Privacy Policy

1. Our Core Privacy Commitment

Lipiyo provides multi-tenant business email hosting and communication software. Unlike free consumer email providers, we do not scan your emails for advertising, build tracking profiles, or sell your communications to third parties. You pay for our software infrastructure; your data remains exclusively yours.

2. Information We Collect

• Account Information: Administrator names, business email addresses, organization titles, and encrypted credentials.
• Domain Ownership Records: Domain names added to your workspace, DNS challenge tokens, and verification status.
• Email Communications: Message metadata (sender, recipients, timestamps, subject lines) and message contents stored in isolated mailbox directories solely to deliver and present mail to your authorized users.
• System Logs: IP addresses, user-agent strings, and diagnostic timestamps recorded to maintain server uptime, investigate delivery failures, and prevent unauthorized intrusion.

3. Data Security & Encryption

All email in transit is encrypted using mandatory Transport Layer Security (TLS 1.3 / TLS 1.2). Outbound emails are cryptographically signed using DKIM keys. User passwords are never stored in plaintext and are salted and hashed using industry-standard PBKDF2 algorithms.

4. Data Retention & Deletion

When you delete a mailbox, domain, or organization, all associated messages, aliases, and DNS records are scheduled for permanent deletion from our active storage clusters within 30 days. You may request immediate data purging by contacting our compliance department.

5. Contact Information

For privacy inquiries or compliance requests, contact our Data Protection Team at privacy@lipiyo.com.