Data Processing Addendum

This Data Processing Addendum (DPA) applies to customers using VerifyGrid to validate data. Because VerifyGrid has no accounts, “customer” means the workspace owner controlling the API keys used to submit validation requests.

Roles

You are the controller of the values you submit for validation. VerifyGrid acts as a processor, assessing submitted values to return results and keeping a masked activity log for your audit.

Data categories processed

• Contact identifiers — email addresses and phone numbers
• Network identifiers — IP addresses
• Usage and billing metadata — API key, timestamps, purchase records

Purposes

We process submitted values only to return validation results and to maintain the masked workspace activity log that lets you audit your own usage. We do not process submitted values for our own marketing or model training on a per-record basis.

Subprocessors

We use Stripe for payment processing and Base44 for hosting. Lookups use these providers: public DNS resolvers (Cloudflare, Google) for the domain of an email address; Twilio Lookup for phone carrier data, where enabled; Twilio Verify for account phone verification; and proxycheck.io for IP intelligence. We do not transfer submitted validation values to any advertising or data-broker third party.

Security measures

Data is transmitted over HTTPS/TLS. See the Security page for details.

Retention and deletion

We retain masked activity logs for your workspace audit. Full submitted values are not stored after the lookup completes. You can request deletion of your workspace’s data via the Contact page.

Your obligations

You ensure you have a lawful basis to submit the data you validate and comply with applicable law (e.g., GDPR, CCPA) for the individuals whose information you process.