Privacy Policy

1. Data Ownership & Non-Disclosure Guarantee

At MXBees (a proprietary email infrastructure service operated by SMART INFOTECH, Karnataka, India), we hold data confidentiality as a core engineering commitment. Any email addresses, prospect lists, CSV files, and verification payloads uploaded to our platform remain strictly your exclusive property.

We maintain a permanent zero-disclosure and zero-reselling policy:

• We never resell, monetize, lease, or share your contact data with any third party, broker, or advertiser.
• We never train machine learning models on your recipient databases.
• We do not merge contact records across accounts.

2. In-Memory Processing & Volatile Storage

Email addresses submitted for RFC 5321 SMTP socket probing, MX record lookups, disposable domain matching, and catch-all validation are processed in volatile worker memory (RAM).

Once batch verification has concluded and your sanitized CSV report is generated, raw email list contents are automatically purged according to your configured retention window (default: 48 hours for export convenience). Persistent databases retain only aggregated billing telemetry (job IDs, row counts, deliverability totals, timestamped audit records) necessary for transaction settlement and account quotas.

3. Encryption & Infrastructure Safeguards

We apply bank-grade encryption protocols throughout our pipeline:

• Data in Transit: 100% of HTTPS network traffic between your client and our edge servers is secured with TLS 1.3 and 256-bit SSL encryption.
• Data at Rest: Cached job buffers are encrypted using AES-256 before temporary storage.
• Network Isolation: Worker clusters execute over dedicated isolated IP sockets equipped with strict PTR rDNS records to prevent cross-tenant packet leakage.

4. Information We Collect

To provide and bill for our verification services, we collect:

• Account Credentials: Email address, hashed password, and organization name.
• Transaction Records: Billing address, payment gateway reference IDs (e.g., Razorpay payment IDs or HDFC Vyapar UTR references). We never store your raw credit card numbers or UPI PINs.
• API Usage Logs: Verification request counts, response latency, and RFC error codes.

5. Regulatory Compliance & Data Subject Rights

In compliance with the Indian Information Technology Act 2000, IT Rules 2011, and international data privacy principles (including GDPR where applicable):

• You have the right to request full deletion of your user account and all associated temporary logs at any time.
• You may request an export of your account transaction and billing history.

6. Contact & Grievance Redressal

If you have questions, privacy inquiries, or deletion requests, please contact our Data Protection Officer: