Privacy Policy

At Sangi Mail, a product of Tech Sangi, we prioritize the security and confidentiality of your communication infrastructure data. This Privacy Policy details how we collect, store, handle, and secure information related to your user account and email payloads.

1. Information We Collect

We collect information essential to providing reliable, secure email delivery and workspace collaboration services:

• Account Credentials: Email address, cryptographically hashed passwords, and session data.
• Organization Details: Custom brand domain verification records (SPF, DKIM, DMARC), team member lists, and active mailboxes.
• Audit Logging: Logs tracking administrative actions, domain updates, login history, and API key utilization.

2. Email Content & Data Security

Because Sangi Mail is an email infrastructure plane, we process email payloads, inbound webhooks, and SMTP transfers. We do not inspect, index, or use email contents for advertising, marketing, or profiling. Inbound and outbound emails are stored securely and encrypted in transport (TLS) and at rest.

3. API Security & Session Isolation

We implement industry-grade cryptographic HMAC tokens for user sessions to prevent cross-account leakage. Multi-factor email verification codes are generated dynamically and stored with secure expiration windows.

4. Data Audits and Retention

Administrative activity logs within the Sangi Mail panel are retained to provide full visibility to workspace administrators. Users can request deletion of their organization data and domains, which will purge the corresponding records from our system database subject to legal retention compliance.

5. Contact and Inquiries

If you have any questions or data concerns, contact the Tech Sangi infrastructure team at support@techsangi.com.np.