Legal

Privacy Policy

This page explains what data we collect, why we have it, who else touches it, and what you can do about it. If something is unclear, write to daniel@listgevity.com and we will rewrite it.

1. The short version

  • We collect what we need to run the service and nothing else.
  • Lists you send us for checking are handled by a human on our side and deleted once the job is done, or sooner on request. See Section 2 for exactly how that works today.
  • We name every company that touches your data in the list in Section 3.
  • You have rights under the GDPR and similar laws. Section 5 lists them with the relevant article numbers.
  • All data requests go to daniel@listgevity.com. We answer within 30 days.

2. What we collect

We collect three kinds of data and treat each differently.

2.1 Contact details

Your name, email address and company, given when you get in touch or ask for a check. We use this to reply to you and to deliver results.

2.2 The lists you send us (customer data)

Today this is a manual process. You send your list either by email or through a private link we set up for you. A person on our side runs the check and sends your results back, typically within about a day. We delete the list and the results once that job is complete. If you ask us to delete them sooner, we do it within 5 business days.

2.3 Usage data

IP address, browser, device, pages visited and timing, collected on this website. We use this to run the site and fix bugs. Google Analytics cookies are only set if you click "Allow analytics" on the cookie bar. Change your cookie choice.

3. Who else touches your data (sub-processors)

This is the full list. If a company is not on it, we are not sharing your data with them. We notify you 30 days before we add a new sub-processor.

  • Email checks: Bouncer (usebouncer.com), which runs the address-level checks behind each verdict.
  • Email and file sharing: Google Workspace (Google LLC), which receives the lists and messages you send us.
  • Payment processing: Stripe, Inc., for card payments.
  • Website hosting: Vercel Inc., which hosts this website. Your lists never pass through it.
  • Website analytics: Google Analytics (Google LLC), which records how visitors use this website.

4. How long we keep it

  • The lists you send us: deleted once the job is complete, or within 5 business days if you ask sooner.
  • Contact details: kept while we are in contact, then deleted or anonymised after 24 months with no contact from you.
  • Transaction records: kept for the period required by tax law in the relevant jurisdiction.
  • Usage logs: kept for 90 days for debugging and abuse detection.

5. Your rights

Depending on where you live, you have the following rights under the GDPR:

  • Access (Article 15): request a copy of the personal data we hold about you.
  • Rectification (Article 16): correct inaccurate data.
  • Erasure (Article 17): ask us to delete your data.
  • Restriction (Article 18): ask us to pause processing while a dispute is resolved.
  • Portability (Article 20): receive your data in a machine-readable format.
  • Objection (Article 21): object to processing based on legitimate interests.
  • Withdraw consent: where processing relies on consent, you can withdraw it without affecting prior processing.

To exercise any of these, email daniel@listgevity.com. We respond within 30 days. If you are unhappy with our response, you can complain to your local data protection authority (in the EU, listed at edpb.europa.eu).

6. Automated decision-making

Our validation engine runs automated checks on every address submitted, combining signals (syntax, MX records, blocklist status, mailbox-level checks) to produce a verdict: Inbox, Caution or Remove. The verdicts are advisory. They do not block any sending action by themselves, you choose which addresses to mail. You may request information about the categories of signals used, request human review of a verdict, or contest it.

7. International transfers

Some of the companies in Section 3 may process data outside the UK and the EU. Where they do, the transfer is covered by the safeguards data protection law requires, such as standard contractual clauses. Ask us at daniel@listgevity.com if you want the detail for a specific company.

8. Children

The service is not for anyone under 16. We do not knowingly collect data from anyone under 16. If you believe we have, write to daniel@listgevity.com and we will delete the data within 5 business days.

9. Contact

  • Everything, including data requests, GDPR and CCPA questions, breach reports and cookie questions: daniel@listgevity.com
  • Operated by Transcend Enterprise Ltd, 16 Neilston Rise, Bolton, England, BL1 5XZ.

Last updated: 14 October 2026.