[{"data":1,"prerenderedAt":358},["ShallowReactive",2],{"legal-\u002Flegal\u002Fprivacy":3},{"id":4,"title":5,"body":6,"description":350,"extension":351,"meta":352,"navigation":353,"path":354,"seo":355,"stem":356,"__hash__":357},"legal\u002Flegal\u002Fprivacy.md","Privacy Policy",{"type":7,"value":8,"toc":337},"minimark",[9,13,21,24,29,47,51,216,220,227,231,302,306,309,313,316,320,323,327,330,334],[10,11,5],"h1",{"id":12},"privacy-policy",[14,15,16,20],"p",{},[17,18,19],"strong",{},"Last updated:"," October 20, 2026",[14,22,23],{},"SignupSieve, Philippines (\"we\") operates the SignupSieve API and the free email checker on\nour website (together, the \"Service\"). This policy explains what data the Service processes, why, and for how long.",[25,26,28],"h2",{"id":27},"_1-roles","1. Roles",[30,31,32,44],"ul",{},[33,34,35,36,39,40,43],"li",{},"For email addresses our customers submit, ",[17,37,38],{},"the customer is the controller"," and we are their\n",[17,41,42],{},"processor",": we process the addresses only to return results to that customer, and to protect\nall customers from fraud as described below.",[33,45,46],{},"For our customers' account details, we and RapidAPI are controllers. RapidAPI handles sign-up,\nkeys and payments under its own privacy policy.",[25,48,50],{"id":49},"_2-what-we-process-and-what-we-keep","2. What we process, and what we keep",[52,53,54,70],"table",{},[55,56,57],"thead",{},[58,59,60,64,67],"tr",{},[61,62,63],"th",{},"Data",[61,65,66],{},"What happens",[61,68,69],{},"Kept for",[71,72,73,88,104,115,126,141,158,169,180,192,202],"tbody",{},[58,74,75,79,85],{},[76,77,78],"td",{},"Email address submitted for a check",[76,80,81,82],{},"Analysed in memory to compute the result, then discarded. ",[17,83,84],{},"Never written to disk or a database.",[76,86,87],{},"Not kept",[58,89,90,98,101],{},[76,91,92,93,97],{},"Domain part of the address (e.g. ",[94,95,96],"code",{},"acme.com",")",[76,99,100],{},"DNS records, mail-server relationships and domain registration date are looked up and cached. Domain-level information about organisations, not individuals.",[76,102,103],{},"Cache: 24 hours. Mail-server graph: until removed",[58,105,106,109,112],{},[76,107,108],{},"Address shape per company domain (e.g. \"first.last\")",[76,110,111],{},"Counted, without names",[76,113,114],{},"180 days after the last check at that domain",[58,116,117,120,123],{},[76,118,119],{},"Keyed one-way hashes (HMAC-SHA256 with a secret server key) of the inbox",[76,121,122],{},"Added to probabilistic counters (HyperLogLog) that detect repeated signups by one person at one customer, and bursts of signups at one domain. The counters cannot be reversed into addresses.",[76,124,125],{},"Per-customer repeat counters: 90 days. Domain burst counters: 30 minutes",[58,127,128,131,138],{},[76,129,130],{},"End user's IP address (optional, only if the customer sends it)",[76,132,133,134,137],{},"Compared in memory against public cloud-provider and Tor exit-node lists, then discarded. ",[17,135,136],{},"Never stored."," A keyed one-way hash of it counts distinct signups from that IP at that customer.",[76,139,140],{},"Hash counter: 1 hour",[58,142,143,149,155],{},[76,144,145,146],{},"Check result data inside the ",[94,147,148],{},"check_id",[76,150,151,152,154],{},"Numeric signal values (for example \"name naturalness 0.4\") are encoded and signed inside the ",[94,153,148],{}," returned to the customer. We store nothing for the check.",[76,156,157],{},"Not kept by us",[58,159,160,163,166],{},[76,161,162],{},"Feedback the customer sends (outcome for a check)",[76,164,165],{},"Stored with the numeric signal values, the customer's account ID and the domain, to train the model and compute domain reputation. Contains no email address.",[76,167,168],{},"Until the model no longer needs it, at most 24 months",[58,170,171,174,177],{},[76,172,173],{},"Customer account ID (from RapidAPI)",[76,175,176],{},"Used to keep each customer's data separate and to bill usage",[76,178,179],{},"For the life of the account",[58,181,182,185,190],{},[76,183,184],{},"Email address typed into the free checker on our website",[76,186,187,188],{},"Same as any check: analysed in memory, then discarded. ",[17,189,136],{},[76,191,87],{},[58,193,194,197,200],{},[76,195,196],{},"Visitor IP address on the free checker",[76,198,199],{},"A keyed one-way hash counts checks per visitor to enforce the free limit. The IP itself is never stored.",[76,201,140],{},[58,203,204,207,213],{},[76,205,206],{},"Service logs",[76,208,209,210],{},"Errors and slow requests: path, status, time and customer account ID. ",[17,211,212],{},"Never email addresses.",[76,214,215],{},"Up to 30 days (our hosting provider's log retention)",[25,217,219],{"id":218},"_3-why-legal-basis","3. Why (legal basis)",[14,221,222,223,226],{},"We process this data to ",[17,224,225],{},"prevent fraud",": fake, automated and duplicate signups. Under the GDPR this\nis a legitimate interest (Recital 47). Customers are responsible for telling their own users that they\nuse a fraud-prevention service.",[25,228,230],{"id":229},"_4-who-else-is-involved-sub-processors","4. Who else is involved (sub-processors)",[52,232,233,246],{},[55,234,235],{},[58,236,237,240,243],{},[61,238,239],{},"Provider",[61,241,242],{},"Role",[61,244,245],{},"Location",[71,247,248,259,270,280,291],{},[58,249,250,253,256],{},[76,251,252],{},"RapidAPI (Nokia)",[76,254,255],{},"API gateway, keys, billing",[76,257,258],{},"Per RapidAPI's privacy policy",[58,260,261,264,267],{},[76,262,263],{},"Render",[76,265,266],{},"Application hosting",[76,268,269],{},"Singapore",[58,271,272,275,278],{},[76,273,274],{},"Upstash",[76,276,277],{},"Redis",[76,279,269],{},[58,281,282,285,288],{},[76,283,284],{},"Supabase",[76,286,287],{},"Postgres database",[76,289,290],{},"Tokyo, Japan",[58,292,293,296,299],{},[76,294,295],{},"rdap.org and domain registries",[76,297,298],{},"Public domain registration lookups (domain names only)",[76,300,301],{},"Various",[25,303,305],{"id":304},"_5-security","5. Security",[14,307,308],{},"Traffic is encrypted in transit (HTTPS\u002FTLS). The API accepts only requests that come through\nRapidAPI, except the free checker, which only answers our own website and is limited per visitor. Customer data is separated per account. Hashes are keyed with a secret that never leaves\nour servers.",[25,310,312],{"id":311},"_6-international-transfers","6. International transfers",[14,314,315],{},"Our providers may process data outside your country. Where required, transfers rely on the\nproviders' standard contractual clauses.",[25,317,319],{"id":318},"_7-your-rights","7. Your rights",[14,321,322],{},"Because we do not store email addresses, we usually cannot link stored data to a specific person.\nFor requests about your data, contact the company that submitted your address (our customer), or\ncontact us through the messaging option on our RapidAPI listing and we will help.",[25,324,326],{"id":325},"_8-changes","8. Changes",[14,328,329],{},"We will post updates here and on the RapidAPI listing.",[25,331,333],{"id":332},"contact","Contact",[14,335,336],{},"SignupSieve: use the contact or messaging option on our RapidAPI listing.",{"title":338,"searchDepth":339,"depth":339,"links":340},"",2,[341,342,343,344,345,346,347,348,349],{"id":27,"depth":339,"text":28},{"id":49,"depth":339,"text":50},{"id":218,"depth":339,"text":219},{"id":229,"depth":339,"text":230},{"id":304,"depth":339,"text":305},{"id":311,"depth":339,"text":312},{"id":318,"depth":339,"text":319},{"id":325,"depth":339,"text":326},{"id":332,"depth":339,"text":333},"What data SignupSieve processes, why, and for how long. Emails are analyzed, then forgotten.","md",{},true,"\u002Flegal\u002Fprivacy",{"title":5,"description":350},"legal\u002Fprivacy","D7-IVFNE_hLBntGg7cS1734yhpfo3dcxmGVMHPVRSXQ",1792516807768]