Privacy Policy

In the following policy, Bahamail refers to the service offered by CiR International (the "Company" or "We") through the bahamail.com website and other applicable domains (collectively the "Service"). This Privacy Policy explains (i) what information we collect through your access and use of our Service (ii) the use we make of such information; and (iii) the security level we provide for protecting such information.

By visiting bahamail.com and using the Services provided here, you consent to the terms outlined in this privacy policy.

Legal Framework

The Company is domiciled in The Commonwealth of The Bahamas but all data storage infrastructure is also located within The United States of America.

Data related to the opening of an account

Any emails provided to Bahamail through either our account creation form are considered personal data.

Such data will only be used to contact you with important notifications about Bahamail, to send you information related to security, to send you information how to access your Bahamail account, to verify your Bahamail account, or to send you password recovery links. We may also inform you about new Bahamail products in which you might have an interest. You are free, at any given time, to opt-out of those features through the means outlines within the communication.

In order to maintain the integrity of the service, Bahamail must take measures to avoid creation of accounts by spammers. This is because if spammers use Bahamail to send messages, Bahamail’s IP addresses can become blocked by major mail providers such as Gmail, Yahoo, Outlook, etc negatively affecting the Service.

In order to prevent the creation of accounts by spam bots or human spammers, Bahamail uses a variety of human verification methods inclusive of manual verification. At times, you may be asked to verify using either reCaptcha, Email, SMS, telephone or through our online support system. IP addresses, email addresses, phone numbers and security questions and answers provided are saved in order to send you verification codes, determine if you are a spammer and to help verify your identity to restore access to your account.

Data Collection

Our company’s overriding policy is to collect as little user information as possible to ensure a completely private and anonymous user experience when using the Service. We also have no technical means to access your encrypted message contents.

Service's user data collection is limited to the following:

Visiting our website: We employ various analytics tools to keep tracks of visitor levels. Analytics are anonymized whenever possible and stored locally (and not on the cloud).

Account creation: We only require a full name, a mobile number and date of birth to help determine you are a real person of age and to aid with account setup and recovery. You may provide other information such as an alternate email address for verification, notification or password recovery purposes. Should you choose to provide any other information, we will associate it with your account (for password recovery, or notifications).

Account activity: Due to limitations of the SMTP protocol, we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, message subject, and message sent and received times. We do NOT have access to encrypted message content but unencrypted messages sent from external providers to Bahamail are scanned for Spam and Viruses for the protection of our users. We also have access to the following records of account activity: number of messages sent, amount of storage space used, total number of messages, last login time. We can also reset passwords but not read them. We can view your initial password/recovery PIN.

Communicating with Bahamail: Your communications with the Company, such as support requests, bug reports, or feature requests may be saved by our staff.

IP Logging: By default, IP logs may be kept by our tracking software. We don't record your login IP address unless this feature is specifically enabled by the user. However, IP logs are sometimes kept by Bahamail to combat abuse and fraud, and your IP address may be retained if you are engaged in activities that breach our terms and conditions (spamming, DDoS attacks against Bahamail infrastructure, brute force attacks, etc).

Native Applications: When you use our native applications, we (or the mobile app platform providers) may collect certain information in addition to the information mentioned elsewhere in this Policy. We may use mobile analytics software (such as fabric.io app statistics and crash reporting, Play Store app statistics, App Store app statistics, or self-hosted Sentry crash reporting) to send crash information to our developers so that we can fix bugs rapidly. Some platforms (such as the Google Play Store or the Apple App Store) may also collect aggregate, anonymous statistics like which type of devices and operating systems that are most commonly used (like percentage of Android 6.x vs Android 7.x), the total number of installs, total number of uninstalls, and the total number of active users, and may be governed by the privacy policy and terms and conditions of the Google Play Store or the Apple App Store. None of the software on our apps will ever access or track any location-based information from your device at any time.

Data Use

Any data that we collect will never be shared except under the circumstances described below in the Data Disclosure Section. We do NOT do any analysis on the limited data we do possess with one exception:

  • Emails sent unencrypted to and from Bahamail accounts are scanned automatically for spam and viruses so we can block IPs which are sending a lot of spam to Bahamail users , place spam messages in a spam directory and prevent viruses and malware from reaching our users. And also so we can detect any users abusing the Service. We do not possess the technical ability to scan messages after they have been encrypted.

Data Storage

All servers used in connection with the provisioning of the Service are located in the United States of America, this may change though as our network evolves. Data can be stored in encrypted formats on our servers. Offline backups may be stored periodically. We do not possess the ability to access any user encrypted message content on either the production servers or in the backups.

Right to Access, Rectification, Erasure, Portability, and right to lodge a complaint

You can request a copy of the information stored for you through our support area. Edits can also be made through support.

If your account has been suspended for a breach of our terms and conditions, and you would like to exercise the rights related to your personal data, you can make a request to our support team.

In case of violation of your rights, you have the right to lodge a complaint to the competent supervisory authority.

Data Retention

When a Bahamail account is closed, data is usually immediately deleted from production servers. Active accounts will have data retained indefinitely. Deleted emails are also permanently deleted from production servers. Deleted data may be retained in our backups for up to 14 days.

Data Disclosure

We will only disclose the limited user data we possess if we receive notice from an appropriate authority within The Commonwealth of The Bahamas. While we may comply with electronically delivered notices (see exceptions below), the disclosed data can only be provided after we have received an original copy of the court order by registered post or in person, and provide a formal response.

If a request is made for encrypted message content that Bahamail does not possess the ability to decrypt, the fully encrypted message content may be turned over. If permitted by law, Bahamail will always contact a user first before any data disclosure. Bahamail may from time to time, contest court orders if there is a public interest in doing so. In such situations, the Company will not comply with the court order until all legal or other remedies have been exhausted. Therefore, not all court orders will lead to data disclosure.

Modifications to Privacy Policy

Bahamail reserves the right to periodically review and change this policy from time to time and we will notify users who have enabled the notification preference about changes to our Privacy Policy. Continued use of the Service will be deemed as acceptance of such changes.

Applicable Law

This Agreement shall be governed in all respects by the laws and constitution of The Commonwealth of The Bahamas.