Introduction
ValidKit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our email validation API service designed for AI agents and developers.
By using ValidKit, you agree to the collection and use of information in accordance with this policy.
Information We Collect
1. Account Information
- Email address (for account creation and API key delivery)
- Company name (optional)
- Billing information (processed securely through Stripe)
2. API Usage Data
- API key usage and request volumes
- Request timestamps and response times
- Error logs and debugging information
- Trace IDs for multi-agent request tracking
3. Email Validation Data
Important: We do NOT store the email addresses you submit for validation. Email addresses are processed in memory only and immediately discarded after validation.
We only retain:
- Aggregate statistics (total validations, success rates)
- Validation result metadata (valid/invalid counts, disposable email detection rates)
How We Use Your Information
We use the collected information to:
- Provide and maintain our API service
- Generate and manage API keys
- Process payments and manage subscriptions
- Monitor API usage for rate limiting and billing
- Send service updates and technical notifications
- Detect and prevent abuse or fraudulent activity
- Improve our service performance and reliability
Data Security
We implement industry-standard security measures to protect your data:
- All API communications are encrypted using TLS/SSL
- API keys are hashed and stored securely
- Regular security audits and vulnerability assessments
- Limited access to production systems
- Automated monitoring for suspicious activity
Data Sharing and Third Parties
We do not sell, trade, or rent your personal information. We may share data with:
- Stripe: For payment processing (they receive billing information only)
- Infrastructure providers: Vercel (API hosting) and Supabase (database) under strict data processing agreements
- Analytics: Aggregate, anonymized usage data for service improvements
We may also disclose information if required by law or to protect our rights and safety.
AI Agent Considerations
For AI agents using our service:
- We support multi-agent tracing through trace IDs
- Agent requests are treated the same as human developer requests
- We do not analyze or store the context in which email validations are requested
- Webhook data is transmitted securely and not stored beyond delivery confirmation
Data Retention
- Account data: Retained for the duration of your account plus 30 days after deletion
- API logs: Retained for 90 days for debugging and support
- Billing records: Retained as required by tax and accounting regulations
- Email addresses for validation: Never stored, processed in memory only
Your Rights
You have the right to:
- Access your account information and usage data
- Update or correct your account information
- Delete your account and associated data
- Export your usage statistics
- Opt-out of non-essential communications
How to exercise your rights via API:
- Export your data:
GET /api/v1/gdpr/export - Delete your data:
POST /api/v1/gdpr/delete - View retention policies:
GET /api/v1/gdpr/retention
Or contact us at [email protected]
Cookies and Tracking
Our API service does not use cookies. Our documentation and landing pages may use:
- Essential cookies for site functionality
- Analytics cookies to understand usage patterns (optional)
Children's Privacy
ValidKit is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.
International Data Transfers
Your data may be processed in the United States. By using ValidKit, you consent to the transfer of your data to the United States.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: