Privacy Policy

Bounce Cleaner (“we”, “us”, “our”) is an independent third-party application available on the GoHighLevel App Marketplace. We provide real-time email verification services to help marketing agencies maintain clean contact lists.

For privacy inquiries, contact: privacy@bouncecleaner.com

To provide our service, we process the following categories of data:

• Email addresses of contacts in your GoHighLevel account, submitted for verification
• GoHighLevel account identifiers (company ID, location ID, contact ID) used for routing and billing
• OAuth access and refresh tokens, stored encrypted at rest using AES-256
• Verification results (valid / invalid / risky / etc.) and the timestamp they were produced
• Aggregate usage metrics (verification counts per month) for billing and analytics
• Your contact information (your own email and name) for account administration and support

We do not process names, phone numbers, addresses, or other personal data attached to your contacts. Only the email address itself is submitted for verification.

• To perform email verification you have requested
• To return verification results to your GoHighLevel account
• To bill you accurately based on actual verification volume
• To provide customer support and respond to your inquiries
• To detect and prevent fraud, abuse, or service degradation
• To comply with legal obligations

We do not sell your data, share it with advertisers, or use it to build marketing profiles. We do not use your data to train AI models. We do not use your contacts’ data for any purpose other than the verification you requested.

To deliver our service, we share necessary data with these sub-processors:

All sub-processors are bound by contractual data protection obligations that meet or exceed the standards of this policy.

• Email addresses submitted for verification: retained for up to 30 days for cache and idempotency, then automatically purged.
• Email hashes (one-way SHA-256): retained indefinitely for billing audit trails. The original email cannot be recovered from a hash.
• Verification results: retained for 12 months for support and analytics, then purged.
• OAuth tokens: retained for as long as your installation is active. Deleted within 30 days of uninstall.
• Billing records: retained for 7 years for tax and accounting compliance.
• Support correspondence: retained for 24 months from the date of last contact.

Depending on where you and your contacts are located, you may have the right to:

• Access the personal data we hold about you or a contact
• Correct inaccurate personal data
• Delete personal data (subject to legal retention requirements)
• Restrict or object to processing
• Data portability — request a copy of your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@bouncecleaner.com from the address associated with your account. We will respond within 30 days.

Note: as a data processor, we act on behalf of you (the data controller) for your contacts’ data. If your contact requests deletion, please forward the request to us via your account and we will honor it within the timelines above.

• All data is encrypted in transit using TLS 1.2 or higher
• OAuth tokens are encrypted at rest using AES-256-GCM
• Database backups are encrypted and stored separately
• Access to production systems is restricted to authorized personnel
• We conduct regular security reviews of our infrastructure and dependencies

If you believe you have discovered a security vulnerability, please report it responsibly to security@bouncecleaner.com. We do not pursue legal action against good-faith security researchers.

Our infrastructure is primarily hosted in the United States. By using the service, you consent to data transfer to and processing in the United States. We rely on Standard Contractual Clauses (SCCs) and similar legal mechanisms to ensure protections equivalent to those in your jurisdiction.

Our service is intended for use by businesses. We do not knowingly collect data from individuals under 16. If you believe we have collected such data, contact us and we will delete it promptly.

We may update this policy from time to time. Material changes will be announced via email to active customers at least 30 days before taking effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

Questions or concerns about this policy or our data practices?
Email: privacy@bouncecleaner.com