Email Providers · Email Provider (business-focused) · No confirmed finding (unverified, not clean)
Zoho Mail
Headline
Nothing confirmed
Zoho's distinguishing structural feature is that it is privately held and India-headquartered with substantial US operations, and it states that it does not run an advertising business - which removes the single…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
What this pass recorded. Nothing confirmed this pass. Zoho's distinguishing structural feature is that it is privately held and India-headquartered with substantial US operations, and it states that it does not run an advertising business - which removes the single largest incentive for content scanning that shapes the free webmail tier. Zoho Mail is also frequently used by small businesses for custom-domain email, which puts it in scope for this tracker's small-business mission in a way most consumer webmail is not. Recommend a follow-up on which jurisdiction governs data for US business customers and on India's DPDP Act as it takes effect.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
Not independently confirmed this pass with a specific named lawsuit or breach; Zoho Mail is generally positioned favorably in independent privacy comparisons — an AD-FREE interface, support for S/MIME message encryption plus SSL/TLS in transit, and a company (Zoho Corporation, headquartered in India, self-funded/no outside VC investment) that markets itself specifically to fields like journalism, healthcare, and activism where confidentiality matters. Some reviewers note Zoho's free tier lacks native end-to-end (client-side) encryption, unlike ProtonMail/Tuta — a real distinction between 'privacy-friendly for a business tool' and 'zero-knowledge encrypted' as a marketing claim.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy zoho.com/privacy.html | Not fetched yet | NO (HTML only) |
| Terms of service zoho.com/mail/tou.html | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.