Roles
When you store personal data in a MailBelo mailbox, you are the controller and MailBelo is the processor for that content. We process it to provide the inbox, keep it secure, and meet law.
DPA
Data processing addendum.
You are the controller of mailbox content. MailBelo is the processor.
Subprocessors
Subprocessors are the infrastructure providers that host the database, object storage, DNS, and payments. We keep access limited to operating the service.
A signed copy
To request a signed copy, email [email protected].
What is processed
Mailbox addresses, message content, contacts, calendar notes, and the DNS records you ask us to check. We process them to run the inbox.
Where it runs
The app and mail server run on our host. The database is DigitalOcean Postgres. DNS is on Cloudflare. Card payments, when configured, go through Stripe.
Safeguards
Transport uses TLS. Outbound mail is signed with SPF, DKIM, and DMARC. Passwords use Argon2id. Staff cannot sign in as a customer.
End of processing
Deleting the account removes its mailboxes. A signed copy of this addendum is available from [email protected].