The Company is domiciled in The Commonwealth of The Bahamas but all data storage infrastructure is also located within The United States of America.
Data related to the opening of an account
Any emails provided to Bahamail through either our account creation form are considered personal data.
Such data will only be used to contact you with important notifications about Bahamail, to send you information related to security, to send you information how to access your Bahamail account, to verify your Bahamail account, or to send you password recovery links. We may also inform you about new Bahamail products in which you might have an interest. You are free, at any given time, to opt-out of those features through the means outlines within the communication.
In order to maintain the integrity of the service, Bahamail must take measures to avoid creation of accounts by spammers. This is because if spammers use Bahamail to send messages, Bahamail’s IP addresses can become blocked by major mail providers such as Gmail, Yahoo, Outlook, etc negatively affecting the Service.
In order to prevent the creation of accounts by spam bots or human spammers, Bahamail uses a variety of human verification methods inclusive of manual verification. At times, you may be asked to verify using either reCaptcha, Email, SMS, telephone or through our online support system. IP addresses, email addresses, phone numbers and security questions and answers provided are saved in order to send you verification codes, determine if you are a spammer and to help verify your identity to restore access to your account.
Our company’s overriding policy is to collect as little user information as possible to ensure a completely private and anonymous user experience when using the Service. We also have no technical means to access your encrypted message contents.
Service's user data collection is limited to the following:
Visiting our website: We employ various analytics tools to keep tracks of visitor levels. Analytics are anonymized whenever possible and stored locally (and not on the cloud).
Account creation: We only require a full name, a mobile number and date of birth to help determine you are a real person of age and to aid with account setup and recovery. You may provide other information such as an alternate email address for verification, notification or password recovery purposes. Should you choose to provide any other information, we will associate it with your account (for password recovery, or notifications).
Account activity: Due to limitations of the SMTP protocol, we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, message subject, and message sent and received times. We do NOT have access to encrypted message content but unencrypted messages sent from external providers to Bahamail are scanned for Spam and Viruses for the protection of our users. We also have access to the following records of account activity: number of messages sent, amount of storage space used, total number of messages, last login time. We can also reset passwords but not read them. We can view your initial password/recovery PIN.
Communicating with Bahamail: Your communications with the Company, such as support requests, bug reports, or feature requests may be saved by our staff.
IP Logging: By default, IP logs may be kept by our tracking software. We don't record your login IP address unless this feature is specifically enabled by the user. However, IP logs are sometimes kept by Bahamail to combat abuse and fraud, and your IP address may be retained if you are engaged in activities that breach our terms and conditions (spamming, DDoS attacks against Bahamail infrastructure, brute force attacks, etc).
Any data that we collect will never be shared except under the circumstances described below in the Data Disclosure Section. We do NOT do any analysis on the limited data we do possess with one exception:
- Emails sent unencrypted to and from Bahamail accounts are scanned automatically for spam and viruses so we can block IPs which are sending a lot of spam to Bahamail users , place spam messages in a spam directory and prevent viruses and malware from reaching our users. And also so we can detect any users abusing the Service. We do not possess the technical ability to scan messages after they have been encrypted.
All servers used in connection with the provisioning of the Service are located in the United States of America, this may change though as our network evolves. Data can be stored in encrypted formats on our servers. Offline backups may be stored periodically. We do not possess the ability to access any user encrypted message content on either the production servers or in the backups.
Right to Access, Rectification, Erasure, Portability, and right to lodge a complaint
You can request a copy of the information stored for you through our support area. Edits can also be made through support.
If your account has been suspended for a breach of our terms and conditions, and you would like to exercise the rights related to your personal data, you can make a request to our support team.
In case of violation of your rights, you have the right to lodge a complaint to the competent supervisory authority.
When a Bahamail account is closed, data is usually immediately deleted from production servers. Active accounts will have data retained indefinitely. Deleted emails are also permanently deleted from production servers. Deleted data may be retained in our backups for up to 14 days.
We will only disclose the limited user data we possess if we receive notice from an appropriate authority within The Commonwealth of The Bahamas. While we may comply with electronically delivered notices (see exceptions below), the disclosed data can only be provided after we have received an original copy of the court order by registered post or in person, and provide a formal response.
If a request is made for encrypted message content that Bahamail does not possess the ability to decrypt, the fully encrypted message content may be turned over. If permitted by law, Bahamail will always contact a user first before any data disclosure. Bahamail may from time to time, contest court orders if there is a public interest in doing so. In such situations, the Company will not comply with the court order until all legal or other remedies have been exhausted. Therefore, not all court orders will lead to data disclosure.
This Agreement shall be governed in all respects by the laws and constitution of The Commonwealth of The Bahamas.