Privacy

The short version

Your mail is yours. We keep it so we can deliver it to you, we don’t sell it, and we don’t read it unless the law requires us to or you ask us to help with a specific problem.

• Your mail is stored outside Ethiopia today, on the providers listed below.
• No AI reads your mail. Ferry AI isn’t switched on yet.
• Automatic backups aren’t in place yet, so keep your own copy of anything important.

What we collect

• Account details: your name, email address, a hashed password, and your two-factor and passkey details.
• Workspace details: company name, domains, users and roles, and any TIN or billing email you add.
• Mail content: messages, attachments, folders and the data needed to search them.
• Billing records: your plan, payment history and invoices.
• Technical records: IP address and browser details on sign-in, and server logs needed to run and secure the service.

Where your data is stored

Ferry is hosted outside Ethiopia today. We plan to move to TeleCloud in Ethiopia before launch and will update this page when that happens.

• Amazon Web Services, Frankfurt, Germany: the application, the database, and mail metadata such as accounts, folders, flags and the search index.
• Cloudflare R2: message bodies and attachments.
• Cloudflare: DNS and web traffic in front of our sites.
• Outbound relay servers: mail you send to other providers passes through a relay server on its way out. Today that’s a TeleCloud server in Ethiopia.

How we use it

We use your data to run Ferry: to deliver and store mail, sign you in, filter spam, send system emails such as password resets and receipts, stop abuse, and bill you.

We don’t sell your data and we don’t use your mail for advertising.

AI

Ferry AI isn’t active. Mail is not sent to any AI provider. Before that changes we’ll update this page, and workspace admins will be able to turn AI off. Your mail will never be used to train models.

Who else sees it

The providers above host the service for us. If you use Google sign-in, Google shares your name and email with us. Your workspace admins can manage your mailbox, including resetting its password. We’ll share data with authorities only when Ethiopian or other applicable law requires it.

How we protect it

Connections use TLS. Stored message bodies and attachments are encrypted at rest by our storage provider. Passwords are hashed, API keys are stored hashed, and two-factor sign-in and passkeys are available on every account. No system is perfectly secure, and we’ll tell affected customers if a breach puts their data at risk.

Cookies

The apps use a sign-in cookie. This website remembers your language in a cookie and your theme in your browser. We don’t use advertising or analytics cookies on this site.

How long we keep it

We keep your data while your account is active. Send API logs are kept for the period your plan lists. If you delete your workspace or ask us to, we’ll delete your data, except records we must keep by law, such as invoices.

Your choices

You can see and change most of your data in Ferry, and download your mail with any IMAP mail app. To ask for a copy of your data, a correction or deletion, write to us. If your mailbox belongs to a company, its admin may need to make the request.

Changes

We’ll update the date at the top when this page changes, and tell workspace owners by email about changes that matter.