Privacy Policy

Unet is the data controller responsible for the personal data described in this Policy. Where an organization has created business mailboxes for its members, that organization acts as the data controller for its members' account data, and Unet acts as a data processor on the organization's behalf for that data.

We collect the information you provide directly, such as your name, email address, username, and password when you register; the content of your mailbox, including messages, attachments, folders, and contacts ("Customer Content"); technical and log data such as IP address, browser and device information, and authentication and session activity; and, for a custom domain, the domain name and DNS records you configure. If you subscribe to a paid plan, billing information is collected and processed by our payment processor; we do not store full payment card numbers ourselves.

We use the information we collect to provide and maintain the Service, including delivering and storing mail; to authenticate you and secure your account, including two-factor authentication and device/session management; to process billing for paid plans; to respond to support requests; to detect, prevent, and investigate fraud, abuse, and security incidents; to communicate with you about your account and material changes to the Service; and to comply with legal obligations.

We process personal data on the basis of the contract between you and Unet necessary to provide the Service, our legitimate interest in operating, securing, and improving the Service, your consent where we ask for it, and compliance with a legal obligation where applicable.

We use strictly necessary cookies and browser local storage to keep you signed in, remember your language preference, and protect the Service against cross-site request forgery. We do not use third-party advertising or cross-site tracking cookies.

We do not sell personal data or Customer Content. We share information with service providers who host our infrastructure or process payments on our behalf, each bound by confidentiality and data-processing obligations; with another user or organization administrator only to the extent your account is part of that organization; and where required to comply with a valid legal process, such as a court order or lawful government request.

We retain account data and Customer Content for as long as your account is active. When you delete a message or an attachment, or permanently delete it from Trash, it is retained for a limited period to allow recovery on request before being permanently removed. When you close your account, we delete or anonymize your personal data within a reasonable period, except where retention is required to comply with a legal obligation, resolve a dispute, or enforce our agreements.

We use industry-standard safeguards to protect personal data, including encryption of stored credentials, DKIM message signing, and access controls limiting who at Unet can view account data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can access and update most account information directly from your account settings, or contact us at [email protected] to exercise these rights.

Your information may be processed on servers located outside your own country. Where we transfer personal data internationally, we take reasonable steps to ensure it receives an adequate level of protection consistent with this Policy and applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal data from a child under that age. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it.

The Service may contain links to third-party websites or integrate with third-party services that are not owned or controlled by Unet. This Policy does not apply to those third parties, and we encourage you to review their own privacy policies.

We may update this Privacy Policy from time to time. If we make a material change, we will provide notice by email or through an in-app notice before the change takes effect.

If you have questions about this Privacy Policy or wish to exercise a data protection right, contact us at [email protected].