Gojiberry uses BounceBan to verify business email addresses before they're used in outreach, reducing bounce rates and protecting sender deliverability and reputation.
Why do we do this
Sending to invalid or non-existent addresses harms deliverability for the sender and can affect the mail servers on the receiving end. Verification is carried out on the basis of Gojiberry's legitimate interest in ensuring outreach is sent to valid addresses.
What's shared
For standard verification, Gojiberry sends only the email address itself. Name, company, job title, and other professional profile data are not sent to BounceBan.
How BounceBan uses this data
BounceBan processes the email address solely to return a verification result (valid, invalid, risky, etc.) to Gojiberry. BounceBan acts as a subprocessor to Gojiberry for this purpose, it does not act as an independent controller of this data, and Gojiberry requires it to process the data only under Gojiberry's instructions, consistent with our Subprocessor requirements described in the [Gojiberry Subprocessors List].
Where it's processed
BounceBan operates in the United States, so verification data may be processed or stored there.
Transfer safeguards
Where personal data leaves the EEA, appropriate safeguards under Article 46 of the GDPR apply, including the EU Standard Contractual Clauses (SCCs) referenced in BounceBan's standard terms. Gojiberry relies on those terms; there is currently no separately negotiated transfer agreement between Gojiberry and BounceBan.
Transfers
BounceBan's documentation doesn't currently specify which UK mechanism applies (the UK IDTA, the UK Addendum to the EU SCCs, or another). If you need this confirmed, contact Customer Support.
Your rights
If you are an individual whose email address was processed for verification and would like to exercise your GDPR rights, you can submit a request through our Opt-Out & Privacy Requests page.
For our general approach to international transfers, see our [International Data Transfers] article