Endbounce CCPA Privacy Policy

Effective Date: August 6, 2025

Welcome to Endbounce ("Endbounce," "we," "us," or "our"). This Privacy Policy is specifically designed to inform California consumers about how we collect, use, store, and share your personal information in compliance with the California Consumer Privacy Act (CCPA) of 2018, as amended by the California Privacy Rights Act (CPRA).

By accessing or using our services, visiting our website (www.endbounce.com), or interacting with us, you acknowledge and agree to the practices described in this Privacy Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@endbounce.com.

1. Information We Collect (Categories of Personal Information)

Under the CCPA, "Personal Information" is defined broadly as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

In the preceding 12 months, we may have collected and may collect the following categories of personal information:

Identifiers: Such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, phone number, or other similar identifiers.
Categories of personal information listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): Includes name, address, telephone number, employment, employment history.
Commercial Information: Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other similar network activity: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Professional or employment-related information: Job title, company name, industry, Intra-community VAT number (if applicable).
Inferences drawn from other personal information: Profiles reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Note: We do not intentionally collect sensitive personal information (as defined by CCPA/CPRA) such as government identifiers, complete credit card numbers, medical records, or other sensitive information beyond what is necessary for payment processing (handled securely via Stripe). Please refrain from providing such data.

2. Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

Directly from you: When you create an account, subscribe to our services, fill out forms, or communicate with us directly.
Indirectly from you: Through your activity on our website and services (e.g., Usage Data, Log Data collected automatically via cookies and similar technologies).
From third-party sources:
- Data Providers: Publicly available sources, professional networking sites, and data aggregators for B2B contact information.
- Partners and Affiliates: Companies with whom we have partnerships or data-sharing agreements.
- Service Providers: Entities that provide services on our behalf, such as payment processors (e.g., Stripe), analytics providers, and marketing partners.

3. Purposes for Collecting and Using Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

Providing our services: To create and manage your account, provide access to our email validation services, process transactions, and facilitate verifications related to your account.
Customer support and communication: To respond to your inquiries, provide customer support, send administrative information, and communicate with you about our services.
Marketing and promotional communications: To send newsletters, promotional materials, and information about our services and partner offers.
Personalization and analytics: To personalize content, conduct analytics, understand user behavior, and improve our services and user experience.
Security and fraud prevention: To prevent fraud, detect and investigate prohibited or unlawful activities, and enforce our terms of use.
Legal compliance: To comply with legal obligations, court orders, or governmental requests.
Auditing and reporting: To audit our interactions, transactions, and compliance activities.
Sharing B2B Contact Data Publicly: To collect, process, and share business contact information (B2B data) publicly to facilitate professional networking and business opportunities.

4. How We Share Your Personal Information

We may disclose your personal information to third parties for business purposes under the following circumstances:

Service Providers and Partners: We share personal information with trusted third-party service providers who assist us in operating our website, conducting our business, and providing services to you (e.g., payment processors like Stripe, cloud hosting, analytics providers, marketing partners, and customer support platforms). We ensure these providers are contractually obligated to keep personal information confidential and use it only for the purposes for which we disclose it to them.
Legal Obligations and Protection: We may disclose your personal information to comply with legal obligations, court orders, or governmental requests, or to enforce our terms of use, protect our rights, privacy, safety, or property, and that of our users and the public.
Business Transfers: In the event of a merger, acquisition, restructuring, sale of assets, or bankruptcy, your personal information may be transferred to a successor or affiliated entity. We will notify you of any change in ownership or use of your personal information.
Aggregated and Anonymized Data: We may share aggregated or anonymized data that cannot reasonably be used to identify you, for analytics, marketing, or other business purposes.
Sharing B2B Contact Data Publicly: We may share publicly available professional contact information (name, job title, company name, business email address, and phone number) to facilitate professional networking and business opportunities. We ensure that sharing of B2B data complies with applicable laws, and we provide mechanisms for individuals to opt-out or request removal of their data.

Note: We do not "sell" or "share" (for cross-context behavioral advertising) your personal information as defined by the CCPA/CPRA without your explicit consent.

5. Your California Consumer Rights

As a California resident, you have specific rights regarding your personal information under the CCPA/CPRA:

Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the categories of personal information that we have sold or shared.
Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
Right to Correct Inaccurate Personal Information: You have the right to request the correction of inaccurate personal information that we maintain about you.
Right to Opt-Out of Sale/Sharing: You have the right to direct us not to sell or share your personal information. As stated above, Endbounce does not sell or share personal information for cross-context behavioral advertising.
Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information. Endbounce does not intentionally collect sensitive personal information.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights.

How to Exercise Your Rights:

To exercise your Right to Know, Right to Delete, or Right to Correct, please submit a verifiable consumer request to us by:

Emailing us at: support@endbounce.com

We may need to verify your identity before processing your request, which may require matching personal information you provide in your request to personal information we already have on file. We will respond to your request within 45 days.

You may also designate an authorized agent to make a request on your behalf. We will require the authorized agent to provide proof of their authorization and may also require you to verify your identity directly with us.

6. Google API Compliance

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Access: When you connect your Google Account to our services, we access certain data, such as email content and contact lists, solely to provide our services (e.g., for email validation or enhancement features).
Data Use: We use this data solely to provide or improve our services and do not transfer it to third parties except as necessary to provide or improve the services, comply with applicable laws, or as part of a merger or acquisition.
User Control: You can revoke our access to your Google Account at any time via your Google Account settings.

7. Third-Party Data (Your Email Contact Lists and Content)

When you use Endbounce services, we may have access to information contained in your email contact lists and, where relevant for service functionality, email content.

Data Access and Use: We access your contact lists to facilitate email validation and other related services. We may process email content only to provide services such as email tracking, analytics, and automation features if explicitly enabled by you.
Data Security: Only authorized personnel have access to your contact lists and email content, and solely for purposes of providing support and improving our services. Your data is stored securely using industry-standard encryption and security protocols.
User Control: You can export your contact lists and email data at any time through your account settings. You can also modify or delete contacts from your account as needed.

8. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements.

Information for Service Execution: As needed to provide services, and up to 3 years after account closure, unless a longer period is required by law (e.g., for dispute resolution, legal obligations).
Marketing Information: 3 years from the date of collection or your last active contact, unless you opt-out earlier.
Legal and Regulatory Compliance: Evidentiary information may be retained for the statutory limitation period (generally 5 years) for legal defense and compliance purposes.
Anonymized Information: We may retain anonymized or aggregated information indefinitely for statistical analysis and business purposes, as it no longer identifies you.

9. Security Measures for Data Protection

We prioritize the security of your personal information and implement industry-standard technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction.

Technical Measures: Information encryption in transit (SSL/TLS) and at rest, firewalls, intrusion detection systems, regular security assessments, and secure coding practices.
Organizational Measures: Strict access controls to personal information (limited to authorized personnel on a need-to-know basis), employee training on data protection, and incident response procedures.
Incident Response: In the event of a data breach, we will notify affected individuals and relevant authorities as required by law. We will take prompt action to mitigate any potential harm.
User Responsibilities: You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your account. Please be vigilant against phishing and other unauthorized attempts to access your personal information.

Disclaimer: While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

10. Cookie Policy

Our website uses cookies and similar technologies to enhance your experience and analyze usage. Please refer to our separate Cookie Policy for detailed information on what cookies are, how we use them, and your choices regarding cookie management.

11. Privacy Policy Changes

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational reasons.

Notification of Changes: We will notify you of significant changes via our website or email at least 30 days before they take effect. The "Effective Date" at the top of this Privacy Policy indicates when the policy was last revised.
Your Continued Use: Your continued use of our services after the effective date constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

12. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@endbounce.com, and we will take steps to delete such information promptly.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@endbounce.com

We are committed to addressing your inquiries and resolving any concerns about your privacy.