Privacy policy

1. Data we collect

Account and profile

• Name, username, gender, date of birth (if provided)
• @ivspost.com address and optional alternate email
• Mobile number (for verification where used)
• Country / location preference and timezone
• Password (stored only as a secure hash — never plain text)

Mail and usage

• Messages you send and receive (to, from, subject, body, attachments metadata)
• Sign-in times, session tokens, and basic security logs
• Business order details if you purchase business mail

Technical

• Browser type, approximate region (for login country / weather if you allow it)
• Local storage on your device (for example login country preference)

2. How we use data

• Create and manage your account and inbox
• Deliver internal mail and route external mail through our providers
• Verify your phone number when SMS is enabled
• Prevent abuse, spam, and fraud; enforce our Terms of use
• Improve reliability and support (including superadmin operations)
• Comply with legal obligations

We do not sell your personal data to advertisers.

3. Third-party services

We use trusted providers to run IVSPost. They process data only as needed to provide their service:

• Hosting — secure cloud infrastructure for the website, database, and file storage
• Outbound email — licensed email delivery partners (for example Gmail, Outlook, and other external addresses)
• SMS verification — licensed SMS partners where phone one-time codes are used
• Weather — public weather data for the home page widget (city lookup only)
• News headlines — public news feeds (headlines only; no personal data sent)

Each provider has its own privacy policy and may process data in other countries.

4. Storage and retention

Data is stored on secure servers (including persistent volumes on our host). We keep account and mail data while your account is active. After closure or deletion request, we remove or anonymise data within a reasonable period, except where law requires longer retention (for example abuse investigations or billing records).

5. Cookies and local storage

We use session tokens and browser local storage (for example your chosen login country) to make the site work. We do not use third-party advertising cookies on core mail pages. You can clear site data in your browser settings; you may need to sign in again.

6. International users

IVSPost is available globally, but our data controller is in India and this policy is governed by Indian law (see section 12). Your data may also be processed where our providers operate (for example the United States or European Union). We take steps to protect data regardless of location.

7. Your rights

Depending on your country, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your account and associated data
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Lodge a complaint with your local data protection authority

To exercise these rights, email mail@ivspost.com from your registered address or alternate email on file.

8. Children

IVSPost is not directed at children under 13 (or under 16 in some countries). We do not knowingly collect data from children. Contact us if you believe a child has created an account.

9. Security

We use HTTPS, hashed passwords, access controls, and provider security practices. No method of transmission or storage is 100% secure; please use a strong unique password and report suspected breaches promptly.

10. Changes

We may update this policy. The “Last updated” date at the top will change. Continued use after changes means you accept the updated policy where permitted by law.

11. Contact

Privacy questions and requests — contact the data controller:

12. Governing law (India only)

This privacy policy is governed by the laws of the Republic of India. Disputes relating to privacy are subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu, India, unless Indian law requires otherwise.