Bahari Mail is a business email service run by Avitech Cloud Services, the trading name of Avitech Solutions Ltd, a company registered in Kenya ("Avitech", "we"). This policy explains what we collect when you use Bahari Mail, its webmail at mail.baharimail.com and its apps for Windows, macOS, Linux, Android and iOS, and what we do with it.
The short version
- Your email is stored on Avitech's own servers and network in Kenya.
- We never read your mail to sell advertising, and we never sell your data.
- The Bahari Mail apps contain no advertising, analytics or tracking code. They only talk to our mail server.
What we collect
Account details
Your name, email address and a protected (hashed) form of your password. If your employer or organisation set up your mailbox, they gave us these details.
Your mail, contacts and calendars
The messages, attachments, folders, contacts, calendars and settings you keep in your mailbox. We store them so you can use the service.
Service logs
Technical records such as IP addresses, sign-in times, the mail servers that delivered a message, and delivery results. We use them to run the service, investigate problems and protect accounts against abuse.
How we use it
- To deliver your mail: sending, receiving, storing and showing your messages on your devices.
- To filter spam and malware: incoming messages are checked automatically. When you use "Report spam" or "Not spam", that message is used to train your filter. No person reads your mail for this.
- To keep the service secure: detecting attacks, stolen passwords and abuse.
- To support you: when you contact us, we use what you tell us to help. We look inside a mailbox only when you or your organisation's administrator ask us to, or where the law requires it.
The Bahari Mail apps
- The apps connect only to mail.baharimail.com, over encrypted connections.
- If you choose "Keep me signed in", your sign-in is stored on your device so you don't need to enter it each time. Signing out removes it.
- Attachments are saved to your device only when you choose to save them.
- Links in messages open in your device's own browser.
- The apps do not use advertising, analytics, crash-reporting or tracking services, and do not access your contacts, location, camera or microphone.
Who else is involved
- Your organisation. If your mailbox belongs to your employer or organisation, its administrators can manage your account, and your organisation decides how its mail is kept.
- The people you write to. Mail you send goes to the recipients' mail providers, which handle it under their own policies.
- Cloudflare provides our domain name service and protects our public website. It does not store your mailbox.
- Services you sign in to with Bahari Mail. If you use "Sign in with Bahari Mail" on another service, that service receives your name and email address.
- The authorities, only when Kenyan law requires it.
How long we keep it
Mail stays in your mailbox until you or your administrator delete it. Messages you delete go to Deleted Items first, then are removed permanently. Service logs are kept only as long as needed for security and troubleshooting. When an account is closed, its mailbox and account details are deleted.
Deleting your account
If your organisation provides your mailbox, ask its administrator to close it. Otherwise, email [email protected] from your Bahari Mail address and ask us to delete your account. We'll confirm, then delete the mailbox, its contents and your account details.
Security
Connections to our webmail, apps and mail servers are encrypted. Passwords are stored only in hashed form. Access to our servers is limited to Avitech staff who need it.
Your rights
Under Kenya's Data Protection Act, 2019 you may ask to see the personal data we hold about you, have it corrected or deleted, or object to how we use it. Email [email protected]. If you're not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner of Kenya.
Children
Bahari Mail is a service for businesses and organisations, not for children.
Changes
If we change this policy, we'll update it here and change the effective date above. For significant changes, we'll tell account holders by email.
Contact
Avitech Cloud Services (Avitech Solutions Ltd), Nairobi, Kenya. Email [email protected].