GDPR & Data Processing

Roles

For account and billing data, Null-Bounce is a controller. For the email addresses you submit for verification, you remain the controller and Null-Bounce acts as a processor, handling addresses solely to return verdicts and storing them only to power your history and exports.

Processing details

• Purpose: deliverability assessment at your direction.
• Duration: until you delete records or your account.
• Location: EU/US data centers of our hosting and DNS providers; no other transfers.
• Recipients: none beyond the subprocessors listed in the Privacy Policy. We do not email your leads and never share lists.

Your obligations

Ensure you have a lawful basis (typically legitimate interest for B2B lists you collected, or consent) before submitting addresses. Honor data-subject rights for the lists you manage — deletion requests propagate to us by simply removing records via the dashboard, API, or account deletion.

DPA

Need a signed Data Processing Agreement? Email privacy@null-bounce.com with your company details and we countersign within 5 business days.