Privacy notice

This notice explains how TechCore Experts ("we") processes personal data when you use MailVora. The operator of this installation must review it against their contracts and the data protection law that applies to them (for example Kenya's Data Protection Act, 2019, or the GDPR).

Roles

For the email that organizations send and receive through the platform, the organization is the data controller and we act as its processor. For console accounts, billing and platform security, we are the controller.

What we process

  • Account data: names, usernames, email addresses, mobile numbers, organization details, roles and security settings.
  • Billing data: billing contact, address, KRA PIN or tax number, invoices, and M-Pesa payment references (phone number and receipt). We never see your M-Pesa PIN or store card numbers.
  • Email data: message metadata (sender, recipients, subject, status, timestamps) and, for a limited retention period, message content needed to deliver and troubleshoot mail. Hosted mailboxes store the mail their owners keep.
  • Security data: IP addresses, sign-in events and audit records.
  • Setup analytics: which device type and email app was chosen during mailbox setup and whether a connection test succeeded. No message content, passwords or device identifiers.

Why

To provide and secure the service, deliver and track email, prevent abuse, issue invoices, meet legal obligations, and support customers.

Retention

Message content is deleted after the retention period configured for the installation; delivery metadata and audit logs are kept for reporting and security. Setup analytics are deleted after 13 months. Account data is kept while the account exists and as required by law.

Sharing and processors

We do not sell personal data. Email is necessarily transmitted to the recipients' mail providers. We use no third-party analytics or advertising trackers on this site. We use these processors only for the purposes stated:

  • PesaTide (Kenya) to collect M-Pesa payments: your phone number, the amount and the invoice reference.
  • Africa's Talking (Kenya) to text verification codes: your mobile number and the code.
  • Google, only if you choose "Continue with Google": we receive your name, email address and a Google account identifier.
  • Have I Been Pwned (Pwned Passwords) to refuse passwords exposed in public breaches. Only the first five characters of an irreversible hash leave our servers; your password is never sent.

Security

See the security page for the technical and organizational measures in place.

Your rights

You can ask to access, correct or delete your personal data, or object to processing, by contacting us at support@techcoreexperts.org. If your mailbox is provided by your employer or school, contact them first: they control that data. In Kenya you may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

Cookies

We use only strictly necessary cookies: a session cookie that keeps you signed in and protects forms. Your colour theme preference is stored in your browser.

Help

Are you sure?