Data Retention Policy

DeBounce limits retention of personal data to what is necessary to provide its email validation services.

Retention at a glance

Single email validation

When an email address is submitted through the single email validation form in a user’s account area, DeBounce stores the latest 200 validation records so the user can review recent results.

As new validations are performed, older records beyond the 200-record limit are automatically removed.

Real-time API validation

When an email address is submitted through the real-time Email Validation API, DeBounce processes it automatically and returns a validation result.

Email addresses processed through the real-time API are not stored. DeBounce may retain non-email statistical information, such as the number of validations performed, for reporting purposes.

Uploaded lists and bulk validation

When you upload an email list manually or submit a file through the Bulk Email Validation API, DeBounce temporarily retains:

• The original uploaded file; and
• The resulting validation file.

These files are automatically and permanently deleted 7 days after upload or validation, whichever occurs later.

You may delete your files from your DeBounce account at any time before automatic deletion.

Deleted files and results cannot be recovered. Download any validation results you need once processing has finished.

Service statistics and logs

DeBounce maintains operational records of service activity. These may include:

• File-upload events;
• Result-download events;
• The number of successful API calls; and
• Aggregate validation statistics.

Operational records are distinct from uploaded email lists and validation-result files. They are used for service reporting, security, troubleshooting, and maintaining the operation of the service.

Limited access and review

Email validation is normally performed automatically without human interaction.

In limited circumstances, authorized DeBounce personnel may review uploaded or result files when:

• A customer requests assistance;
• DeBounce needs to investigate a complaint;
• Data must be reprocessed to investigate a service issue; or
• DeBounce conducts an authorized review of service activity.

Personnel permitted to conduct these reviews are vetted, trained, subject to confidentiality obligations, and required to work in a secure environment. Files used during a review are deleted after the review is completed.

Employees and contractors who are permitted to access personal data must sign a non-disclosure agreement and may use the data only for the specifically authorized purpose.

Storage and security

Personal data processed by DeBounce is stored on servers located in Germany, within the European Union.

While information is retained:

• DeBounce websites are protected using SSL;
• Servers that process or store raw data are accessible only through DeBounce’s private network;
• Validation-result files are stored in encrypted form; and
• Processing is performed through automated systems except in the limited circumstances described above.

Customer responsibilities

Customers are responsible for:

• Having a lawful basis for submitting email addresses to DeBounce;
• Downloading required validation results before automatic deletion; and
• Deleting files sooner when they are no longer needed.

Changes to this policy

DeBounce may update this policy when its services, retention practices, or legal obligations change. The revised policy will be posted on this page.