Privacy policy
Last updated November 6, 2026.
This policy explains what BounceOwl (“BounceOwl”, “we”) collects when you use bounceowl.com, the app, the API and the MCP server, and what we do with it.
What we collect
- Your Google account details when you sign in: name, email address, profile picture and Google account ID. We never see your Google password.
- The email addresses you ask us to check, the files you upload, and the results we produce.
- Account activity: credit purchases and use, API keys (stored only in hashed form) and when they were last used.
- Payment records from Stripe: amount, currency and date. Card details are handled by Stripe and never reach our servers.
- Usage data: the pages you visit and the features you use on the site and in the app, such as running a check or uploading a list. We use it to improve BounceOwl. Text you type into forms is masked in session recordings.
How a check works
To check an address we connect to the mail server for its domain and ask whether the mailbox exists. We stop before any message is sent, so the person behind the address receives nothing.
How long we keep it
- Uploaded files, and the extra columns from them, are deleted 30 days after upload. The results stay in your history.
- Your check history and credit history are kept while your account is open.
- A result for an address can be reused for up to 7 days for any customer who checks the same address. Only the result is reused; nobody can see who else checked it.
Who we share it with
We don't sell personal data. We share it only with providers that run parts of the service for us:
- Google, to sign you in.
- PostHog, to measure how the site and app are used.
- Stripe, to take payments and send receipts and invoices.
- Our hosting and infrastructure providers.
- A catch-all verification partner, only for the addresses you choose to send to a catch-all check.
Your choices
You can download your list results at any time from the app. To get a copy of your data or to delete your account, email support@bounceowl.com.
Security
Traffic is encrypted with HTTPS. API keys are stored as one-way hashes, and sign-in uses Google, so we hold no passwords.
Changes and contact
If this policy changes, we update the date at the top. Questions go to support@bounceowl.com.