Privacy Policy — Flarereach

1. Introduction

Flarereach ("we," "our," or "us") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and email validation API services (collectively, the "Services").

2. Information We Collect

We may collect the following types of information:

Account Information: When you create an account, we collect your first name, last name, email address, and password (stored as a cryptographic hash).

Usage Data: We automatically collect information about how you interact with our Services, including API call timestamps, request volumes, IP addresses, and browser type.

Email Addresses Submitted for Validation: Email addresses submitted through our API are processed for validation purposes only and are not stored permanently.

Payment Information: Payment processing is handled by our third-party payment provider, Paddle. We do not directly store your credit card or bank account details.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our Services
To process transactions and manage your subscriptions
To communicate with you about your account and service updates
To monitor usage patterns and enforce rate limits
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With third-party providers who assist in operating our Services (e.g., Paddle for payment processing, cloud hosting providers)
Legal Requirements: When required by law, regulation, legal process, or governmental request
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets

5. Data Security

We implement industry-standard security measures to protect your information. Passwords are stored using cryptographic hashing with salting. All data is transmitted over encrypted connections (TLS/SSL). Access to personal data is restricted to authorized personnel only.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide Services. Email addresses submitted for validation are processed in real-time and are not stored after the validation response is returned. You may request deletion of your account data by contacting us.

7. Cookies

We use essential cookies to maintain your authenticated session. These cookies are strictly necessary for the operation of the Services and cannot be disabled. We do not use tracking cookies or third-party advertising cookies.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access, correct, or delete your personal data
Object to or restrict certain processing activities
Data portability
Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].