How we handle your data

What we store

• Your account: email address and a bcrypt-hashed password. We never see your password.
• Your verifications: the addresses you submit, their verdicts, and timestamps — so you have a history and an audit trail in your dashboard.
• Billing linkage: your Stripe customer ID so we can grant credits and manage your subscription. Card numbers go to Stripe, never to us.
• Session cookie: a single httpOnly, Secure, SameSite cookie that keeps you signed in. No tracking cookies, no ad pixels.

What we never do

• We never sell your data — not your email lists, not your verification history, not your account details.
• We never use your lists for marketing. Addresses you verify are used for one thing: verifying them for you.
• We never send emails to addresses you verify. The SMTP check is a handshake that stops at RCPT TO — nothing is delivered.

How it's protected

• TLS everywhere: all traffic is encrypted in transit, including API, dashboard, and MCP calls.
• Hashed secrets: API keys are SHA-256 hashed at rest and shown only once at creation; passwords are bcrypt-hashed.
• Stripe for payments: checkout and card handling run on Stripe. We never see, touch, or store card numbers.
• Least privilege: internal admin tooling is gated by tokens that never ship to the browser or the repo.

Your rights

Access, correct, or delete your data anytime by emailing support@simplebusinesssuite.com from your account address. Account deletion removes your profile, keys, and verification history; Stripe retains billing records as required by law.

Questions about any of this? Ask us directly.