Privacy Policy
Effective Date: January 1, 2026
1. Information We Collect
MX Validation collects the following information to provide and improve our email testing services:
Personal Information
- Account Information: Email address, encrypted password, and account preferences
- Profile Data: Username, language preferences, and account settings
- Communication Data: Support requests and correspondence with our team
Usage Information
- Test Data: Email test identifiers, test results, and email content processed
- API Usage: API calls, request/response data, and integration logs
- Performance Data: Service usage patterns and performance metrics
Technical Information
- Access Data: IP addresses, browser information, and device identifiers
- Cookies: Session tokens, preferences, and security identifiers
- Security Data: Authentication logs and security event information
2. How We Use Your Information
We process your personal information for the following purposes:
Service Delivery
- Provide email testing and validation services
- Process API requests and deliver results
- Maintain account functionality and user sessions
- Enforce rate limits and usage restrictions
Service Improvement
- Analyze usage patterns to improve our platform
- Develop new features and enhance existing functionality
- Monitor and improve service performance
- Conduct security assessments and improvements
Communication & Support
- Respond to support requests and technical issues
- Send service notifications and updates
- Provide account-related communications
- Share important security or policy updates
3. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contractual Necessity: Processing required to provide our services
- Legitimate Interests: Service improvement, security, and fraud prevention
- Consent: Marketing communications and optional features
- Legal Compliance: Compliance with applicable laws and regulations
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information in limited circumstances:
Service Providers
- Infrastructure Providers: Cloud hosting and data storage services
- Security Services: Cloudflare Turnstile for spam protection
- Analytics: Performance monitoring and error tracking services
Legal Requirements
- Response to legal process, court orders, or government requests
- Protection of our rights, property, or safety
- Prevention of fraud or abuse of our services
- Compliance with applicable laws and regulations
5. Data Security
We implement comprehensive security measures to protect your personal information:
- Encryption: Data encrypted in transit and at rest using industry standards
- Access Controls: Strict authentication and authorization protocols
- Infrastructure Security: Secure hosting environment with monitoring
- Regular Audits: Ongoing security assessments and vulnerability testing
- Employee Training: Staff trained on privacy and security best practices
6. Data Retention
We retain your personal information for different periods based on the type of data:
Account Data
Retained while your account is active and for 90 days after account closure for support purposes.
Test Data
Email tests retained for 30 days for free users, 12 months for paid users, or as specified in your plan.
Usage Logs
Technical and access logs retained for 12 months for security and service improvement.
7. Your Privacy Rights
You have the following rights regarding your personal information:
Access and Portability
- Right of Access: Request a copy of your personal data
- Data Portability: Receive your data in a structured format
- Account Dashboard: View and manage your data through your account
Control and Correction
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restriction: Limit processing of your data
- Right to Object: Object to certain types of processing
To exercise your rights, contact us at privacy@mxvalidation.com or through your account settings.
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
Essential Cookies
- Authentication: Session management and login functionality
- Security: CSRF protection and security tokens
- Preferences: Language settings and user preferences
Analytics Cookies
- Usage Analytics: Anonymous usage statistics and performance monitoring
- Error Tracking: Technical error reporting and debugging
You can control cookies through your browser settings. Disabling essential cookies may limit functionality.
9. International Data Transfers
Our services operate globally. Your information may be transferred to and processed in:
- European Union: Primary data processing location
- United States: Cloud infrastructure and service providers
- Security Measures: All transfers protected by appropriate safeguards
- Compliance: Transfers comply with GDPR and other applicable regulations
10. Children's Privacy
Our services are not designed for or directed to children:
- Age Requirement: Users must be at least 18 years old
- No Collection: We do not knowingly collect data from children under 13
- Parental Rights: Parents may request removal of child's information
- Contact: Report any concerns to privacy@mxvalidation.com
11. Privacy Policy Updates
We may update this Privacy Policy to reflect changes in our practices or legal requirements:
- Notification: Material changes will be communicated via email or website notice
- Effective Date: Changes become effective 30 days after notification
- Review: We recommend reviewing this policy periodically
- Continued Use: Continued use of services constitutes acceptance of updates
12. Contact Information
For privacy-related questions, concerns, or to exercise your rights:
Data Protection Officer
Email: privacy@mxvalidation.com
Response time: Within 30 days
General Support
Email: support@mxvalidation.com
For technical and account issues
Business Address
MX Validation
Registered in Bulgaria
EU Data Protection Laws Apply
Supervisory Authority
You may file complaints with your local data protection authority or the Bulgarian Commission for Personal Data Protection.