Privacy Policy

DQE USA is a data-quality and validation company. We provide a unified API for address standardization (USPS CASS-certified), email verification, and phone validation.

2.1 Account & Registration Data

When you create an Account, we collect: first name, last name, company name, business email address, and the date/time of registration. This data is required to provide the Service.

2.2 Billing & Payment Data

When you subscribe to a paid plan, we collect billing name, billing address, and payment method details. Payment card numbers are handled exclusively by Stripe and are never stored on DQE's servers. We retain a tokenized reference and the last four digits of your card for billing records.

2.3 API Usage & Log Data

Our servers automatically record: API request timestamps, the endpoint called, Credit consumption, HTTP response codes, and your IP address. We do not log the full body of API requests containing Customer Data beyond what is necessary to deliver and debug the Service.

2.4 Customer Validation Data

Addresses, email addresses, and phone numbers that you submit via the API or CSV batch upload for validation. See Section 6 for how this data is specifically handled.

2.5 Website & Cookie Data

When you visit our website, we collect browsing behavior, pages viewed, session duration, device type, operating system, browser version, and referring URL. See Section 8 for cookie details.

2.6 Communications

If you contact us via email or our support portal, we retain the content of your communications and our responses to provide support and improve the Service.

We use the personal data we collect to:

• Provide and operate the Service — account management, API key issuance, Credit tracking, and result delivery.
• Process payments — billing, invoicing, tax compliance, and fraud prevention.
• Communicate with you — transactional emails (API key delivery, receipts, service alerts), and, with your consent, product updates and newsletters.
• Improve the Service — aggregate, anonymized analysis of usage patterns to optimize performance and develop new features.
• Security and fraud prevention — detecting and preventing abuse, rate-limit violations, and unauthorized access.
• Legal compliance — meeting obligations under applicable law, responding to lawful government requests, and enforcing our Terms of Use.

We do not sell, rent, or share your personal information with third parties for their independent marketing purposes. We do not use Customer Validation Data (the addresses, emails, or phones you submit) for any purpose other than performing the validation you requested.

We do not sell personal data. We share data only with the following categories of parties:

• Service providers and subprocessors — third parties who process data on our behalf, contractually bound to use it only for the services they provide to DQE.
• Legal and regulatory authorities — where required by law, court order, or to protect DQE's legal rights.
• Business transfers — in connection with a merger, acquisition, or sale of assets, where the acquiring entity agrees to honor this Privacy Policy.

Subprocessor list

This list is reviewed and updated at least annually. We will notify you of material changes to our subprocessors via email or in-app notice.

You retain full ownership of all Customer Validation Data. DQE processes this data exclusively to execute the validation service you requested. We do not:

• use Customer Validation Data for our own marketing, profiling, or analytics;
• sell or share Customer Validation Data with third parties for their own use;
• combine Customer Validation Data with other datasets for enrichment or targeting; or
• use Customer Validation Data to train machine learning models for purposes unrelated to the core validation service.

Customer Validation Data is stored in encrypted form (AES-256 at rest, TLS 1.2+ in transit) and is automatically deleted 30 days after processing is complete. You may request earlier deletion at any time by contacting privacy@dqverify.com or using the delete function in your Account dashboard.

When retention periods expire, data is securely deleted or irreversibly anonymized. Data subject to an active legal hold is retained until the hold is released.

We use cookies and similar tracking technologies on our website. You can manage your cookie preferences via the consent banner that appears on first visit.

Cookie consent is refreshed every 12 months in accordance with applicable law. You may withdraw consent at any time by clearing your browser cookies or visiting our cookie preference center.

DQE USA is headquartered in Miami, Florida. All customer data — including validation inputs (addresses, emails, and phone numbers submitted to the API) and validation outputs — is processed and stored exclusively on infrastructure located in the United States. DQE does not transfer customer data to servers outside the United States as part of the core validation workflow.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA grants you the following rights:

• Right to know — request disclosure of the categories and specific pieces of personal information we collect, use, disclose, or sell about you.
• Right to delete — request deletion of personal information we hold about you, subject to certain exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale / sharing — DQE does not sell or share personal information for cross-context behavioral advertising. You need not opt out.
• Right to limit use of sensitive personal information — DQE does not use sensitive personal information (as defined under CPRA) for purposes other than providing the Service.
• Non-discrimination — exercising your CCPA rights will not result in discriminatory treatment.

Submit a verifiable consumer request by emailing privacy@dqverify.com or calling 1-800-555-0100. We will respond within 45 days.

You may designate an authorized agent to exercise these rights on your behalf by providing written authorization together with verification of the agent's identity.

DQE implements technical and organizational measures appropriate to the risk of the processing, including:

• AES-256 encryption for data at rest;
• TLS 1.2 or higher for all data in transit;
• API key authentication with optional IP allowlisting;
• Role-based access controls and least-privilege principles;
• Regular penetration testing and vulnerability scanning; and
• Continuous monitoring and independent security reviews.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. Report suspected security issues to security@dqverify.com.

The Service is intended for use by businesses and professionals. We do not knowingly collect personal information from individuals under the age of 16. If you become aware that a child under 16 has provided us with personal data, please contact us at privacy@dqverify.com and we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• post the revised policy on this page with an updated "Effective date";
• send an email notification to the address associated with your Account at least 14 days before the changes take effect; and
• display a prominent in-app notice for the 30 days following the change.

Your continued use of the Service after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

For any privacy-related questions or to report a concern: