JUMBOmail Privacy Policy

Last Updated: 2026-11-06

Introduction

Welcome to JUMBOmail. This Privacy Policy for JUMBOmail Technologies LTD ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services").

Using the Services includes visiting our website at www.jumbomail.me, using our plugins and applications, or otherwise interacting with us.

Reading this Privacy Policy will help you understand your rights and choices. Please note that you are not legally obligated to provide the requested information and its provision is entirely dependent on your willingness and consent. However, the use of our services is conditional on the provision of information and therefore, if you do not agree to our policies and procedures, you will not be able to use our services. Accordingly, the use of our services is conditional on your consent to the processing of information concerning you as detailed in the Privacy Policy below.

Summary of Key Points

This summary provides the key points of our Privacy Policy, but we recommend reading the full document to understand the complete picture.

• What personal information do we process? We process information you provide to us directly (like your email address), information collected automatically (like your IP address), and information we may receive from third parties (e.g., when you log in via social sign-in providers).
• Do we process any sensitive personal information? As a general rule, we do not collect or process sensitive personal information (such as medical information or political opinions). The files you transfer are your sole responsibility.
• What is the legal basis for processing your information? We process your information on a clear legal basis, such as the necessity to perform our contract with you (providing the Service), our legitimate interests, your explicit consent, or a legal obligation.
• Who do we share your information with? We may share information with service providers who assist us in our operations (like storage and payment processing providers), with your organization if you are a Member of a Business Account (see Section 6), and in cases of a legal requirement or court order. We do not sell your personal information to third parties.
• What are your privacy rights? Depending on your location, you have various rights, including the right to access your information, correct it, request its deletion, and object to its processing for certain purposes.
• Business/Organizations Accounts: If you use an organizational account, the administrators of your organization’s account have full access to all your content and activity within the Service. On Enterprise accounts, you may be added to your organization’s Business Account automatically when you sign in with your organization’s email address (see Section 6).

Important Clarification: We want to emphasize that this policy clearly distinguishes between User Content (the files and messages you transfer) and other data (such as usage data or customer support inquiries). We never use the content of your files for the purposes of service improvement or training artificial intelligence models.

Table of Contents

1. What Personal Information Do We Collect?
2. How and Why Do We Process Your Information (The Legal Basis)?
3. Who Do We Share Your Information With?
4. Use of Cookies and Tracking Technologies
5. Use of Artificial Intelligence (AI) Features and Protecting Your Content
6. Business Accounts and User Management
7. Third-Party Integrations
8. International Data Storage and Transfer
9. How Long Do We Keep Your Information?
10. How Do We Keep Your Information Secure?
11. Privacy of Children and Minors
12. What Are Your Privacy Rights?
13. How Can You Exercise Your Rights?
14. Updates to This Policy
15. How to Contact Us

1. What Personal Information Do We Collect?

We collect personal information from three main sources:

1.1. Information You Provide to Us Directly

• Contact and Identification Details: Your name, your email address, and the email addresses of the recipients to whom you send files.
• Account Details: Upon registration (including automatic registration generated when verifying your email address for the purpose of sending files), password, and additional profile details you choose to provide. It is clarified that verifying the email address and performing a send action constitutes the creation of a registered User Account in the system, and details related to this action will be stored in your account accordingly.
• Payment and Billing Information: When you purchase a subscription, billing details and payment method information (which are processed directly by our secure payment processor and not stored on our systems).
• User Content: The files you upload, text messages you attach to transfers, and any accompanying metadata (such as filename and type). When using AI features, this content may be processed ephemerally, as detailed in Section 5.
• Communications with Us: The content of your inquiries to our customer support.

1.1.1. Communications with Customer Support and Call Recording

When you contact our customer support team (by phone, email, or contact form), we collect the information provided in your inquiry. Phone calls with our support center may be recorded for quality control, training, documentation of inquiries, and legal protection purposes. These recordings are stored in a secure environment for a period of up to one year. Written correspondence (email and contact forms) is retained for a period of up to 7 years, in accordance with legal requirements and for legal documentation purposes.

1.2. Information We Collect Automatically

When you use our Services, we automatically collect certain technical information:

• Server Logs and Usage Data: IP address, browser type and version, operating system, time zone, pages you visited, and actions you took within the Service.
• Device Data: Device type (computer, mobile), unique device identifiers (where possible).
• General Geolocation Data: General location (at the country or city level) derived from your IP address.
• Information Collected via Cookies: As detailed in Section 4.

1.3. Information We Receive from Other Sources

We may receive information about you from third parties, such as:

• Sign-In Providers (e.g., Google, Microsoft): If you choose to register or log in using an external account, we will receive basic profile details like your name and email address, according to the permissions you grant.
• Payment Service Providers: We receive confirmation of payment completion, but not your full payment method details.
• Marketing and Analytics Partners: We may receive general demographic or behavioral information to improve our Services and advertising.
• Your Organization: If you are a Member of a Business Account, we receive information from your organization, such as your email address (when you are invited to join), the license type assigned to you, and the Business Account’s settings, including whether automatic association of users by email domain is turned on.

1.4. The Owner of the Information

The company that owns the information collected by us is Jumbomail Technologies Ltd. You can contact us about any matter related to this information by emailing us at legal@jumbomail.me. If you are a Member of a Business Account, your organization decides who in the organization may access your content and activity in the Service and for what purposes, and it is responsible for that access and use (see Section 6).

2. How and Why Do We Process Your Information (The Legal Basis)?

We process your information for specific purposes and based on a valid legal ground, as detailed below:

3. Who Do We Share Your Information With?

We do not sell personal information. We only share information in the following situations and with the parties detailed below:

• Service Providers (Sub-processors): We share information with third-party companies that assist us in operating the Service, such as cloud storage providers, credit card payment processors, email delivery services, and data analysis tools. These providers are contractually obligated to maintain the confidentiality of the information and use it only for the purpose of providing services to us.
• AI Service Providers: To operate certain AI features, we may use the services of trusted third-party providers. In these cases, your content will be transferred for processing under strict contractual obligations of confidentiality, security, and immediate deletion of the information after the action is completed. These providers are obligated not to use your information to train their models or for any purpose other than providing the requested service for you.
• Your Organization (Business Accounts): If you are a Member of a Business Account, the Primary Account Administrator and any user assigned 'Supervisor' or 'Manager' permissions in that account may access your User Content and activity associated with your account, including your license type. License upgrade requests you send are forwarded to the account’s administrators. In addition, at the request of an organization’s authorized representatives, we may share with it the mere fact that an email address on its domain is registered with the Service, as well as aggregated data on the volume of use under that domain, as detailed in Section 6.
• Law Enforcement and Government Bodies: We may disclose information if required by law, court order, or other legal process. When we receive a legal request from a government body for access to a user's information, our policy is to carefully review the legal validity of each request, attempt to narrow the scope of the requested information to the necessary minimum, and notify the user of the request before disclosing information, unless we are prohibited from doing so by law.
• Business Transfers: In the event of a merger, asset acquisition, or sale of the company, your information may be transferred to the acquiring entity as part of the assets.
• With Your Consent: We may share your information with other third parties if you give us your explicit consent to do so.

4. Use of Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services, remember your preferences, analyze site usage, and customize advertising. We request your consent for the use of non-essential cookies via a dedicated banner on our website. For detailed information about the types of cookies we use, their purposes, and how you can manage your preferences, please see our separate Cookie Policy.

5. Use of Artificial Intelligence (AI) Features and Protecting Your Content

At JUMBOmail, we believe in harnessing the power of Artificial Intelligence (AI) to provide you with value, without compromising your privacy and ownership of your content. Our use of AI is based on four foundational principles:

5.1. Active and Explicit Consent (Opt-In)

All AI features in the Service are turned off by default. The processing of User Content via AI will occur only if you actively choose to enable it for a specific file or action. No automatic analysis of your content will run in the background. For example, you will be asked to click a dedicated button like "Create AI Summary" or "Translate this Document" to initiate the action.

5.2. Clear and Immediate Value for You

Every AI feature we add to the Service is designed to provide you with clear and immediate value, not us. The purpose of the processing is always to perform a task you requested, such as: "Scan this presentation and translate it for you into English," not to collect data to improve our global models.

5.3. Data Isolation & Ephemerality

We commit that all AI processing of your content is private, isolated, and ephemeral:

• Isolation: Your content is processed in a secure environment completely isolated from other users.
• Ephemerality: The content is scanned solely for the purpose of performing the requested action. The information derived from the scan, as well as the content itself, are not saved, cataloged, or stored after the action is completed.
• No Use for Training Models: We absolutely commit not to use your content for training our own or third-party AI models.

5.4. Zero Rights Transfer

Using AI features does not grant JUMBOmail any license, ownership, or additional right to your User Content, beyond the limited license required to operate the Service as detailed in the Terms of Service. The content remains yours, in full, always.

5.5. Process Transparency

We strive for transparency. When you choose to use an AI feature, we will explain in simple terms what is about to happen.

5.6. Use of Support and Usage Data for Service Improvement

To improve the efficiency of our customer support, we may use the content of customer support inquiries (after the complete and irreversible removal of all identifying details - anonymization) to create a dataset. This anonymous dataset may be used to train internal AI models, the sole purpose of which is to help provide faster and more accurate answers to future inquiries. This use is based on our legitimate interest to improve the service and does not, in any way, include the files or messages you transfer via the Service.

6. Business Accounts and User Management

This section clarifies the unique privacy aspects for users of an organizational account ("Business Account" or "Organization account").

• Privacy Notice and Content Access in a Business Account: This section constitutes an important notice to all Members of an organizational account. By joining an organizational account in any way, including by accepting an invitation, by using a join link, or by signing in with an email address that is associated with the account through automatic association, you acknowledge, understand, and agree that your User Content, including all files and messages you send or receive through the Service, is not private in relation to that organizational account. The Primary Account Administrator, as well as any user assigned 'Supervisor' or 'Manager' permissions within that organizational account, may access, view, monitor, use, modify, export, and disclose all of your User Content and activity associated with your account. This applies to every Member of a Business Account, whatever license the Member holds, including a Member who holds no license. JUMBOmail is not responsible for the internal management of access to information within an organizational account; the responsibility for this, including notifying employees and obtaining their consent, rests exclusively with the Primary Account Administrator and the organization.
• Use of an Organizational Email and Joining a Business Account: If you registered for the Service using an email address provided to you by an organization (such as your employer), and your organization (including management or information security personnel within the organization) contacts us in order to inquire about organizational use of the platform or to set up a business account, we may share with its authorized representatives the mere fact that your address is registered with the Service, as well as statistical and aggregated data regarding the volume of use performed under that organizational domain (such as total traffic volume or the number of transfers). The purpose of sharing this information is to allow the organization to map its licensing needs. It is clarified and emphasized that this disclosure is limited to aggregated usage volume data and confirmation of account existence only. Under no circumstances will we disclose to the organization information regarding the content of the files you transferred, their names, or specific delivery details, unless you were formally joined to the Business Account in accordance with the aforementioned. Automatic association by email domain, as described below, counts as being formally joined to the Business Account.
• Automatic Association by Email Domain (Enterprise Accounts): The Primary Account Administrator of an Enterprise Business Account may turn on automatic association of users by email domain. This setting is off by default. When it is on, a user who signs in to the Service with an email address on the organization’s domain becomes a Member of the Business Account at that sign-in, and from then on this section applies to that user, including the account administrators’ access to the user’s content and activity. Association happens one user at a time, as each user signs in, and is never applied in bulk. The organization is responsible for informing its employees and obtaining their consent, where required by law.
• Licenses and Activity Data: Each Member of a Business Account holds a Premium License, a Basic License, or no license. To manage licenses, we record your activity in the Service: a Member who holds no license receives a Basic License automatically when performing an action that counts as usage, and the Basic License of a Member who has performed no such action during the Measurement Period (90 days, unless a different period applies to the account) may return to the organization’s license pool without prior notice. The account administrators can see each Member’s license type. If you request an upgrade to a Premium License, the request and your identifying details are forwarded to the account administrators. Further details are in Section 13 of the Terms of Service.

7. Third-Party Integrations

The Service may allow you to connect your JUMBOmail account with third-party applications or services (e.g., Google, Microsoft, PayPal). If you choose to do so, you will grant that third party permission to access and process your information in accordance with that service's own terms and privacy policy. We encourage you to review the privacy policy of any third-party service before connecting it to your account. JUMBOmail is not responsible for how third-party services collect, use, or share your information.

8. International Data Storage and Transfer

We are a global company, and your information is processed in a secure environment using world-leading infrastructure.

• Primary Storage Location: The Service data and the files you upload are primarily stored in secure data centers of Amazon Web Services (AWS) located in Ireland, within the European Economic Area (EEA).
• Data Access and Transfer: To provide you with round-the-clock service and support, JUMBOmail team members or authorized service providers may need to access your information from countries outside the EEA. We ensure that any such data transfer is subject to adequate legal safeguards, such as Standard Contractual Clauses (SCCs), to ensure your information remains protected at the level required by the GDPR.

9. How Long Do We Keep Your Information?

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law.

• User Content (Transferred Files): Permanently deleted after 3-7 days, unless saved by a user with a valid subscription. In the event of subscription termination or cancellation (including due to payment renewal failure), the files will become inaccessible, but may be retained in an isolated internal backup archive for a Grace Period of up to 30 days, to allow for recovery in cases of billing errors or accidental deletion. Following this period, the files will be permanently deleted. For Members of a Business Account, the retention period depends on the license type they hold. Moving a Member from a Premium License to a Basic License permanently deletes that Member’s transfers that are stored for longer than the retention period applicable to Basic Licenses.
• Account Information: Is retained as long as your account is active. After account closure, the information will be deleted or anonymized, except for information we are legally obligated to retain (e.g., billing records for 7 years).
• Historical Records: Records of old transfers may be deleted after a specified period (e.g., one year for unregistered users) for system maintenance purposes. The period of time set for retaining historical records of transfers may be updated from time to time at the Company's discretion and in accordance with legal requirements. For Members holding a Basic License, transfer history is limited to a specified period (e.g., two years).

10. How Do We Keep Your Information Secure?

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include data encryption (at rest and in transit), access controls, and continuous monitoring of our systems. However, no system is 100% secure, and we cannot guarantee absolute security. For more information on our security practices, please visit the JUMBOmail Trust Center.

11. Privacy of Children and Minors

Our Services are not intended for children under the age of 16, and we do not knowingly collect information from them. The purchase of paid services is permitted only for individuals aged 18 and older. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information.

12. What Are Your Privacy Rights?

In accordance with applicable law, you have the following rights regarding your personal information:

• The Right to Access: The right to receive a copy of the personal information we hold about you.
• The Right to Rectification: The right to request the correction of inaccurate or incomplete personal information.
• The Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your personal information in certain circumstances.
• The Right to Restrict Processing: The right to request that we process your personal information in a limited way.
• The Right to Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
• The Right to Object: The right to object to the processing of your personal information in certain circumstances, especially for direct marketing purposes.
• The Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time.

13. How Can You Exercise Your Rights?

The easiest way to exercise your rights is by contacting us via email at: legal@jumbomail.me. Please state the nature of your request clearly. We may ask you for additional information to verify your identity before responding to your request. We will consider and act upon any request in accordance with applicable data protection laws. Additionally, you have the right to lodge a complaint with the Privacy Protection Authority. If you are a Member of a Business Account, requests concerning the organization’s access to your content and activity may be referred to the organization, which is responsible for that access.

14. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a "Last Updated" date and will be effective as soon as it is accessible. If we make material changes, we will notify you either by prominently posting a notice on the website or by sending you an email.

15. How to Contact Us

If you have questions or comments about this policy, you may contact us at: legal@jumbomail.me