Privacy Policy

Last Updated: May 2026

At ExemptCheck (“we”, “us”, “our”), we respect your privacy and are committed to protecting the personal data we hold about you. This Privacy Policy explains how we collect, use, and share information when you use our website and API services (the “Service”).

1. Information We Collect

Account Information: When you register for an account, we may collect your name, email address, company name, and billing details.

API Usage Data: We collect technical data regarding your use of the API, including IP addresses, timestamps, request payloads (such as certificate numbers or business information submitted for verification), and response times.

Website Analytics: We use Google Analytics and other tracking technologies to collect standard internet log information and details of visitor behavior patterns.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions and send related information, including confirmations and invoices.
  • Monitor and analyze trends, usage, and activities in connection with our Service.
  • Communicate with you, including sending technical notices, updates, security alerts, and support messages.
  • Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.

3. Data Processed on Your Behalf

As part of the Service, you may transmit third-party business information (such as your customers’ exemption certificate numbers) to our API. We process this data strictly for the purpose of verifying it against state databases. We do not sell this data to third parties. We may cache verification results internally to improve API response times and reduce load on state portals, but this data is aggregated or securely stored.

4. Third-Party Service Providers

We may employ third-party companies to facilitate our Service. These third parties have access to your data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Key partners include:

  • Stripe: For payment processing.
  • Zuplo: For API gateway management and rate-limiting.
  • Loop.so: For managing our newsletter and lead generation.
  • Google Analytics: For website traffic analysis.

5. Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

6. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top of this Privacy Policy.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us via the contact form on our website.