Who we are
DesiMail is a bulk email service for freelancers and small businesses. It is run by DesiMail. In this policy, "we" and "us" mean DesiMail, and "you" means the person reading it, whether you use DesiMail or received an email sent through it.
Your data and your contacts' data
We look after two kinds of personal data, and our role is different for each.
- Your account. Your name, email address and the other details you give us when you sign up. For this data we decide what is collected and why, so we are responsible for it.
- The contacts you upload. The people on your lists belong to you. You decide who to email and why; we store and process their details only to run the service for you. You are responsible for having their permission, and you confirm where each list came from and that its people agreed to hear from you when you import it.
What we collect
- Account details: name, email address, country, time zone, and your password, stored only as a one-way hash we cannot read. If you turn on two-step sign-in, its secret is stored encrypted.
- Business details: your business name and the postal address that every email must carry by law.
- Your contacts: email addresses and any names and tags you import, the source you gave for the list, and your consent confirmation with its date.
- Sending records: which campaigns went to which addresses, and what happened: delivered, bounced, complained or unsubscribed.
- Address check results: whether each address can receive mail, and why. To find out, our checker contacts the recipient's mail server and asks whether the mailbox exists. No email is sent.
- Payments: the amount, date, plan and payment reference. Card payments are handled by Paystack; we never see or store your card number.
- Support: the tickets you open and the files you attach.
- Security records: sign-in times and IP addresses, and a log of important actions in your account, such as who sent a campaign or deleted a list.
- Messages from our contact form: your name, email and message, emailed to our support team. The website does not keep a copy.
How we use it
- To run DesiMail for you: check addresses, send your campaigns and show you the results.
- To keep the service safe: hold back risky addresses, stop sending to anyone who unsubscribed or complained, and find and stop abuse.
- To bill you and keep the records the law requires.
- To answer your questions and tell you about your account, such as a plan ending or sending being paused.
We do not sell personal data, rent out lists, or use your contacts for anything other than sending your own campaigns.
Cookies and tracking
DesiMail uses only the cookies it needs to work: one that keeps you signed in, one that protects forms from forgery, and an optional "remember me" cookie. Your light or dark mode choice is kept in your browser's storage. There are no advertising or analytics cookies.
At the moment, emails sent through DesiMail do not track opens or clicks. If that changes, this page will say so before it starts.
Where data is processed
Emails are sent through Amazon SES in the European Union (Ireland), so contact details pass outside Nigeria when a campaign is sent. Our other providers may process data in other countries too. Where data leaves Nigeria, it is covered by each provider's data protection terms.
How long we keep it
- Uploaded import files and exports: deleted after 30 days.
- Detailed answers from mail servers when we check an address: kept for 90 days, then reduced to the result and the reason.
- Contacts and lists you delete: gone from your account at once, and removed for good within 30 days.
- When an account is closed: its contacts, lists, templates and campaigns are deleted 30 days later.
- Security and activity logs: 12 months.
- Payment records: as long as tax and accounting law requires.
- Unsubscribes and complaints: kept for good, so that address is never emailed through DesiMail again, even after the account that sent to it is closed.
How we protect it
Everything travels over encrypted connections. Passwords are hashed, and two-step sign-in secrets and API keys are encrypted. Every account's data is kept apart from every other account's, and our own team's access is limited and recorded. Account owners must turn on two-step sign-in before their first send.
If a breach ever puts your data at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
Your rights
Under the Nigeria Data Protection Act 2023, and the GDPR where it applies to you, you can ask to:
- see the personal data we hold about you, and get a copy;
- correct it if it is wrong;
- delete it, or close your account;
- object to how we use it, or withdraw consent you gave.
Account owners can export their contacts and reports, and delete contacts, lists or the whole account, from inside DesiMail. For anything else, write to us. We answer within 30 days. You can also complain to the Nigeria Data Protection Commission.
If you are on one of our customers' lists, please contact that sender first, since they control their list. We will help if you cannot reach them.
If you got an email through DesiMail
DesiMail sends email on behalf of our customers, from their own domains. Every email has an unsubscribe link. One click is enough: the address is added to a shared list, and no one sending through DesiMail can email it again.
If an email looks like spam or a scam, or you never agreed to receive it, tell us at support@desimail.live. We look into every report, and we pause or close accounts that send unwanted mail.
Children
DesiMail is for businesses. You must be 18 or older to open an account, and we do not knowingly collect children's data.
Changes to this policy
When this policy changes, we update the date at the top. If a change affects how we use your data, we email account owners before it takes effect.
Contact us
Questions about privacy, or a request about your data: write to support@desimail.live, or use the contact form.