Effective August 1, 2026 · Last updated August 1, 2026
This policy explains how ArawaMail handles personal information when you visit our website, create or use a workspace, access a business mailbox, send transactional email, or communicate with support.
1. Scope and roles
ArawaMail acts as a service provider for organizations that use our platform. A workspace organization generally decides which users, contacts, recipients, and email content are processed. That organization is responsible for its own notices, permissions, and legal basis for using the service.
This policy covers information ArawaMail handles for its own account administration, security, billing, support, and service operation.
2. Information we collect
Account and workspace information
We collect names, email addresses, authentication identifiers, workspace membership, roles, departments, domains, settings, invitations, and profile information.
Email and contact data
To provide the service, we process message headers, sender and recipient addresses, subjects, bodies, attachments, drafts, signatures, contacts, calendar events, invitations, delivery events, and spam preferences.
Transactional and API data
We process API keys in protected form, sending requests, message identifiers, status events, webhooks, provider responses, IP addresses, timestamps, and diagnostic data needed to queue, deliver, retry, and troubleshoot messages.
Billing and support
We process plan, invoice, payment status, usage, and limited transaction information. Payment providers handle payment credentials under their own policies. Support requests may include any information you choose to provide.
Device and usage information
We collect browser and device details, application version, security logs, session information, approximate network location, feature usage, push-notification subscriptions, and crash or performance data.
3. How we use information
- Provide business mailboxes, calendars, contacts, notifications, domain administration, and transactional delivery.
- Authenticate users, manage permissions, and secure accounts and infrastructure.
- Route, queue, deliver, retry, receive, index, and display email.
- Measure usage, enforce plan limits, generate invoices, and process payments.
- Detect spam, abuse, fraud, deliverability risks, and technical failures.
- Provide support, maintain backups, improve features, and communicate service changes.
- Comply with lawful requests and enforce our terms.
4. Cookies and local storage
We use essential browser storage and similar technologies to maintain sessions, remember preferences, support installed-app behavior, and protect accounts. We may use limited analytics to understand service performance. You can control browser storage through your browser, but blocking essential storage may prevent sign-in or other features.
5. How information is shared
We share information only as needed to operate the service, process authorized instructions, protect users, complete a business transaction, or meet legal obligations. We do not sell email content or personal information.
6. Storage and retention
Normal inbox and sent messages remain until a user deletes them, subject to the workspace’s mailbox storage allowance. Transactional message records are retained for the period included in the selected plan: currently 1 day on Free, 7 days on Pro, and 30 days on Business.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant separation, protected credentials, logging, backups, and secure transport where supported.
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Workspace users should first contact their organization’s administrator.
9. International processing
Service providers and recipients may process information in countries other than your own. Where required, we use appropriate contractual or legal measures for these transfers.
10. Children
ArawaMail is a business service and is not directed to children.
11. Changes to this policy
We may update this policy as the service or legal requirements change. We will update the date above and provide additional notice when a change materially affects how personal information is handled.
12. Contact
Privacy questions and requests can be submitted through the support channel available in your ArawaMail account.