or "our") collects, uses, discloses, and protects personal data when you visit billionverify.com, create an account, purchase credits or subscriptions, submit verification data, use our APIs, contact support, or otherwise interact with the Service.

1. Data We Collect

1.1 Account and Profile Data

  • Name, email address, company name, and account identifiers.
  • Sign-in and authentication data, including hashed passwords and OAuth profile details when you choose a third-party login provider.

1.2 Billing and Transaction Data

Payments are processed by Stripe or another processor we select. We do not store full card numbers or CVV values, but we may receive transaction metadata such as card brand, last four digits, country, billing name, payment status, Stripe customer identifiers, invoices, receipts, subscription status, and refund or dispute events. Purchases made in our Shopify app are billed by Shopify Billing and appear on the merchant's Shopify invoice; for those purchases we receive the plan, price, charge status, and billing period from Shopify, not card details.

1.3 Verification and Uploaded Data

  • Email addresses and related input data that you submit for verification.
  • Verification results, status codes, technical output, job records, result files, and download information.
  • File upload metadata such as file name, size, row mappings, and processing statistics for bulk jobs.

1.4 Technical, Usage, and Security Data

  • IP address, browser type, device data, operating system, approximate geolocation, and language preferences.
  • Usage events, page visits, API request logs, timestamps, credits consumed, session logs, and similar operational data.
  • Checkout acknowledgements, fraud signals, support history, and dispute evidence relating to payments or account abuse.

1.5 Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for authentication, preferences, security, analytics, and support tools. See our Cookie Policy for details.

1.6 Shopify App Data

When a merchant installs BillionVerify Email Checker from the Shopify App Store, we receive data from Shopify through the Shopify Admin API. The merchant controls the store's customer data, and we process it on the merchant's behalf only to provide the app.

  • Store customer records: names, email addresses, email marketing consent state, order count, and tags. We use them only to verify the email addresses and to write the result back to the store as customer tags and a metafield.
  • Staff details of the person who opens the app: name and email address, used to sign them in, match or create their BillionVerify account, and link the store to a workspace.
  • Store details such as shop name, domain, currency, and time zone, and Shopify billing records for app purchases.
  • We do not change customers' marketing consent, do not send email to the store's customers, and do not use their data for any other purpose.
  • We respond to Shopify's mandatory privacy requests: we send the data we hold about a customer to the store contact on a data request; on a customer redaction request we delete that customer's app records and the verification records the app created for them; and when Shopify sends a shop redaction request after the app is uninstalled, we delete the store's app records and the verification records the app created for the store's customers.

2. How We Use Data

  • Provide, secure, maintain, and improve the Service.
  • Process verifications, generate results, manage credits, subscriptions, and customer-facing outputs within applicable product availability windows.
  • Process payments, detect fraud, investigate disputes, and respond to chargebacks or abuse.
  • Communicate with you about account activity, billing, support, product changes, and security matters.
  • Comply with law, enforce our agreements, protect rights and property, and keep business records.

3. Legal Bases for Processing

If you are in the EEA, UK, or Switzerland, we generally rely on the following legal bases:

  • Contract performance: providing the Service, account management, billing, and support.
  • Legitimate interests: service security, analytics, fraud prevention, dispute response, and product improvement.
  • Consent: optional analytics, support tools, and marketing communications where consent is required.
  • Legal obligation: taxes, accounting, sanctions screening, lawful requests, and regulatory compliance.

4. How We Share Data

We do not sell personal data. We may disclose data to the following categories of recipients when reasonably necessary:

  • Payment processors such as Stripe for payments, invoices, subscriptions, refunds, and dispute handling.
  • Shopify, when a merchant uses our Shopify app: Shopify Billing processes app charges, and verification results are written back to the merchant's own store.
  • Hosting, storage, CDN, and security providers, including Cloudflare and similar infrastructure vendors.
  • Analytics or support providers used to understand product usage, operate support workflows, and respond to customer requests, where enabled and consented to where required.
  • Authentication providers if you choose a third-party sign-in option.
  • Advisors, auditors, insurers, acquirers, law enforcement, courts, regulators, or other third parties where disclosure is necessary to protect our rights, respond to legal process, or complete a corporate transaction.

5. Data Retention

We retain data for as long as reasonably necessary to operate the Service, support customers, investigate abuse, resolve payment issues, comply with law, and maintain business records. Retention periods vary by data type, account status, and legal requirements.

  • Account and billing records may be retained while your account is active and for additional periods after closure.
  • Verification inputs, results, job records, and file artifacts may remain in active systems, backups, or logs under restricted access for operational, support, fraud, audit, payment, legal, or customer controller reasons.
  • Uploaded source or original files are available for self-service download for 1 day. Completed verification result details and result files remain available to the customer while we retain the underlying result data.
  • For the Shopify app, store and customer records held by the app, and the verification records the app created for the store's customers, are deleted when Shopify sends the corresponding redaction request. Purchase and credit records stay with the workspace.
  • We may introduce customer-configured deletion periods and a maximum default retention period in the future. We will document those periods and notify affected customers before automatic deletion takes effect.
  • We do not promise fixed physical deletion windows for retained backend records unless we expressly agree to them in writing or make them available as a product control.

6. International Transfers

We and our service providers may process data in the United States and other countries that may not provide the same level of data protection as your home jurisdiction. Where required, we rely on recognized transfer mechanisms such as contractual safeguards.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export certain personal data, and to withdraw consent for optional processing.

  • You can update certain account information from your dashboard.
  • You can opt out of non-essential cookies or support tools where offered through our consent controls.
  • California residents may have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information. We do not sell personal information or share it for cross-context behavioral advertising.

To exercise privacy rights, email support@billionverify.com. We may verify your identity before fulfilling a request.

8. Security

We use administrative, technical, and physical safeguards designed to protect data. These may include TLS in transit, access controls, audit logging, environment-based secrets management, and security monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

9. Third-Party Sites and Services

The Service may link to third-party sites or integrate with third-party services. Their privacy practices are governed by their own terms and policies, not this Policy.

10. Children's Data

The Service is not directed to children, and we do not knowingly collect personal data from anyone under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date above shows when the current version took effect. If required by law, we will provide additional notice of material changes.

12. Contact

Privacy questions and requests may be sent to:

BillionVerify Privacy Team
Email: support@billionverify.com
Website: billionverify.com