Privacy Policy

Last Updated: October 2026

1. Introduction & Scope

Welcome to DESA Mail ("we," "our," or "us"), owned and operated by Desa Solutions India Pvt. Ltd. This Privacy Policy details how we collect, store, safeguard, and process information across our email marketing platform, webmail infrastructure, and API services.

Because our core infrastructure involves processing campaigns and recipient lists on your behalf, we distinguish between data we collect about you (the Account Holder) and data you upload regarding your subscribers (the End Users). We act as a Data Controller for Account Holder data and as a Data Processor for End User data under applicable GDPR and Indian digital data protection standards.

2. Information We Collect

A. Account & Billing Data: When registering, we collect your name, business name, work email address, phone number, GSTIN, and billing records.

B. Subscriber & Campaign Content: Contact lists (names, email addresses, custom demographic attributes) and email template HTML/text provided for dispatch. We strictly never sell, trade, or monetize your contact lists.

C. Telemetry & Delivery Analytics: Automated dispatch logs, open tracking pixels, click links, IP addresses, bounce codes, and user-agent information necessary to generate real-time campaign performance analytics.

3. How We Use Your Information

  • Service Execution: Routing emails via Postal MTA clusters, maintaining inbox synchronization, and executing API triggers.
  • Security & Abuse Prevention: Enforcing strict anti-spam policies, quarantining bad sender domains, and validating DNS records.
  • Invoicing & Taxes: Processing payments via PhonePe / Razorpay and issuing GST-compliant invoices.
  • AI Feature Optimization: Utilizing prompt history anonymously to improve DESA Bot Pro suggestion accuracy (customer data is never shared with public model training sets).

4. Infrastructure & Sub-Processors

To ensure high availability and 99.8% delivery placement, we utilize ISO 27001-certified data centers, dedicated Postal MTA clusters, and secure transit gateways. All sub-processors are bound by strict Data Processing Agreements (DPAs) and confidentiality covenants.

5. Data Security & Retention

We implement end-to-end SSL/TLS encryption for all in-transit communications and AES-256 encryption at rest. Subscriber lists remain your property and can be exported or purged from our systems at any time.

6. Your Privacy Rights

You maintain the right to access, rectify, or erase your account information. For inquiries regarding our privacy standards or to exercise your data rights, contact our Data Protection Officer at privacy@desamail.com.