This policy covers Nefisa Mail, Nefisa Helpdesk, Nefisa CRM, this website and your Nefisa account. It is written to be read, not skimmed past.
The short version: we collect what we need to run the service and bill you, we do not sell your data, and you can ask us to access or delete it.
1.Who this applies to
This policy applies to everyone who visits our website or uses a Nefisa service. By using Nefisa you agree to how we handle data as described here.
Where you use Nefisa to store information about other people, such as your customers' emails or the contacts in your CRM, you decide what goes in. In that case you are responsible for having a lawful reason to hold that data, and we process it on your behalf.
2.What we collect
- Account details
- Your name, email address, company name, billing address and the contact details you give us when you sign up or edit your profile.
- Usage data
- Log files, IP addresses, browser and device type, and how you use the website, webmail and dashboard.
- Service data
- What the services need to work: email routing and delivery status, message headers, DNS records for your domains, and the records you store in Helpdesk and CRM.
- Payment data
- Your plan, payment history and billing details. Card payments are handled by our payment processor, Stripe. We never see or store your full card number.
3.How we use it
- To create your account, run the services you pay for and take payment.
- To keep the service secure: detecting fraud, spam, abuse and break-in attempts.
- To maintain and improve performance and fix problems.
- To contact you about the service: receipts, security alerts, important changes and replies to support requests.
We do not use the content of your email, tickets or CRM records for advertising, and we do not build marketing profiles from it.
4.How we protect it
- Connections to our websites and mail servers are encrypted with TLS.
- Stored data is protected with disk-level encryption and access controls.
- Each Helpdesk and CRM customer has a separate workspace, isolated from other customers.
- You can turn on two-step sign-in for your Nefisa account and for each product.
- Repeated failed sign-ins to our mail servers are blocked automatically.
No system is completely secure. If we find a breach that affects your data, we will tell you without undue delay.
6.Your rights
Depending on where you live, you may have the right to:
- Ask what personal data we hold about you and get a copy.
- Have inaccurate data corrected.
- Ask us to delete your data, or restrict or object to how we use it.
- Receive your data in a portable format.
To use any of these rights, email privacy@nefisa.co from the address on your account. We reply within 30 days. We may need to confirm who you are first.
8.How long we keep data
We keep your data while your account is active. After your final paid term ends, mailboxes, workspaces and the data in them may be permanently deleted within 30 days.
We keep some records for longer where the law requires it or where we need them to resolve a dispute or enforce our agreements, for example invoices and payment records.
9.Children
Nefisa is for businesses and adults. It is not intended for children under 13, or under 16 where local law sets that age. We do not knowingly collect data from children, and we delete it if we learn that we have.
10.International transfers
Your data may be processed on servers outside your country. By using Nefisa you accept those transfers. Wherever the data is, we handle it under this policy.
11.Changes to this policy
If we change this policy we will update the date at the top of this page, and for significant changes we will also email account owners. Continuing to use Nefisa after a change means you accept it.