RelyPost Privacy Policy

Who is responsible for your information

Digital Shift LLC operates RelyPost. Contact support@relypost.com for questions about this policy or to exercise your privacy rights.

For an organization-provided mailbox, your organization determines who can use the mailbox and how its business records are used and retained. RelyPost processes that mailbox information to provide the service to the organization. We also handle account administration, service security, support and website operations. Your organization’s privacy notice may apply in addition to this policy.

Information we process

Account information includes your name, email address, organization, workspace and mailbox identifiers, access permissions, account settings and authentication records. Administrators can provide account information on your behalf. Authentication uses protected credentials and session information; do not send your password or recovery codes to support.

Email information includes senders, recipients, To/Cc/Bcc addresses, subjects, message bodies, folders, drafts, delivery status and attachments. Attachments can contain photos, videos, audio, documents or other information you choose to send. We also process contacts, calendars, tasks, signatures, domains and other workspace content when you use those web features.

Service and security information includes connection IP addresses, request and delivery records, timestamps, device registration identifiers, app/platform details, authentication events and diagnostic information needed to operate and protect the service. If you enable iOS notifications, we register an Apple push-notification token associated with your account and device.

Support information includes your contact details and the information you choose to include in a request. For paid web services, we process billing contact details, subscription and invoice records and payment status. Payment details are handled through the payment provider used in the checkout flow. The mobile app does not provide in-app purchasing.

Why we use information

We use information to authenticate users, enforce mailbox permissions, deliver and display email, synchronize folders and drafts, process attachments, provide enabled notifications, manage subscriptions, answer support requests and maintain reliable service. We also use relevant records to detect abuse, spam, malware and unauthorized access, investigate delivery problems, resolve disputes and meet applicable legal obligations.

Where data-protection law requires a legal basis, processing depends on the activity: providing a service you request or fulfilling a contract; legitimate interests in operating and securing a business email service; complying with legal obligations; or consent where required. For organization-controlled mailbox data, your organization determines the applicable basis for its use. You can withdraw an optional permission or consent without affecting earlier lawful processing.

RelyPost does not use the mobile app to track you across other companies’ apps or websites for advertising. We do not sell your personal information or use the contents of your business email for targeted advertising.

Who receives information

Messages and attachments are shared with the recipients you select and the email providers involved in delivery. Your organization’s authorized administrators and users with access to a shared mailbox can access information within their permissions. Recipients may keep or forward their own copies; deleting your copy does not remove theirs.

Infrastructure and service providers process information as needed for hosting, databases, file storage, backups, email delivery, payment processing, security and support. Apple processes push-notification delivery information when you enable iOS notifications. We may disclose relevant information when required by law or necessary to address fraud, security incidents or the rights of users and others.

Email delivery and service-provider processing can involve countries other than your own. Your organization or support can provide information about the hosting and transfer arrangements applicable to your workspace. Sending email to a recipient also transfers that message to the recipient’s provider, whose privacy practices apply to its copy.

Information on your device and app permissions

The mobile app stores session information using platform secure storage and encrypts saved mail and device drafts. Recently viewed mail can be available offline; this is a limited cache, not a complete mailbox backup. Cached mail snapshots older than seven days are not used. Device drafts remain available for recovery until removed or cleared by sign-out.

Use Settings → Clear saved mail to remove cached mail while keeping device drafts. Signing out removes saved mail and device drafts from the app and stops local notifications. Files you exported to another app or to Files are outside this cleanup and must be deleted there separately. Local cleanup does not delete your server account or messages.

You choose files, photos or videos to attach through the system picker. If the operating system requests photo-library access for the picker, it is used for selecting email attachments. The app does not require access to your entire photo library to read email. You can manage any granted photo permission in system settings.

New-mail notifications are optional. You can disable them in RelyPost and in your device’s notification settings. Notification previews may be visible on the lock screen depending on your system settings. The mobile app omits remote email images and asks before opening external links; the destination’s privacy policy applies after you leave RelyPost.

Website cookies and visit measurement

The website uses cookies or similar local storage for sign-in, security and preferences such as language, appearance and your analytics choice. Disabling essential storage can prevent sign-in or settings from working.

Our first-party public-page analytics records page paths, broad referral categories, approximate country and visit counts. It derives a daily identifier from connection information; the analytics records do not store raw IP addresses, email content, full referrer URLs or query strings. The identifier changes each UTC day and is not a cross-site advertising identifier.

Public analytics excludes signed-in sessions, recognized automated traffic, Do Not Track and Global Privacy Control signals. You can also disable public-page analytics using Privacy Choices. That preference is stored in a cookie for one year, contains no account identifier and applies to this browser on RelyPost’s public and app subdomains. Repeat the choice on other browsers or after clearing cookies. The analytics datasets are cleaned to remove daily records older than 180 days.

Retention and deletion

Mailbox messages, folders, drafts and attachments are retained to provide the account and according to your organization’s settings and instructions. Moving a message to Trash is not the same as permanently removing it. Account closure, administrator actions and approved deletion requests can remove active records, subject to shared ownership and applicable retention obligations.

There is no single retention period for all service records. We determine retention from the record’s purpose, whether the account or delivery task is active, the organization’s service configuration, security and dispute needs, and applicable legal obligations. Transactional email log content and eligible audit records are cleaned according to the organization’s plan once related delivery and retry work is complete. Billing, security and delivery evidence may outlast the associated message content.

Backup copies and historical file versions follow separate recovery and storage lifecycles, so removal from an active mailbox is not a promise of immediate removal from every backup. Support can explain the schedule and any retained categories applicable to a verified deletion request. Requests may require your organization’s authorization where they concern its business records.

Your choices and rights

Depending on the law that applies to you, you may request access to or a copy of your personal information, correction, deletion, restriction of processing or portability. You may also withdraw consent where processing relies on consent and complain to your local data-protection authority. These rights can be subject to identity verification and legal exceptions.

You may object to processing based on legitimate interests. Send an objection to support@relypost.com and explain the processing concerned. You can independently disable optional notifications and public-page analytics using the controls described in Privacy Choices.

Contact your organization administrator for organization-controlled mailbox records, or contact RelyPost support if you cannot reach the administrator or your request concerns our own processing. Provide your account email and the scope of your request. Do not include passwords, recovery codes or unnecessary message content. We may ask for proportionate information to verify identity and protect other users’ records.

Security, children and policy updates

RelyPost uses access controls, encrypted network connections, protected credentials and encrypted mobile storage to reduce unauthorized access. Email recipients and external email systems are outside our control; RelyPost is not a promise of end-to-end encryption or absolute security.

RelyPost is a business email service and is not directed to children under 13. If you believe a child has provided personal information without appropriate authorization, contact support so the account and circumstances can be reviewed.

We may update this policy as the service or applicable requirements change. The date below identifies the current notice. Material changes will be communicated where required. Contact support@relypost.com for a copy or questions about this notice.