Privacy Policy

1. Introduction

Dokreativ Technologies OPC Private Limited ("we", "our", or "us") operates Mailari, an email verification service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at www.mailari.io.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Information Technology Act, 2000 of India.

2. Information We Collect

2.1 Account Information

• Email address
• Name
• Company name (optional)
• Authentication credentials (managed by Clerk)

2.2 Usage Data

• Email addresses submitted for verification
• Verification results and metadata
• API usage logs and statistics
• Credit transactions and payment information

2.3 Technical Information

• IP address
• Browser type and version
• Device information
• Cookies and similar tracking technologies
• Access times and referring URLs

2.4 Payment Information

Payment card details are collected and processed by our payment processor, Razorpay. We do not store complete payment card information on our servers.

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining the email verification service
• Processing your verification requests and generating results
• Managing your account and user authentication
• Processing payments and maintaining transaction records
• Sending service-related communications and updates
• Detecting and preventing fraud, abuse, and security incidents
• Improving our service and developing new features
• Complying with legal obligations and enforcing our terms
• Providing customer support and responding to inquiries

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To provide our services as per our Terms of Service
• Legitimate Interests: For fraud prevention, security, and service improvement
• Consent: For marketing communications and optional features
• Legal Obligations: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• Clerk: Authentication and user management
• Razorpay: Payment processing
• Railway: Database hosting
• Vercel: Application hosting
• Upstash: Redis caching and rate limiting

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Retention

We retain your information for as long as:

• Your account remains active
• Needed to provide services to you
• Required to comply with legal obligations (typically 7 years for financial records)
• Necessary to resolve disputes and enforce agreements

Verification results are retained for 90 days for caching purposes. You may request earlier deletion of your data by contacting us.

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, visit your account settings or contact us at privacy@mailari.io

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including India and the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission for transfers outside the EEA.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure API key management
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Remembering your preferences
• Security and fraud prevention
• Analytics and performance monitoring

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service. See our Cookie Policy for more details.

11. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR, unless the breach is unlikely to result in a risk to your rights and freedoms.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our website. The "Last updated" date at the top indicates when changes were made.

14. Contact Us

For privacy-related questions or to exercise your rights, contact us:

15. Supervisory Authority

If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.