This policy explains what personal data DiwanMail handles and why. We act as a processor for the email you and your users send and receive, and as a controller for your account details.
What we collect
- Account details: your name, organization name, email address and a one-way hash of your password.
- Email content and metadata: messages stored in your mailboxes, and delivery logs (sender, recipients, time, size, delivery status).
- Security data: IP addresses of sign-ins and failed sign-in attempts, spam and virus scan results.
- Billing contact: what we need to arrange payment for paid plans.
Why we use it
- To deliver, store and filter your email.
- To protect the Service: blocking brute-force attacks, detecting compromised accounts and preventing spam.
- To contact you about your account, plan changes and security incidents.
We do not sell your data, show advertising, or read your email, except when automated filters scan it for spam and malware, or when you ask us to investigate a problem.
Who else sees it
Email you send is, by its nature, delivered to the receiving servers. Feedback-loop reports from large mailbox providers may tell us when a recipient marks your mail as spam. We share data with authorities only when legally required.
How long we keep it
Mail is kept until you delete it or close your account (then 30 days). Delivery and security logs are kept for up to 90 days. Account records are kept as long as your account exists and as required for accounting.
Cookies
We use one essential session cookie to keep you signed in. We don't use tracking or advertising cookies.
Your rights
You can access, correct, export or delete your data. Most of this you can do yourself in Mail Control and webmail; for anything else write to support@diwanmail.com.
Questions about this document? Write to support@diwanmail.com.