MailRooster ("we", "us", or "our") is an email finding and verification service available at mailrooster.com and through the MailRooster Chrome extension. We help sales professionals, recruiters, and marketers find and verify professional email addresses from publicly available sources including LinkedIn and LinkedIn Sales Navigator.

If you have questions about this policy, contact us at support@mailrooster.com.

Account data

• Email address — used to create and identify your account
• Password — stored as a bcrypt hash; we never store or see your plaintext password
• Plan and billing status — your subscription tier and credit balance

Prospect data you collect

• Professional profile information from LinkedIn: full name, job title, company, location, LinkedIn profile URL, and company website
• Verified business email addresses found for those profiles
• Recent LinkedIn posts (optional, if you enable the "Include recent posts" setting)

All prospect data is publicly available professional information. We do not collect personal communications, financial information, health data, or any sensitive personal data.

Usage data

• Number of email finds and verifications performed (for credit tracking)
• Number of Sales Navigator pages scanned per day (for plan limit enforcement)
• IP address and browser type — collected by our servers for security and abuse prevention

Extension data

• Your authentication token is stored locally in Chrome extension storage on your device only
• Temporary lead data collected during a Sales Navigator scan session is stored locally and cleared after upload
• No browsing history or data from non-LinkedIn pages is ever collected

• To provide the email finding and verification service
• To authenticate your account and maintain your session
• To track credit and plan usage and enforce plan limits
• To send transactional emails (account verification, password reset)
• To detect and prevent abuse, fraud, and Terms of Service violations
• To improve the accuracy of our email finding algorithms

We do not use your data for advertising, profiling, or any purpose unrelated to operating the MailRooster service.

Unlike many email finding services, MailRooster finds and verifies email addresses in real time at the moment of your request. We do not serve results from a static database of pre-scraped emails. Each email is discovered and verified live against the mail server, which significantly reduces bounce rates and outdated contact data.

We do not sell, rent, or trade your personal data to any third party.

We share data only with the following service providers who help us operate the platform:

• Stripe — payment processing (your card data is handled entirely by Stripe and never touches our servers)
• OpenRouter — AI model routing for lead scoring and message personalisation features
• Cloud hosting providers — for server infrastructure

All third-party providers are contractually required to use your data only to provide the services we have engaged them for.

• Account data is retained for as long as your account is active
• Prospect and email data is retained until you delete it or close your account
• Daily usage counters are retained for 90 days for billing and dispute purposes
• On account deletion, all personal data is permanently removed within 30 days

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request your prospect data in CSV format
• Objection — object to any processing of your data

To exercise any of these rights, email us at support@mailrooster.com. We will respond within 30 days.

The MailRooster Chrome extension:

• Only activates on linkedin.com pages — it does not read, monitor, or interact with any other websites you visit
• Does not log keystrokes, mouse movements, or browsing history
• Does not modify the appearance or functional behaviour of your LinkedIn account
• Stores your authentication token locally in Chrome extension storage — it is never transmitted to third parties
• Uses the scripting permission solely to intercept LinkedIn's internal API responses on Sales Navigator pages in order to collect lead data that you have explicitly requested

All code in the extension is bundled within the extension package itself. No external JavaScript is loaded or executed at runtime (no remote code).

We use industry-standard security practices including HTTPS encryption in transit, bcrypt password hashing, JWT token authentication, and rate limiting to protect your account. No system is perfectly secure, but we take reasonable and appropriate measures to protect your data.

MailRooster is intended for business professionals and is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify registered users by email for material changes. Continued use of the service after changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or concerns: