Privacy Policy

This Privacy Policy describes how VerifyGrid (“we”, “us”) handles information when you use our validation API, dashboard, and website. You sign in to the dashboard with an account, and your API calls are authorized by the API keys you create there.

Information you submit for validation

When you call our API or use the dashboard validation tool, you submit values such as email addresses, phone numbers, and IP addresses for us to assess. We process these to return a validation result. Your activity log keeps only a masked form of each value (for example s***@example.com), never the full value. To perform a lookup we send the value to the data provider for that check, listed under “Lookup providers” below. We do not resell submitted values or share them with anyone else.

• Email addresses, phone numbers, and IP addresses you submit for validation (stored only in masked form)
• The lookup type requested and the result returned (validity, risk indicators)
• Timestamps and the API key used for each request

Lookup providers

• Email: the domain part of the address is looked up over public DNS (Cloudflare and Google DNS resolvers). The full address is not sent.
• Phone: numbers are checked locally against numbering-plan data. Where live carrier data is enabled, the number is sent to Twilio Lookup.
• IP: addresses are sent to proxycheck.io for geolocation and VPN, proxy, and Tor detection.

Your account

To use the dashboard you create an account, either with an email address and password or by signing in with Google, Microsoft, Facebook, or Apple. We store your email address, name if provided, and sign-in details through our hosting platform, Base44. Passwords are stored by the platform in hashed form; we never see them.

API keys and usage data

API calls are authorized by keys you create in the dashboard. We store your key names, key values, credit balances, and a log of validation, key, and purchase events. This data belongs to your account, and other users can’t see it.

Free trial checks

To keep free trial credits to one per person, we store one-way hashes of your normalized email address, the IP address you signed up from, and the mobile number you verify. The hashes can’t be turned back into the original values. Verification codes are sent by Twilio Verify, which receives your number to deliver the text message. The live demo on our website stores the same kind of hashed IP to enforce its daily limit, and doesn’t keep the values you try.

Billing

Credit purchases are processed by Stripe. We receive your email address and transaction metadata from Stripe to apply credits to the correct key. We do not store your card details — Stripe does.

What we don’t collect

• We don't run third-party advertising trackers on the app
• We don't sell the values you submit, or share them beyond the lookup providers above

Data retention

Activity logs and key records are retained for as long as your workspace exists so you can review usage. You can revoke keys at any time. Contact us to request deletion of your workspace’s data.

Security

API keys should be treated as secrets — anyone with a key can consume its credits. See our Security page for details.

Your rights

You can request access to or deletion of data associated with your workspace or key by contacting us through the Contact page.

Contact

Questions about privacy? Reach us via the Contact page and we’ll respond by email.