Privacy policy
Last updated October 9, 2026
Template: fill in the highlighted details and have a lawyer familiar with Hungarian and EU law review this page before launch.
Who we are
SqueakEmail is operated by [Company legal name], [Registered address, Hungary], registration number [Company registration number]. Contact us about privacy at privacy@squeakemail.com.
Two kinds of data, two roles
Your account data (your name, email address, password, payments and how you use the service): we decide how this is used, so we are its controller under the GDPR.
The lists you upload (other people’s email addresses): you decide what to verify and why, so you are the controller and we are your processor. We use those addresses only to verify them for you, under our data processing agreement. When you upload a file we keep only the email addresses in it; every other column is discarded.
What we collect about you
- Account: name, email address, and your password stored only as a one-way hash.
- Payments: what you bought and when. Card details go directly to Stripe and never reach us.
- Usage: the lists and addresses you check, credit balance, and daily totals for your reports.
- Security: IP addresses of sign-in and sign-up attempts, kept briefly to block password-guessing.
Why we use it (legal bases)
- To provide the service you signed up for: contract (Art. 6(1)(b) GDPR).
- To keep accounting and tax records: legal obligation (Art. 6(1)(c)).
- To prevent fraud and abuse and keep the service secure: legitimate interests (Art. 6(1)(f)).
We do not sell personal data, use it for advertising, or use uploaded lists for anything except verifying them for you.
How verification works
To check an address we contact the mail server responsible for its domain and ask whether the mailbox exists, then disconnect. No email is ever sent to the people on your list.
How long we keep data
- Uploaded lists, results and single-check history are deleted automatically after your plan’s retention period (Free 7 days, Starter 30 days, Growth 60 days, Pro 90 days, Business 180 days, Scale 365 days). You can delete a list at any time.
- Daily usage totals (counts only, no addresses) stay with your account for reporting.
- Account data is kept until you delete your account in Settings.
- Payment and invoice records are kept as long as Hungarian accounting law requires (currently 8 years).
- Database backups roll over within 14 days, so deleted data disappears from backups within that time.
Who we share data with
- Hosting: OVH Hosting Inc. (OVHcloud), Beauharnois, Canada, where the service and its database run in Canada, a country covered by an EU adequacy decision.
- Payments: Stripe Payments Europe, Ltd. (Ireland).
- Account emails (confirmation, password reset): [Email provider, e.g. Resend or Postmark].
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.
Cookies
We use one essential cookie to keep you signed in, and your browser’s local storage to remember your light or dark theme. There are no analytics or advertising cookies, so there is no cookie banner.
Your rights
You can access, correct, export or delete your data, object to processing, or restrict it. Most of this you can do yourself in the dashboard (delete lists, delete your account); for anything else email privacy@squeakemail.com and we will reply within one month. If someone on a list you uploaded contacts us, we will refer them to you as the controller.
You can also complain to the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu), or to the authority in your own EU country.
Security
Connections are encrypted with HTTPS, passwords and access tokens are stored only as hashes, each account can see only its own lists, and access to production systems is limited to the people who run the service.
Changes
If we change this policy in a way that matters, we will email account holders before the change takes effect.