Privacy Policy

1. The honest starting point

Email is not end-to-end encrypted, and Olbongo Mail is no exception. To deliver a message, filter spam, and let you search your inbox, our servers must be able to read it. Chat messages elsewhere on Olbongo are end-to-end encrypted and we genuinely cannot read them; we are not going to claim the same for mail, because it would not be true.

What we can tell you is exactly who may access it, and under what circumstances. That is the rest of this page.

2. What we hold

• Message content: the body, subject, headers and attachments of mail sent to and from your mailboxes
• Mailbox details: the address, display name, the password (stored only as an Argon2 hash), and storage used
• The phone number given when a mailbox is created — used to text the first password, and to reissue one if it is lost
• Delivery logs: sender, recipient, timestamp and outcome for each message, kept to diagnose delivery problems and to detect abuse
• Domain records: your domain name and its DNS configuration

3. Who can read your mail

• You, and anyone you give the mailbox password to
• Your organisation’s administrators, who can reset a mailbox password and could therefore reach its contents. If your mailbox is issued by an employer, they can access it — that is inherent to business email, and you should assume it
• Our systems, automatically, to deliver, filter and index mail
• Our staff — only when you ask. We do not read customer mail. Engineers may access message content while investigating a fault you have reported, or where we are legally compelled

We do not scan your mail to build advertising profiles, we do not sell it, and we do not use its contents to train models.

4. Where it is stored

Mail is stored on servers we operate, with data at rest on encrypted volumes. Connections are encrypted in transit: TLS for IMAP and SMTP submission, and opportunistic TLS between mail servers — though whether a message is encrypted on the last hop to another provider depends on that provider, not on us.

5. Third parties

Mail is not shared with third parties for their own purposes. It necessarily passes through the infrastructure we run on, and:

• Recipients’ mail providers receive any message you send to them — that is what sending mail is
• Our hosting provider operates the servers and storage
• Our SMS provider receives the phone number and the message when we text mailbox credentials
• Payment providers handle payment details; we do not store card or mobile-money credentials

6. How long we keep it

• Message content: until you delete it, or for 30 days after the subscription is cancelled, after which it is removed and cannot be recovered
• Deleted mail: removed from our systems within 30 days of leaving your Trash
• Delivery logs: 90 days
• DMARC reports: aggregate authentication data only, no message content

7. Your rights

You can export everything at any time using any IMAP client — no request to us required. You can delete individual messages, and an administrator can delete a whole mailbox, which removes its stored mail. To request deletion of all data associated with your account, use account deletion or write to us.

8. Contact

Privacy questions: privacy@olbongo.com. See also the Olbongo Mail Terms of Service.