Data processing agreement
This agreement explains how uMail handles personal data for business customers. It applies automatically as part of our Terms of service. You do not need to sign anything.
1. Roles
For the personal data in your mailboxes, your company is the “controller”. This means your company decides why and how the data is used. uSolve (“uMail”, “we”) is the “processor”. This means we handle the data for your company, and only as described here.
For the data we need to run your account and bill you, such as owner names and payment records, we act for ourselves. That is explained in our Privacy policy.
2. What data and whose data
- Mail content: messages, attachments, folders and drafts.
- Contacts, calendar events and team work, such as who an email is assigned to.
- Account data: names, email addresses, roles, settings and a protected form of passwords.
The data belongs to your company’s users and to the people who write to them. We store it, deliver it, scan it for spam and viruses, and delete it. We do nothing else with it.
3. Your instructions
We handle this data only on your written instructions. The Terms of service, this agreement, and what you and your administrators do in uMail are your instructions. If we think an instruction breaks the law, we will tell you.
4. Our staff
Only staff who need access to do their work can reach customer data. They must keep it confidential. This duty continues after they stop working for us.
5. Security
We protect the data with the measures described on our Security page. We may improve them over time, but we will not make them weaker in a way that puts your data at risk.
6. Sub-processors
You agree that we may use the companies listed on our Sub-processors page. We have a contract with each of them that requires them to protect the data. If we add or replace a sub-processor that handles your data, we will update that page and tell company owners before the change starts. If you object for a good reason, write to us. If we cannot find a solution, you may close your account.
7. Requests from people
People may ask to see, correct, export or delete their data. If such a request reaches us for data you control, we will pass it to you quickly and we will not answer it ourselves unless you ask us to. We give you tools to export and delete mail, and we will help you with reasonable requests.
8. Data breach
If we learn that personal data we handle for you was lost, stolen or seen by someone who should not see it, we will tell the company owner without undue delay. We will say what we know, what we are doing about it, and what you can do.
9. End of service
After a company account is closed, you have 30 days to ask for an export of your mail. After that period we delete the mail and account data, within 30 days. This is the same as in our Terms of service and Privacy policy. We may keep data longer only where the law requires it, for example accounting records.
10. Checks and information
On reasonable request, we will give you the information you need to check that we follow this agreement. If you need more, for example because a regulator asks, we will work with you in good faith. Please give us notice, and do not disturb our service or the data of other customers.
11. Law and changes
This agreement follows the laws of Ethiopia, including the Personal Data Protection Proclamation No. 1321/2024 where it applies. Courts of Ethiopia decide disputes, as in the Terms of service. If we make an important change to this agreement, we will tell company owners before it starts.
12. Contact
Questions about this agreement: privacy@umail.et. uSolve, Addis Ababa, Ethiopia.