--- title: "Privacy policy and data handling | Refresh List" description: "Refresh List privacy policy covering data collected, purposes, AI assistant inputs and outputs, recipients, international processing, retention, security, and user rights." url: https://refreshlist.net/policies/privacy last_updated: 16 October 2026 --- # Privacy policy and data handling Updated 16 October 2026 · Zacro Infotech Private Limited ## Who we are and the scope of this policy Refresh List is operated by Zacro Infotech Private Limited ("Refresh List", "we", "us"). This policy covers refreshlist.net, customer workspaces, APIs, assistant connectors, support, and related services. For account, billing, security, and website-usage data, Refresh List determines the purposes and means of processing. When a customer submits contact data for verification, the customer is responsible for its lawful collection and instructions; Refresh List processes that list to provide the requested service. ## Information we collect or receive Depending on how you use the service, we process account details such as name, email, login-provider identifier, workspace, role, and authentication/security records; customer-submitted CSV or TXT content, filenames, selected email column, parsing settings, email addresses, original row fields, and verification outcomes; job, quote, approval, progress, export, credit, payment-reference, and support records; and technical data such as IP address, browser/device information, request logs, cookie identifiers, and website interaction events. Payment card details are collected by the selected payment processor, not stored by Refresh List. Google sign-in may provide basic profile information. When you use the Google Sheets™ add-on, we process the spreadsheet range and email values you select, plus connection, job, progress, and result data needed to complete your requested action. We do not read unrelated spreadsheets or Drive files. ## How list inputs and tool outputs are used We use submitted list content to estimate eligible checks, identify duplicates and skipped or suppressed rows, save a draft when you request preflight, run verification after approval, preserve row context, show progress, reconcile credits, and provide an authenticated export handoff. The cost-estimate tool processes CSV/TXT content to calculate counts and does not create a saved job. Preflight stores parsed source rows and job metadata in Refresh List storage. Account-summary outputs can include the current workspace credit balance and up to ten recent job filenames, statuses, and result counts. Quote outputs include the required credits, expiry time, and approval link. Status outputs include filename, job status, and result counts. Export outputs include an authenticated handoff link. These outputs are returned to the assistant platform you selected and may appear in its conversation. ## Purposes and legal grounds We process account and workspace data to provide the service and perform our agreement with you; list and verification data on your instructions to provide preflight, verification, reporting, and export; payment and transaction records to complete purchases and meet accounting or legal duties; security and technical records to protect accounts, prevent abuse, troubleshoot, and maintain the service based on legitimate interests or legal duties; and website analytics or optional communication data based on consent where required or another lawful ground available in your jurisdiction. Where we rely on consent, you may withdraw it for future processing. Customers must provide any notices and obtain any permissions required for the contact data they submit. ## Verification and other service providers After you approve a verification job, Refresh List sends eligible unique email addresses to My-addr, our configured verification provider, to return mailbox-check outcomes. It does not send unrelated CRM columns to that provider for verification. Cloudflare provides application hosting and managed D1/R2 infrastructure; Supabase supports authentication; Resend sends transactional email; Tawk.to provides website live chat; Google Analytics measures website usage; ChatGPT Sites supports managed hosting; and Stripe or Cashfree may process checkout metadata, depending on the payment option. These providers receive only the information needed for their role, subject to their own terms and privacy notices. We do not sell customer lists or disclose them to advertising platforms or data brokers. We may disclose information where required by law, to protect people or the service, or as part of a corporate transaction subject to applicable safeguards and notice. ## AI assistants and model providers If you choose to use Refresh List through ChatGPT, including a private preview or review environment, OpenAI processes your prompts, content you submit to the assistant or its tools, and tool outputs as part of providing ChatGPT under the OpenAI terms and controls applicable to your account. If you choose the Refresh List connector through Claude, Anthropic processes the corresponding prompts, submitted content, and tool outputs under its applicable terms and controls. Refresh List does not control either provider’s independent retention or model settings. Do not submit information to an assistant unless you are authorized to share it with that provider. ## Other AI services and future integrations Refresh List does not currently send customer data to Google Gemini, Microsoft Copilot, or other AI-model providers through a direct Refresh List integration. If you independently copy, upload, or disclose information to another AI service, that service handles it under its own terms. We may add integrations with other providers, including Google Gemini, Microsoft Copilot, or other model platforms, only after choosing the provider and purpose and updating the relevant product disclosures before enabling that data flow. A general reference to possible future providers does not mean that an integration is active. ## AI training and limited use Refresh List does not use customer list content, Google user data, or derived results to train or improve generalized AI or machine-learning models. We use customer data to provide the requested workflow, maintain security, troubleshoot, reconcile usage and credits, and meet legal obligations. The model providers’ independent handling of data submitted through their services is governed by their own terms and settings; users should review those controls before submitting sensitive data. Google Workspace user data, if a future Google integration is enabled, will be handled only as disclosed for that integration and in accordance with the Google API Services User Data Policy, including its Limited Use requirements. ## Retention and deletion Uploaded drafts become eligible for scheduled deletion 30 days after creation. Completed, partial, and failed lists become eligible for scheduled deletion 30 days after their last update. Cleanup runs during maintenance processing and is not guaranteed at an exact clock time. You can delete stored list files and app-held results from your account before scheduled cleanup once processing has stopped; if a job is active, stop or cancel processing first. Assistant quotes expire after ten minutes; access tokens and sessions expire or can be revoked according to their settings. We retain account, security, billing, support, and transaction records for as long as needed for service operation, fraud prevention, dispute handling, and legal/accounting obligations. Verification-provider and AI-platform retention is controlled separately by those providers. ## International processing Refresh List and its service providers may process information in countries other than the country where you live. Where applicable law requires safeguards for an international transfer, we will use a legally recognized transfer mechanism and provide information about the applicable safeguards on request. The selected AI assistant and verification provider may also process data in their own operating regions under their own terms. ## Security We use HTTPS/TLS for data in transit, managed infrastructure and storage protections, workspace-scoped authorization checks, hashed access-token and API-key records, server-side handling of provider credentials, administrative activity records, and deletion controls. No method of storage or transmission is completely secure, and we do not claim an independent security certification. Do not send passwords, API keys, payment-card details, or complete contact lists to support. ## Your choices and privacy rights You choose whether to create an account, connect an assistant, submit a list, approve paid verification, and use an export. You may revoke a connector or API key, delete eligible stored files in the workspace, correct account details, and contact us to request access, correction, deletion, restriction, objection, or portability where those rights apply. You may also complain to your local privacy or data-protection authority. We do not sell personal information or share it for cross-context behavioral advertising. Some records may need to be retained when law permits or requires it. ## Cookies, analytics, and live chat The website uses Google Analytics to measure page visits and interaction events, and Tawk.to to provide live chat. These services may use cookies or similar technologies and receive technical or interaction data needed for their functions. The chat widget receives the messages and contact details you choose to provide; Refresh List does not intentionally attach your uploaded lists or reports to a chat. You can manage cookies through browser controls; blocking them may affect some website features. ## Children and policy changes Refresh List is a business service and is not directed to children under 16. We do not knowingly seek to collect children’s personal information. We may revise this policy when our services, providers, or legal requirements change. Material changes will be reflected here with a new update date before the revised practices are used, where required. ## Contact For privacy requests or questions, contact enquires@refreshlist.net or submit a request through Help & Support in your workspace. Please include enough information for us to locate the relevant account or job, but do not include passwords, access tokens, or a complete email list. ## Sitemap - [All Public Pages](https://refreshlist.net/sitemap.md) - [Email Glossary](https://refreshlist.net/glossary) - [Read This Page And Use Interactive Features](https://refreshlist.net/policies/privacy)