Sign in

Privacy

Last updated 8 October 2026

ListHealth checks contact lists you upload. This page explains what we store, who sees it, and how to delete it. It is written to be read, not to be clever.

What we store

  • Your email address, so you can sign in.
  • The CSV files you upload and the results of each check.
  • Basic usage events (pages viewed, uploads, downloads) to improve the product.
  • A check memory, so the same email is not checked (and paid for) twice: a scrambled, one-way code made from the email address (it cannot be turned back into the address), its result (valid, invalid, catch-all or unknown), which checking service gave it, and the date. Nothing else: no names, no companies, no lists, and nothing that says who uploaded it.
  • Public facts about company web addresses (for example, whether a domain still receives email).

How long we keep it

  • Uploaded contacts and results are deleted automatically 30 days after upload.
  • You can delete any audit immediately with the "Delete this audit now" button.
  • Entries in the check memory are kept for up to 60 days, then deleted automatically. Deleting an audit does not remove them, because they cannot be linked back to you or your list.
  • To delete your account, email hello@example.com.

Who sees your data

  • Only you. Each account can only read its own uploads, enforced by the database.
  • To run checks, we send individual email addresses to email verification providers, and for a small number of contacts, a name and company to a licensed people-data provider. They process it only to return a result.
  • If another user checks the same email address within 60 days, they get the stored result (valid, invalid, catch-all or unknown) instead of a new paid check. That is all they get: no names, companies or lists are ever shared with other users, and they cannot see that you checked it.
  • We never sell your data, share it with other users, or use your lists to build our own database.

Where it is stored

On Supabase (database, United States) and Vercel (website). Both encrypt data at rest and in transit.

Your rights

You can ask for a copy of your data or for it to be deleted at any time: hello@example.com. You are responsible for having a lawful basis to process the contacts you upload.