What we keep, and for how long.
The Privacy Policy is the legal text. This page lists the same facts in a table, so you can see them at a glance.
Data, purpose, time.
| Data | Why we keep it | How long |
|---|---|---|
| Name, address, date of birth, recovery email and phone | To run your account and help you get back in | Until you delete your account, then 30 days |
| Mail you send and receive | To show it to you on every device | Until you delete it; Trash keeps it 30 days more |
| Mail details: sender, recipients, date, size, subject | To deliver mail, list your inbox and search | As long as the message itself |
| Sending log: number of recipients per message | Daily sending limits and spam protection | Rolling 24 hours for the limit; kept with your account for abuse checks |
| End-to-end encrypted message text | To deliver it; we cannot read it | Until you delete it |
| Files in Drive and Photos | To store them for you | Until you delete them. Files in Drive Trash stay there until you empty it |
| Sign-in history: time, IP address, device | To spot sign-ins that are not you, and as Indian law requires | 1 year |
| Server and security logs | CERT-In Directions, 2022 | 180 days, in India |
| Meet attendance, chat in calls and host notes | So the host can make meeting minutes | 90 days |
| Payments and invoices | Tax law and accounting | 8 years, as the Companies Act and GST law require |
| Uptime checks for the status page | To show measured uptime | 400 days |
Copies for disaster recovery.
A copy of the mail database is made every night. Copies on the server are kept for 14 days and then deleted. A second copy goes to separate storage in Mumbai, encrypted with AES-256, so mail can be restored if the server is lost.
Honest note: when an account is deleted, its data is removed from the live service and leaves the server copies within 14 days. Automatic removal from the second, separate copy is not yet in place; we are building it. Until then, that copy is used only to restore the service after a disaster.
When you delete things.
| You delete | What happens |
|---|---|
| A message | Moves to Trash; removed for good after 30 days, or at once if you empty Trash |
| A file in Drive | Moves to Drive Trash; removed for good when you empty Trash or delete it from there |
| Your account | Turned off at once and permanently deleted after 30 days. Sign in within 30 days to cancel. Your address is never given to anyone else |
| An account unused for a year | We send up to five reminders first; the account is turned off only if you do not sign in |
Your data stays in India.
Indo Mail runs in one data centre region, in Mumbai, India: the servers, the mail database, Drive and Photos storage, backups and Lily. Data leaves India only when you send it there, for example by emailing someone at a service abroad. See our data centre.
Who helps us, in general terms.
We use a small number of companies for things we do not run ourselves. They act only on our instructions, under contract, and may not use your data for anything else.
| Kind of provider | What they do | What they can see |
|---|---|---|
| Cloud data centre and storage in Mumbai | Run our servers and keep encrypted files and backups | Encrypted storage; they do not have access to your account |
| Email delivery network | Carries mail we send to other email services | The messages you send to other services, as any mail server would |
| Payment gateway | Takes card and netbanking payments, once switched on | Payment details you enter on the payment page |
| Domain name registrar and DNS | Keep indoemail.in reachable | No user data |
We do not use advertising networks, data brokers or third-party tracking scripts. We never sell your data.
Questions about your data?
Write to our privacy team, or ask for a copy of your data.