Last updated: 7 August 2026
Scope
This notice supplements the KiTech Software Privacy Policy for Bantay Mail. Bantay Mail is primarily designed for self-hosted operation. In a self-hosted deployment, the organisation or person operating the service will normally determine how personal information is processed and will normally act as the controller.
KITECH SOFTWARE LTD is responsible only for information it receives or controls through a KiTech-operated service, support relationship, website, or other managed arrangement.
Information processed by a Bantay Mail deployment
Depending on configuration and enabled features, a deployment may process:
- Account and directory information: names, usernames, email addresses, aliases, groups, roles, authentication identifiers, and account status.
- Email content: message bodies, subjects, attachments, drafts, sent items, and mailbox folders.
- Email metadata: senders, recipients, timestamps, routing information, delivery state, message identifiers, and protocol headers.
- Authentication and security information: login events, failed authentication attempts, session information, IP addresses, access records, anti-abuse signals, and administrative actions.
- Service configuration: domains, routing rules, quotas, forwarding, retention, filtering, certificates, integration settings, and administrator preferences.
- Operational information: service logs, queue state, delivery reports, diagnostics, backup records, and performance information.
- Support information: correspondence and diagnostic material supplied when an administrator or user requests assistance.
Why information is processed
Information may be processed to:
- provide email delivery, storage, retrieval, authentication, and administration;
- route messages and apply domains, aliases, forwarding, filtering, and mailbox rules;
- protect accounts and infrastructure from spam, malware, abuse, fraud, and unauthorised access;
- maintain audit, diagnostic, backup, recovery, and service-integrity records;
- provide support and resolve operational problems; and
- meet the deployment operator's legal, regulatory, contractual, and retention obligations.
Self-hosted responsibility
The deployment operator normally controls hosting location, administrator access, identity systems, encryption, backups, logs, retention, integrations, and account management. Users should contact that operator for information about the specific deployment.
KiTech Software does not automatically receive mailbox content, credentials, directory information, or logs from a self-hosted deployment. Access may occur only when the operator configures a KiTech-operated service, explicitly supplies information for support, or enters another managed arrangement.
Client and device permissions
A Bantay Mail client may request notifications for new mail and may request access to contacts, files, photos, or device storage when you choose to attach, save, or share information. Permission availability and behaviour depend on the client, operating system, and deployment configuration.
Sharing and service providers
Email is inherently transmitted to recipients, sending and receiving mail servers, network providers, and other parties involved in delivery. A deployment may also use identity, filtering, backup, monitoring, or hosting providers selected by its operator.
Where KiTech Software uses service providers to deliver a managed service or support function, material providers are identified in the Subprocessors notice. KiTech Software does not sell personal information.
Retention and deletion
The deployment operator determines mailbox, log, queue, backup, archive, and account-retention periods unless a separate KiTech-operated service agreement applies. See the Data Retention Policy for company-wide principles.
Instructions for deleting a mailbox or account are available on the Bantay Mail deletion page. Deletion may not immediately remove backups, archives, delivery records, messages retained by recipients, or records that must be preserved by law.
For information controlled by KiTech Software, you do not have to close your account to have specific information deleted. You can request deletion of eligible information on its own through the Privacy Choices page. For a self-hosted deployment, the operator normally controls this instead.
Your rights
For a self-hosted or organisation-managed deployment, contact the deployment operator first. Rights requests concerning information controlled by KiTech Software can be submitted through the Privacy Choices page.
Contact
Privacy questions about KiTech-controlled Bantay Mail information may be sent to hello@kitechsoftware.com.