Privacy Policy
Last updated 2026-08-29
This is a plain-language draft, not reviewed legal advice. It is not a substitute for advice from a qualified attorney.
1. What we collect
- Account data: your email address, used to sign in via a magic link (we do not store passwords) and to send receipts and job-completion notices.
- Uploaded lists: the file you upload and the email addresses in it, used only to run the verification you requested.
- Basic technical data: the IP address used at signup, kept for as long as your account exists to help us detect abuse of free signup credits.
2. How long we keep it
Your uploaded file and the individual email addresses from a completed job are deleted from our live database 7 days after the job finishes. We keep the job record itself (filename, row counts, credits charged) and your billing history indefinitely, since we need them for accounting and to answer support and billing questions — but the addresses you uploaded are gone from the running system after that week.
We also keep encrypted nightly database backups for disaster recovery, rotated out after 14 days. A backup taken before your data's 7-day deletion date will still contain it until that backup itself is rotated out — so a copy of your data can persist for up to roughly three weeks in total in a backup we are not actively using, even though it is gone from the live system after 7 days. Backups are used only to restore the service after a failure, never to serve or process your data.
3. We do not sell your data
We do not sell, rent, or share the contents of your uploaded lists with any third party for their own marketing or any other purpose. Your lists are used only to perform the verification you asked for.
4. Who processes data on our behalf
We use a small number of service providers to run Stryke Scrub, each only for what's needed:
- Stripe — payment processing. We never see your full card number.
- Resend — sending magic-link sign-in, receipt, and job-completion emails.
- Hetzner — the server that runs the app and performs verification.
- Cloudflare — DNS, and encrypted nightly database backups.
None of these providers may use your data for their own purposes.
5. Your choices
Contact us at the address below to ask what account data we hold or to request it be deleted, subject to what we need to keep for legal, billing, or fraud-prevention reasons.
6. Changes
We may update this policy; the "last updated" date above will change when we do.