Privacy policy
This policy describes what EmailExtractor holds, why we hold it, how long it stays and what you can ask us to do about it. Last updated 17 September 2026.
The operator
This service is operated by EmailExtractor at emailextractor.ai. For anything in this policy, write to [email protected].
We act as controller for the business contact data in our index and for the account data of our customers. We act as processor for the lists a customer uploads to us for finding or verification.
Business contact data
This is the data behind the product. It covers a named person in a named professional role at a named company.
We do not process special category data. We do not hold home addresses, private phone numbers, personal social accounts or anything else belonging to a person's private life, and we do not run reverse lookups from an address to a private individual.
- The work email address and the company domain it belongs to.
- The name and professional role of the person, where published.
- The naming pattern of the domain and the sources that agreed on the address.
- Technical data about the domain: MX records, detected mail provider and catch-all status.
- The verification result and the time it was produced.
Account data
- The email address you sign up with, and its confirmation state.
- The page you signed up from, the referrer and any campaign parameters in the link you arrived on.
- Your internet protocol address and browser user agent at the time of signup, stored as given and never enriched or resolved to a person.
- Your searches, saved lists, exports and, where applicable, billing records.
Data you upload
Lists you upload for finding or verification are processed on your instruction, returned to you and held for the retention window of your plan. We do not sell them, share them with other customers or use them as a data source for anyone else.
The legal basis
- Business contact data: legitimate interests in business to business communication, balanced against the interests of the person concerned. That balance is why the scope above is narrow and why erasure is permanent.
- Account data: performance of the contract with you, and our legitimate interest in securing the service against abuse.
- Confirmation emails and service notices: performance of the contract.
- Marketing email to you: your consent, which you can withdraw in any message we send.
What you can ask for
Anyone can write to [email protected] about an address that belongs to them, whether or not they are a customer.
We act on a request within one month and confirm in writing when it is done. We may ask you to confirm control of the address before we act on it, so that nobody can erase or read someone else's record.
- Access: we tell you what we hold about that address and where it came from.
- Rectification: we correct data that is wrong.
- Erasure: we remove the record from the index.
- Restriction and objection: we stop processing on request.
- Portability: we provide your account data in a machine readable format.
- Complaint: you can complain to your data protection supervisory authority.
Erasure means suppression
When we erase an address we also add it to a permanent suppression list. That list holds the address and nothing else, and its only function is to stop the address being returned again by any search, for any customer. Without it, the address would simply reappear the next time someone searched that domain, which would not be erasure.
How long we keep things
- Search results and exports: the retention window of your plan, configurable on Scale and custom on Enterprise.
- Account data: for as long as the account exists, and then removed when you delete it.
- Suppression entries: kept indefinitely, for the reason above.
- Unconfirmed signup codes: expired and removed within 24 hours.
Who else sees it
We use service providers to run the service: hosting, email delivery and, for paid plans, payment processing. Each one is bound by contract to process data only on our instruction. Enterprise customers receive the current subprocessor list and a data processing agreement before signature. We do not sell personal data to anyone.
Security
Access to production data is limited to the people who need it and is logged. Data is encrypted in transit. Customers on Scale and Enterprise have role based access control and an audit log of every search, export and API call inside their own account.
International transfers
Where data moves outside the region it was collected in, we rely on the standard contractual clauses. Enterprise customers can set a region for data residency so that their data stays in it.
Changes to this policy
When we change this policy we update the date at the top of the page. If a change affects how we process data about you in a material way, we tell account holders by email before it takes effect.
Contact
Questions, requests and complaints go to [email protected].