Data & security
Clarity before you upload.
Email lists contain personal data. This overview explains the application's data flow and the information to request before using MailGuard for your organization.
Where information goes
| Service | Purpose and information |
|---|---|
| Supabase | Account authentication, profiles, verification jobs and results, purchase records, and support requests. |
| BulkEmailChecker | Submitted email addresses are sent to this verification provider to obtain results. |
| PayPal | Processes payments. MailGuard records order identifiers, amounts, and purchased credits. |
| AI support service | Guardy sends conversation content to a third-party AI model provider, and support requests are triaged by an AI service (TypeSafe AI). Do not paste credentials, private lists, or sensitive records into chat or support messages. |
Account access
The application uses Supabase authentication and database row-level policies for account data. Server-side service credentials are used for verification, billing, and support operations. These implementation details are not a certification or independent security assessment.
Retention and deletion
Verification results are stored so you can review and export them. Settings includes an account deletion request. A fixed retention schedule, backup deletion schedule, and hosting region are not documented here; ask the team to confirm them before uploading data that requires specific handling.
Enterprise requirements
No SOC 2 or ISO 27001 certification is claimed on this page. Ask the team about a data processing agreement, subprocessors, data residency, security documentation, and any contractual service commitments before procurement.
What to avoid uploading
- Columns you don't need, such as phone numbers, addresses, or notes. Upload email addresses only.
- Sensitive categories of data, such as health or financial records.
- Lists you don't have a lawful basis to process.
Retention periods are still being finalized. Contact us for current data processing details.
Questions to ask any email verification provider
- Which third parties receive my list, and why?
- How long are uploaded files and results stored?
- Can I delete my jobs and results?
- Are Unknown or inconclusive results charged?
- How do I reach a person if something looks wrong?
Related: Privacy notice · Terms · Contact support · FAQ