Made in India. Used around the world.
Indo Mail is open to people and businesses in every country. Wherever you live, we follow the law of your country as well as the law of India — and where the two differ, we apply the one that protects you more.
What every user gets, in every country.
Rights over your data
See, correct, download and delete your data at any time. Download my data in Indo Shield gives you a copy in one file.
Clear consent
We ask before we collect anything we do not need to run the service, and no AI feature acts until you confirm it.
No sale or sharing
We never sell your data, never share it for advertising and never use your mail to train AI — in any country.
Safe transfers
Accounts are hosted in our Mumbai data centre. When your data leaves your country, we use the safeguards your country’s law requires, such as standard contractual clauses for the EU and the UK.
Breach notice
If a breach affects personal data, we tell regulators and the people affected within the time each law sets — 72 hours under European rules, six hours to CERT-In in India.
Requests from authorities
We answer only valid legal requests made through the proper legal process of your country, check each one, and publish the counts in our transparency report.
Local consumer and tax rules
Clear prices, refunds and cancellation as your local consumer law requires, with GST, VAT or other local taxes on invoices where they apply.
Age rules
Accounts follow the minimum age for online services in each country, with parental consent where the law asks for it.
Sanctions and export rules
We follow applicable sanctions and export control laws when we offer the service and accept payments.
Laws we follow.
The main data protection and anti-spam laws in the places our users live, and what we do to meet them.
| Country or region | Main laws | How Indo Mail follows them |
|---|---|---|
| India | Digital Personal Data Protection Act, 2023; IT Act, 2000; IT Rules, 2021; CERT-In Directions, 2022 | Consent flows, Grievance Officer, six-hour incident reporting, logs kept in India |
| European Union and EEA | General Data Protection Regulation (GDPR) | Rights requests answered within one month; standard contractual clauses for transfers; 72-hour breach notice; data processing agreement for business customers; EU representative being appointed |
| United Kingdom | UK GDPR, Data Protection Act 2018 and PECR | UK privacy notice; UK transfer safeguards; UK representative being appointed |
| United States | California Consumer Privacy Act as amended (CCPA/CPRA) and other state privacy laws; CAN-SPAM Act; COPPA | California privacy notice; no sale or sharing of personal information; no accounts for children under 13 |
| Canada | PIPEDA; Canada’s Anti-Spam Legislation (CASL) | Rights requests answered; marketing email only with consent and one-click unsubscribe |
| United Arab Emirates | Federal Decree-Law No. 45 of 2021 on Personal Data Protection | Consent, rights requests and breach notice as the law requires |
| Saudi Arabia | Personal Data Protection Law | Consent, rights requests, transfer safeguards and breach notice |
| Qatar, Oman, Bahrain and Kuwait | National personal data protection laws | The same protections as every user; local rules checked as we grow |
| Singapore | Personal Data Protection Act 2012 | Consent, access and correction requests, breach notice |
| Australia | Privacy Act 1988; Spam Act 2003 | Rights requests answered; marketing email only with consent |
| Brazil | Lei Geral de Proteção de Dados (LGPD) | Rights requests answered; transfer safeguards |
| South Africa | Protection of Personal Information Act (POPIA) | South African privacy notice |
| Japan | Act on the Protection of Personal Information (APPI) | Consent for transfers; rights requests answered |
| Sri Lanka, Bangladesh and Nepal | National data protection and IT laws | The same protections as every user; local rules checked as we grow |
| Every other country | Local data protection, consumer, tax and anti-spam laws | The same protections for every user; local law applied wherever it gives you more protection |
How we keep up with the law.
Our legal and policy team reviews new and changed laws every quarter, updates our policies and the apps when a rule changes, and records each change in What’s new. You can reach our Grievance Officer, Ejaz Ahmed, at grievance@indoemail.in, or write to legal@indoemail.in, from any country.
Questions about your country?
Write to us and we will explain how the law of your country applies to your account.