Data Processing Agreement (DPA)

This Data Processing Agreement forms part of the service terms between Accuracy and the business customer using the services.

It applies when Accuracy processes personal data on the customer's behalf through bulk email verification and related application features.

The customer acts as the controller, or as a processor acting for another controller, for customer-provided personal data.

Accuracy acts as the processor or subprocessor, as applicable, when it handles that data to provide the services.

Bulk uploads, application actions, service configuration, and written support requests constitute the customer's instructions to Accuracy.

Accuracy processes customer data to perform those instructions, operate and secure the service, and comply with applicable law.

Accuracy processes customer data for email verification and the associated bulk workflow.

• receive and parse supported upload files;
• normalize and validate submitted email addresses;
• perform syntax, domain, DNS, MX, SMTP, catch-all, disposable-domain, and role-account checks where applicable;
• classify verification results and reason codes;
• prepare result files for download;
• display batch status and history; and
• operate, troubleshoot, and protect the service.

The people represented in customer data depend on the customer's lawful use of the service.

Customers should submit only the data required for email verification.

• email addresses;
• original customer-supplied file columns;
• domain and verification information;
• verification status and reason codes;
• batch and row identifiers; and
• processing timestamps and technical metadata.

Customers must not use Accuracy to submit sensitive information that is unnecessary for email verification.

• passwords or authentication secrets;
• private cryptographic keys;
• payment-card or banking credentials;
• government identification numbers;
• health, biometric, or genetic data; and
• other highly sensitive data unrelated to email verification.

The customer is responsible for deciding whether the service is appropriate for its processing activities.

• have a lawful basis and authority to submit the data;
• provide required notices and obtain required permissions;
• submit only data needed for the stated purpose;
• keep account access secure; and
• comply with the Acceptable Use Policy and applicable law.

Accuracy processes customer data only for the service purposes described in these terms, the customer's documented instructions, service security, and applicable legal requirements.

• limit access to people and systems that require it to operate the service;
• maintain confidentiality obligations for authorized personnel;
• use authentication and authorization controls;
• protect credentials and service secrets; and
• delete eligible bulk data through the configured cleanup process.

If Accuracy receives a request concerning data controlled by a customer, Accuracy may direct the requester to that customer unless applicable law requires a direct response.

The customer remains responsible for evaluating and responding to requests concerning its data.

Accuracy will take reasonable steps to contain and remediate a confirmed security incident affecting customer-provided personal data.

Where notification is required by applicable law, Accuracy will contact the affected customer using its available account or business contact information.

The following are the current default retention periods. Deployment configuration can change these periods, and the active configuration controls the service.

• uploaded source files: 7 days;
• generated result files: 30 days;
• temporary processing data: 7 days.

Source files, generated results, and temporary processing data become eligible for deletion when their configured retention periods expire.

Data that must be retained to meet a legal obligation may be kept for the required period and remains subject to these protections while retained.

Accuracy remains responsible for selecting providers appropriate to the processing they perform and for applying required data-protection terms.

A business customer can request available provider and processing information from privacy@accuracy.email.

Country: India

Obligations concerning confidentiality, security, and deletion continue for as long as Accuracy retains customer-provided personal data.

Accuracy may update these terms to reflect changes in the service, its processing, or applicable requirements. The Last updated date identifies the deployed version.

Privacy: privacy@accuracy.email

Support: support@accuracy.email

Country: India