- 1. Storage limitation & data minimization
- 2. Verification lists & result reports lifecycle
- 3. Instant 1-click manual hard purge
- 4. Ephemeral socket verification logs
- 5. Account credentials & workspace records
- 6. Financial ledgers & permanent credit records
- 7. Backup snapshots & tombstone cycles
- 8. Frequently asked retention questions
1. Storage limitation & data minimization
In adherence to the core data minimization and storage limitation principles under GDPR Article 5(1)(e) and California privacy law, MailCheckup retains personal data only for as long as strictly necessary to fulfill the operational verification task instructed by the Customer.
We do not maintain indefinite data lakes, shadow archives, or persistent lead directories. When a retention window expires, data is purged permanently via cryptographic shredding.
2. Verification lists & result reports lifecycle
When you upload an email list (via CSV, TXT, or REST API), the input file and its processed deliverability results are stored with AES-256 encryption in dedicated Amazon S3 buckets.
The standard retention period for all completed verification runs is thirty (30) calendar days from the moment the job finishes. On Day 31, an automated AWS S3 lifecycle rule irreversibly deletes the file objects from storage.
3. Instant 1-click manual hard purge
Customers processing highly confidential contact databases do not need to wait 30 days. Our customer portal and REST API provide an immediate 1-click hard deletion trigger.
Executing a list purge permanently unlinks database foreign keys, deletes intermediate parsing chunks, and shreds the source file and result exports within seconds, leaving zero readable records in our active databases.
4. Ephemeral socket verification logs
During the RFC 5321 Port 25 verification check, diagnostic socket conversations occur strictly in volatile RAM. Diagnostic server logs (recording timestamp, destination MX IP, and diagnostic code like 250 or 550) are retained for seven (7) rolling calendar days to diagnose remote network timeouts or provider throttling, after which they are automatically rotated and purged.
5. Account credentials & workspace records
Workspace authentication records, user profiles, and API key hashes are maintained during the active life of your account. If a customer deletes their workspace, all account credentials and team access tokens are permanently deleted from our primary PostgreSQL databases within thirty (30) days.
6. Financial ledgers & permanent credit records
On-demand credit packs purchased through Stripe Checkout do not expire. Your credit ledger balance persists indefinitely until utilized by verification jobs. Financial transaction ledgers, Stripe transaction IDs, and downloadable corporate invoices (number MCU-YYYYMMDD-####) issued by Secuno LLC are retained for seven (7) tax years to satisfy US Internal Revenue Code mandates.
7. Backup snapshots & tombstone cycles
To guard against hardware failure and ensure business continuity, encrypted disaster recovery snapshots are captured daily and stored in an isolated AWS region. Backup snapshots have a rolling expiration lifecycle of thirty (30) days. When data is deleted from our active production systems, the corresponding backup images overwrite and expire automatically within 30 days.
The table below summarizes our comprehensive data retention schedule:
| Data Asset Category | Active Storage Lifespan | Deletion Execution Mechanism | Statutory / Legal Basis |
|---|---|---|---|
| Uploaded Source CSV Files | 30 Calendar Days | Automated S3 lifecycle rule + 1-click purge | GDPR Article 5(1)(e) Storage Limitation |
| Verification Output Reports | 30 Calendar Days | Automated S3 lifecycle rule + 1-click purge | Customer Contractual Fulfillment |
| Ephemeral SMTP Socket Logs | 7 Rolling Days | Daily automated log aggregation rotation | GDPR Article 6(1)(f) Network Defense |
| Customer Account Records | Active Account Lifecycle | Hard deletion within 30 days of workspace closure | GDPR Article 6(1)(b) Contract Performance |
| Credit Balance Ledgers | Permanent (Indefinite) | Maintained in ledger until consumed by user | Customer Asset Property Retention |
| Invoices & Financial Receipts | 7 Tax Years (Statutory) | Automated tax ledger archive retention | US Internal Revenue Code (IRC § 6001) |
8. Frequently asked retention questions
Can I delete my uploaded email lists immediately after downloading results?
Yes. In your MailCheckup workspace dashboard, each verification list displays a 'Purge Data' button. Clicking this executes an immediate cryptographic deletion across our AWS S3 storage buckets and database tables within seconds.
Can MailCheckup recover an email list after it has been purged?
No. Once an email list is deleted—either via manual purge or through our automated 30-day lifecycle—it is permanently and irreversibly shredded. We do not maintain unencrypted archival copies.
Why are billing invoices retained for 7 years?
Under United States Internal Revenue Code (IRC) regulations and Wyoming state corporate tax compliance mandates, Secuno LLC is legally required to retain transaction invoices, corporate entity tax IDs, and accounting ledgers for seven (7) tax years.
What happens to my account data if I delete my workspace?
When you terminate your workspace, all active API keys, team memberships, and saved workspace configurations are deleted immediately. Any remaining customer-uploaded verification files are hard-purged within 24 hours.
Do backup archives keep copies of deleted email lists indefinitely?
No. Database snapshots and encrypted disaster-recovery backups operate on a rolling 30-day retention cycle. When a customer purges a list, the deletion tombstone cycles through and overwrites all backup images within 30 days.
Do on-demand verification credits expire if I don't use my account for months?
No. On-demand credit packs have no expiration date. Your credit balance remains intact in your account ledger indefinitely until consumed by verification jobs.