Privacy Policy

Last updated: August 7, 2026

Data Controller

The Email Divinator service (https://email-divinator.com) is the controller of the data described below. For any question about your personal data or to exercise your rights: contact@email-divinator.com.

Data We Collect

Search data: the first name, last name and company domain you enter to generate professional email address candidates.

Account data: email address and password (stored hashed, never in plain text) if you create an account, plus your credit balance and search history.

Free usage without an account: the email address you declare to access the free quota is stored to count the searches performed.

Payment: payments are processed by Stripe. We never store your card number; we only keep the transaction reference and the billing information required by our accounting obligations.

Contact form: the message and email address you provide so we can reply.

Technical data: server logs and IP address, used for security, rate limiting and abuse prevention.

Purposes and Legal Bases

Providing the service (generating and validating email addresses, managing accounts and credits): performance of the contract. Fraud and abuse prevention (quotas, rate limiting): legitimate interest. Audience measurement and advertising: only with your consent (see "Cookies"). Accounting and tax obligations: legal obligation.

Data About Searched Persons

The service predicts professional email addresses from minimal data provided by the user (first name, last name, company domain), based on the legitimate interest of B2B prospecting. This data concerns professional addresses, not personal ones. If you are the subject of a search and wish to object or request deletion of data concerning you, write to contact@email-divinator.com: we will process your request promptly.

Recipients and Processors

We rely on the following providers, each accessing only the data needed for its role: Supabase (database and authentication, EU region), ZeroBounce (technical email validation), Stripe (payment), Resend (transactional emails), Cloudflare (hosting and delivery), Google (GA4 audience measurement and AdSense advertising, only if you consent). We never sell your data.

Transfers Outside the European Union

Some providers may process data outside the EU (notably ZeroBounce, Stripe, Cloudflare and Google, US companies). These transfers are governed by GDPR mechanisms (standard contractual clauses, EU-U.S. Data Privacy Framework).

Retention Periods

Account data and search history: as long as your account is active, then deleted. Free searches without an account: kept as long as needed to manage the quota, then purged. Billing data: 10 years (accounting obligation). Contact messages: for the duration of handling the request. You may request early deletion of your data at any time.

Cookies and Trackers

Essential trackers (exempt from consent): authentication session, language preference and storage of your cookie choice, kept locally in your browser. Audience measurement (Google Analytics 4) and advertising (Google AdSense): loaded only if you click "Accept" on the banner. You can change your mind at any time via the "Cookies" link in the footer — refusing is as easy as accepting.

Your Rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction of processing, objection and portability of your data. To exercise them: contact@email-divinator.com. You may also lodge a complaint with your supervisory authority (in France, the CNIL — www.cnil.fr).

Security

Data is hosted in the European Union (Supabase, eu-west region), transits over HTTPS, and access is restricted by row-level authorization rules in the database (Row Level Security). Passwords are hashed and never accessible.

Contact

To exercise your rights or ask a question: contact@email-divinator.com