Phonecheck Validator is operated by DeusExLabs.ai in Montréal, Québec, Canada. This policy covers the Phonecheck website, REST API and ChatGPT plugin.
Information we use
We use your account email, authentication identity, API-key and session-token hashes, and authorization records to manage secure access. Original accounts retain password and recovery-code hashes until they migrate to the current sign-in system. After migration, those original login credentials are removed; the account, credits and existing ChatGPT connections remain. We process submitted phone numbers, default countries, lookup modes and CSV files to return results. Credit balances, usage and billing records support the service and purchases or disputes. Saved lookup history is opt-in.
Cloudflare supplies an approximate country code to preselect your default country; you can change it. This does not require browser location permission. Temporary OAuth anti-forgery cookies protect authorization. Browser credentials and lookup results are kept in page memory rather than browser storage.
Sign-in
Our authentication service, operated by Google, manages Google, GitHub and email sign-in when enabled. It processes your email, provider identity and authentication activity; Phonecheck receives a verified identity and maintains its own account and credit records on Cloudflare. Social providers process sign-in under their own policies. We require proof of ownership before connecting an existing account. The authentication service handles email verification and password-reset messages for migrated accounts. Password changes or identity revocation can invalidate Phonecheck credentials; identity status checks may be cached for up to 60 seconds.
Optional connected services
If you connect Google Sheets, we request access only to files you select. Connection tokens are encrypted. Connection and spreadsheet job metadata remain until you disconnect, delete the associated job, or delete your account. Imports become bulk jobs; exports write plain values into a new worksheet. Disconnecting revokes access and removes connection metadata. Account deletion also revokes the grant; we do not delete your spreadsheets. Original Phonecheck verification and password-reset links expire after 15 minutes and can be used once. Authentication links follow the authentication service’s expiry and single-use rules.
Service providers
Cloudflare hosts the service and its data. Our telecom data service processes uncached provider lookups and provider-run CSV jobs. Stripe processes purchases when payments are enabled; Phonecheck does not store card details. OpenAI processes ChatGPT conversations and plugin interactions under its own policies. The website loads fonts from Google Fonts, which receives the connection information needed to deliver them.
Information may be processed outside Québec or Canada. We do not promise Canada-only storage. Service providers have their own processing and retention arrangements.
Shared lookup cache
Successful account lookup results may be reused across customers within the same test or live environment. Cache identities use keyed hashes of normalized phone numbers and mode, and stored results are encrypted. These protections do not make the data anonymous. Customer account details and saved history are excluded from the shared result cache. Cache hits still use normal credits.
Retention and deletion
- Lookup cache: 24 hours for static checks and 15 minutes for current-carrier checks by default. Administrators can change either duration, up to 365 days, or disable caching. Expired results are not reused and are removed by scheduled cleanup.
- Saved history: 90 days by default, or earlier when you delete it. Administrators can choose 0–365 days; zero disables saved history. Expired entries are removed on reads and during cleanup.
- Application security events: 30 days by default, configurable from zero to 30 days. Zero disables collection. Events contain fixed event names and timestamps, without raw phone numbers, email addresses, IP addresses or credentials. Cloudflare platform diagnostics have separate provider-controlled retention; request invocation logging is disabled and automatic request tracing is sampled at zero.
- Accounts: deletion confirmed by your original password or a fresh sign-in immediately revokes access and removes saved history. Scheduled cleanup cancels subscriptions, expires pending checkout sessions, deletes provider files and removes the account login identity, including its linked sign-in identity when applicable. Administrators can set a delay of 0–29 days; the default is zero. Our operating target is completion within 30 days. External failures are retried and shown to the operator; pending work is not reported as completed.
- Financial records: necessary billing and transaction records remain for applicable accounting, tax, dispute and other legal obligations. Account deletion does not remove Stripe’s independently retained financial records.
Cleanup normally runs every five minutes. Cloudflare recovery copies may retain deleted information for up to 30 days after active-data deletion. A separate deletion journal blocks restored accounts and reapplies deletion; opaque deletion records remain for 35 days after completion, while incomplete requests remain until resolved. Deleting your Phonecheck account does not delete your ChatGPT conversation history or instantly erase independent provider backups.
Your choices and privacy contact
You can delete individual saved results and request account deletion from Usage & credits. For access, correction, privacy questions or complaints, contact the privacy contact at DeusExLabs.ai: info@phone-number-verificator.com. We may need to verify your identity before acting on a request.
Mailbox setup is in progress. Delivery to this email address has not yet been verified. The account deletion controls are available directly in your account.
Policy updates
This page states the effective date. Material updates will be reflected here. Applicable privacy rights remain in force.