Draft — pending legal review. Our lawyer has not reviewed this document yet, and it may change before MyDomainsHub Mail opens. Questions: hello@mydomainshub.com.
Our two roles
- For your account, we are the controller. We decide how your account details are used, as this notice describes.
- For the emails you send, we are your processor. The people you email are your recipients, not ours: we handle their data only to send your emails and report on them, on your instructions, under the Data Processing Agreement.
Who is responsible
CLOOP UNIVERSE TECH LTD (RC 9771867), trading as MyDomainsHub. For anything about personal data, email hello@mydomainshub.com.
What we hold about account holders
- Your sign-in: email address and name. Your password is handled by our sign-in provider and never stored in readable form.
- Your business: its name, website, what you will send and roughly how much — what we review an account by.
- Your team: the people you add, their email addresses and roles.
- API keys: a hash of each key and its first characters, never the key itself.
- Your account’s security log: keys created or revoked, members added, domains removed — and who did it.
- Payments, once paid plans open: your plan, and each payment’s amount and Flutterwave reference. We never receive card details.
- Technical data: our hosting providers keep standard request logs, including IP addresses, for a short time.
What we hold about your recipients
- Addresses: each email’s from, to, cc, bcc and reply-to addresses.
- The email log: subject, tags, status, times, and the delivery events Amazon reports, with every address struck out of their detail.
- The message itself: body and attachments, held only until it is sent and for 72 hours after.
- Your suppression list: addresses that bounced or complained, why and when, so they are not sent to again.
We never write a recipient’s address, a subject or a message body into our logs, and we keep a message body nowhere but the record that is deleted after 72 hours.
Why we use it
- To run your account and send your email — necessary to perform our contract with you.
- To review accounts, and to stop spam, phishing and abuse — our legitimate interest in protecting recipients, other customers and the service.
- To take payments and keep tax records — contract and legal obligation.
We do not sell personal data or use it for advertising.
How long we keep it
- Message bodies and attachments: 72 hours after the email leaves the queue, then deleted.
- The email log and its events: for the log retention of the account’s plan, shown on the pricing page.
- The suppression list: while the account is open.
- Account details: while the account is open. Payment records: as long as tax law requires.
Who receives it
The companies whose services we use to run Mail — Amazon Web Services for sending, Supabase for our database, and others — are listed, with what each receives and where, on the sub-processors page. We share personal data with authorities only where the law or a court order requires it.
Transfers outside Nigeria
Email is sent through Amazon’s London region and our database is in London, United Kingdom; our website and API are hosted by a company in the United States. We rely on our providers’ data protection terms for these transfers.
Cookies
Only the cookies that keep you signed in (their names start sb-) — none for analytics or advertising. Your light or dark theme is kept in your browser’s own storage, not a cookie.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- give you a copy of your personal data;
- correct it if it is wrong;
- delete it, except what we must keep, such as tax records;
- restrict or object to how we use it;
- give it to you in a form you can take elsewhere.
If you received an email sent through us, the sender holds your data and answers for it: ask them first. If you cannot reach them, email us and we will pass your request on and help them answer it.
Email hello@mydomainshub.com to make a request; we may ask you to confirm who you are. You can also complain to the Nigeria Data Protection Commission (opens in a new tab).
Changes to this notice
We update this notice when what we do with personal data changes; the date at the top shows the current version.