Privacy Policy

• Account data: your email address, name (optional), and a securely hashed password when you register.
• Billing data: when you purchase a paid plan, payments are processed by our payment partner (Razorpay). We do not store your full card details — we only retain a payment reference, plan, amount, and status.
• API usage data: the email domains you submit for verification, request metadata, timestamps, and counts used to enforce quotas and prevent abuse.
• Technical data: IP address, browser/user-agent, and log information collected automatically for security and reliability.

• To provide, operate, and maintain the Service and your account.
• To process payments and manage subscriptions and quotas.
• To prevent fraud, abuse, and unauthorized access, and to enforce our Terms.
• To communicate with you about your account, security, and service updates.
• To analyze and improve detection accuracy and performance.

When you verify an email address, we process the domain portion (e.g. the part after the “@”) to determine whether it is disposable. We may store domain-level intelligence (MX records, IP details, classification) as part of our database. We do not use the personal, local part of submitted addresses for marketing, and we do not sell your submitted data.

We use essential cookies and browser local storage to keep you signed in and to remember preferences such as your light/dark theme. We do not use these for third-party advertising.

We share information only as needed to run the Service:

• With payment processors (Razorpay) to complete transactions.
• With infrastructure and hosting providers that operate our servers.
• When required by law, legal process, or to protect our rights and users.

We do not sell your personal information.

We retain account and billing records for as long as your account is active and as required to comply with legal, tax, and accounting obligations. Usage logs are retained for a limited period for security and analytics, after which they are deleted or anonymized.

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure, but we work to protect your data and to notify you of material breaches where required by law.

You may access, update, or request deletion of your personal data by contacting us. You can also delete API keys and close your account at any time from your dashboard.

The Service is not directed to individuals under 18, and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will notify you.

Questions about this policy? Email us at support@disposablescan.com. You can also reach DisposableScan at TODO — Street, City, State, PIN, India.