Sub-processors
These are the companies that help us run uMail and may handle your data. We list only the ones we really use. Our Data processing agreement explains the rules.
Always used
These help us run the service for every customer.
| Company | What they do | Data | Location |
|---|---|---|---|
| Server hosting provider | Runs the servers where uMail, your mail and our database are stored. | All data in your account, including mail. | France (EU) |
| Amazon Web Services (AWS) | Delivers some of our outgoing mail. May scan it to find abuse and spam. | Outgoing messages, with sender and recipient addresses. | Region chosen by uMail |
| Cloudflare | Runs a short check that a person, and not a robot, is signing up or booking a meeting. Also answers public lookups when we check your domain. | Your network address and browser details for the check. Domain names for the lookups. | Worldwide network |
Only if you choose it
We use these only when you turn on the feature that needs them.
| Company | What they do | Data | Location |
|---|---|---|---|
| Ethio Telecom (telebirr) | If you pay with telebirr, lets us confirm the payment from its receipt. | The transaction ID of the payment. | Ethiopia |
| links.et | If you pay with telebirr, reads the receipt for us so we can confirm the payment. | The transaction ID of the payment. | Not stated by the provider |
| Polar | Takes card payments in US dollars, if you choose to pay by card. | Company name, email address, plan and invoice amount. Your card details go to Polar only. | Not stated by the provider |
| Lets you sign up and sign in with your Google account, if you choose it. | Your name, email address and Google account ID. | Worldwide network | |
| Google LLC (Google Analytics) | Counts visits to our public website. If our staff turn it on, also receives short product events from our servers, such as sign up or payment. | On the website: the pages opened, device and browser type, approximate location from the network address, and a cookie only if you accept. Product events: event names with scrambled ids. No names, email addresses, company names or mail content. | Worldwide network |
| Cloudflare or Vercel (your domain settings) | If you give us an access token, we add the records your domain needs for email in your account there. | Your access token (stored encrypted), and the domain records we read and add. | Worldwide network |
How we announce changes
When we add or replace a sub-processor that handles customer data, we update this page and tell company owners by email before the change starts. The date at the top shows the latest update. If you object, write to privacy@umail.et. See the Data processing agreement for what happens next.