Last updated: 29 September 2026

This policy explains what personal data Clearalist collects, why, who it is shared with, how long it is kept, and the rights you have over it. It covers clearalist.com and app.clearalist.com (the “Service”).

1. Who we are

Clearalist is an email list verification service For the data in your account we are the “controller”. For the email lists you upload, we act on your behalf as a “processor”, and you remain responsible for that data (see section 4).

Contact: [email protected]

2. What we collect

  • Account details: your name and email address, a password (stored only in hashed form), and a phone number or address if you choose to add one.
  • Payment details: payments are processed by PayPal, and we never receive your card details. From PayPal we receive the payer’s name, email address, country and PayPal payer ID, together with the transaction ID and amount. We also record the IP address used to place each order.
  • Usage and security data: the IP address you sign up and log in from; the lists you upload and when; the credits you use; the results we deliver; and any ratings or feedback you leave.
  • Uploaded lists: the email addresses in the files you upload, and any other columns those files contain.
  • Analytics: we use Google Analytics on clearalist.com and in the app. It collects the pages you visit, your device and browser type, and your approximate location, using cookies (see section 8).
  • Messages you send us, such as emails to support.

3. How we use it

  • To provide the Service: your account, list verification, credits, payments, and emails you need, such as receipts and list-completed notices. Legal basis: performing our contract with you.
  • To prevent fraud and abuse: for example, limiting purchases on new accounts, detecting multiple accounts, comparing the PayPal payer with the account holder, and investigating misuse. Legal basis: our legitimate interest in protecting the Service and our customers.
  • To handle payment disputes: if a payment is disputed, we give PayPal or the bank records of the purchase and of the account’s use of the Service. Legal basis: our legitimate interest in defending legal claims.
  • To improve the Service: through analytics, and aggregate statistics that do not identify you. Legal basis: our legitimate interest, or your consent where the law requires it for analytics cookies.
  • To send occasional product news: you can unsubscribe at any time using the link in the email. Legal basis: our legitimate interest, or your consent where required.
  • To comply with the law.

We do not sell personal data. We do not show ads, and we do not use your data for advertising or advertising profiles.

4. Email lists you upload

  • We process uploaded lists only to verify them for you. To verify an address, we contact the mail server for its domain and ask whether the mailbox exists. No email is ever sent to the address.
  • You must have a lawful basis to process the addresses you upload (see our Terms and Conditions). We never use them to contact anyone.
  • Your file and its results are kept until you delete the list, which you can do at any time in the app.
  • The verification result for an individual address (for example, valid or invalid) is kept for up to 30 days. It may be reused if the same address is checked again in that time. Only the status is reused, never your list or your identity.
  • Technical logs of mail server responses are kept for up to 30 days to diagnose problems.
  • If your email address appears in one of our customers’ lists and you have a question about it, contact that customer. We will also help if you write to [email protected].

5. Who we share it with

  • Amazon Web Services: hosting, file storage and sending our emails (United States).
  • PayPal: payment processing and payment disputes.
  • Google: website and app analytics.
  • PayPal, banks and card issuers: the records described in section 3, if a payment is disputed.
  • Authorities: when the law requires it, or to report or investigate fraud.
  • A future owner of Clearalist: if the Service is sold or transferred. This policy would continue to apply.

These providers use the data only to provide their services to us.

6. Where your data is stored

Our servers and file storage are in the United States (Amazon Web Services), and the Service is run from India. So your data may be processed outside your own country. We rely on our providers’ standard safeguards for international transfers.

7. How long we keep it

  • Account data: while your account is open. When you ask us to delete your account, we delete it and its lists.
  • Payment records: as long as we need them for accounting, tax and payment disputes, even after an account is deleted.
  • Uploaded files and results: until you delete the list or your account.
  • Cached address results and mail server logs: up to 30 days.
  • Sign-up IP records used to prevent multiple accounts: 90 days.
  • Error logs: 7 days.

8. Cookies

  • token keeps you logged in. Expires after 30 days.
  • ha records that this browser already has an account, to prevent multiple sign-ups. Expires after 90 days.
  • The app also stores two small settings in your browser (isAuthenticated and isVerified), to show the right screens.
  • Google Analytics sets its own cookies, such as _ga, which last up to 2 years.

You can block or delete cookies in your browser settings. Without the login cookies, you cannot use the app.

9. Your rights

Depending on where you live (for example under GDPR in the EU and UK), you can ask us to:

  • give you a copy of your personal data, or send it to another service;
  • correct it;
  • delete it;
  • restrict how we use it, or object to our using it on the basis of legitimate interests;
  • stop sending you product news, or withdraw any consent you have given.

Email [email protected] to use any of these rights, including to delete your account. You can update your profile and delete lists yourself in the app. We reply within 30 days. You also have the right to complain to the data protection authority in your country.

10. Security

Passwords are stored only in hashed form. Traffic to the Service is encrypted with HTTPS, and access to our systems is restricted. No system is completely secure, but we work to protect your data and will act quickly if something goes wrong.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version on this page with a new “Last updated” date. If a change is significant, we will also email you.

13. Contact

Questions or requests about your data: [email protected]