Trust and data handling

Last updated: October 18, 2026

Where Velto Mail, operated by Velto Corp., keeps your email, who can see it, and how it is protected, as the service runs today.

Where your email lives

Your messages, attachments, folders, calendars and contacts are stored on a dedicated server in Québec, Canada. Velto runs that server and its mail software (Stalwart) itself.

Account and billing records and backups are also kept in Canada. Velto Corp. is based in New Brunswick, Canada.

Who can see it

• You, and the people you give mailboxes or admin rights to.
• Velto staff do not read customer mail. Staff access to systems holding customer data is used only to run the service (delivery problems, restores, abuse reports). Access is limited to named operations staff, is logged, and is reviewed.
• Spam filtering is automatic; no person reads your mail to do it.
• Authorities, only as described under “Law-enforcement requests” below.

Sub-processors

Each handles only what is listed.

The dashboard has no analytics and no third-party scripts.

Security measures

• Encrypted connections (TLS) between your devices and Velto, and with other mail servers that support it.
• SPF, DKIM and DMARC on every customer domain.
• Two-factor sign-in for everyone at no extra cost, with an authenticator app and one-time recovery codes.
• Database row-level security: each account can reach only its own records.
• No tracking pixels or link rewriting on your mail, ever.
• Abuse controls: daily sending limits, bounce and complaint tracking per mailbox, automatic sending pause.

Backups and recovery

Every night, mail and the account database are backed up to Backblaze in Canada East. Backups are encrypted on our own server (with restic) before they leave it, so Backblaze stores them but cannot read them.

Mail backups are locked against deletion for 30 days. Database backups (account records, not mail) are kept up to 90 days.

We last tested a restore in October 2026.

Retention and deletion

• You can cancel any mailbox yourself. It keeps working until its paid period ends.
• Its mail is then kept 30 days (Compliance plan: 90 days), exportable throughout, and then permanently deleted.
• Backup copies of that mail expire within a further 30 days.
• A removed domain’s mailboxes stay read-only for 30 days for export, then are deleted.
• Billing records are kept as long as tax law requires.

Export and leaving

Export any mailbox at any time, at no charge and without contacting us. Your domain stays yours: to leave, point its mail records at your new provider.

Law-enforcement requests

• We disclose customer data only under a valid Canadian court order or warrant.
• Authorities outside Canada must go through Canadian legal process, such as a mutual legal assistance treaty.
• We tell you before we disclose anything, unless the law or a court forbids it.
• In an emergency where someone’s life is at risk, we may disclose only where Canadian law permits.
• We will publish a transparency report each year.
• This policy covers requests made to Velto. Sub-processors answer requests made to them under their own policies and laws.

Certifications

Velto holds no SOC 2, ISO 27001 or other security certification. Instead, we publish this page and our sub-processor list, and we will publish a transparency report each year.

Known limitations

• Microsoft’s “new Outlook” for Windows syncs other providers’ accounts through Microsoft’s cloud, so mail read that way leaves Velto’s control. On the Compliance plan, use classic Outlook, Thunderbird, Apple Mail or the Velto app.
• Mail in transit. Email you send is stored by the recipient’s provider; mail you receive passes through the sender’s provider first. Encryption between mail servers depends on the other server supporting it.
• New-mail notifications on installed devices are encrypted so that Apple, Google or Microsoft push services cannot read them; they carry only the sender and subject.
• No end-to-end encryption. Velto encrypts connections and stored data, but our servers can process your mail, which is what makes search, spam filtering, webmail, migration and litigation hold work, and lets Outlook and Apple Mail connect. If you need end-to-end encryption, a provider such as Proton is the better fit.
• No device management. Velto does not manage or wipe phones and computers. If a device is lost, tell us and we sign it out of your mailbox; a one-click revoke in the dashboard is on the way.

Report a security issue

Email security@veltomail.com with steps to reproduce. Please allow reasonable time for a fix before disclosing, don’t access others’ data, and don’t disrupt the service or send mail.

Spam or phishing from a Velto address: abuse@veltomail.com. Privacy questions: privacy@veltomail.com.

Changes to this page

We date every change below. We email account owners before adding or replacing a sub-processor.

• October 18, 2026: entity updated to Velto Corp.; staff-access wording; footer address moved to the legal pages.
• October 18, 2026: added what Velto does not offer (end-to-end encryption, device management).
• October 17, 2026: first version.