Delete your Zomail account

Effective date: 2026-10-15 · Version: 2026-10-15

Zomail is business email. A mailbox belongs to the organisation that created it, and deleting it deletes the mail with it, so a mailbox cannot be deleted instantly by its user — one accidental deletion would be impossible to undo. Instead, you request the deletion as described below, and nothing is deleted the moment you ask.

This page applies to Zomail Cloud and to the Zomail apps for iOS and Android (io.zomail.mail), operated by ZoGroup LLC, a Delaware limited liability company. If your mailbox is on a Private Mail server, the organisation that runs that server handles deletion: ask its administrator.

1. If your account belongs to an organisation

In the Zomail app, open Settings → Delete account. Add a reason if you like, and confirm that it is you: with your current password, or with a code from your authenticator app if 2-step verification is on. If your organisation signs you in with single sign-on, sign in again and send the request within 10 minutes.
The request goes to your organisation's owners and administrators by e-mail and appears in their admin console. Your mailbox, and your recovery address if you have confirmed one, receive an e-mail confirming the request, so it cannot be made quietly from a lost phone.
An administrator then deletes the mailbox or declines the request. While the request is open you can withdraw it in the same place in the app.
Without the app: ask your organisation's administrator, who can delete a mailbox at any time in Admin → Users, or write to support@zomail.io from the account's address and we will pass the request to your organisation.

2. If you own the organisation and want to delete all of it

If you are the only owner of an organisation you signed up for yourself, Settings → Delete account in the app (with the same check that it is you) starts the deletion of the whole organisation: every mailbox, domain and file in it.
In any other case — several owners, or an organisation set up for you by a partner or by Zomail — an owner writes to support@zomail.io from the owner's address and names the organisation.
Zomail checks and approves the request. The deletion then runs 14 days after approval. Until then it can be cancelled: write to support@zomail.io.
Before the deletion date, copy out anything you want to keep: mail, calendars and contacts over IMAP, CalDAV and CardDAV, and files from Drive. After the deletion, data cannot be restored.

3. Any other case

Write to support@zomail.io from the address of the account you want deleted, and say which account or organisation it is. If you can no longer send from that address, write from another address and we will verify your identity another way before acting.

To have your personal data erased under data-protection law (the GDPR, Vietnam's Decree 13/2023 and similar laws), write to privacy@zomail.io. Such an erasure is completed within 72 hours, without the grace period, and we send the customer a certificate of erasure. If your account belongs to an organisation, we involve its administrators, because the mailbox is the organisation's record.

4. What is deleted

A mailbox: At once: sign-in stops, the account's devices are signed out and mail to the address is no longer accepted. The mailbox stays in the organisation's trash for 30 days, during which an administrator can restore it. Then it is permanently removed with its mail, calendars, contacts, tasks and Drive files.
An organisation: All of its mailboxes (with everything above), its Drive files, its domains and its workspace records are removed from the live systems.

5. What is kept, and for how long

Encrypted backups: Backups cannot be edited piece by piece. Deleted data disappears from them as they age out, at the latest about 379 days after the deletion. After an erasure under data-protection law, the erased accounts are recorded (as one-way hashes) so that any restore deletes them again before use.
Invoices and payment records: Orders, invoices, receipts and credit notes are kept for as long as accounting and tax law requires (in Vietnam, at least 10 years). They contain the buyer's billing details but no mail content.
Compliance archive and legal hold: If the organisation turned on the compliance archive, archived messages are kept until the retention period it set ends (7 years by default) and, while a legal hold covers them, until the hold is released — even after the mailbox or organisation is deleted. Then they are deleted.
Security audit records: Records of administrative and security actions are kept for 400 days. After an erasure under data-protection law, the account's e-mail address in them is replaced by an anonymous code.
Logs: Server logs: 7 days. Message-trace records: 30 days. Records of messages sent (sender, recipients, subject, delivery status — not the body): 90 days.

6. Timeline at a glance

Request from a member: Waits for the organisation's administrators; nothing is deleted until one of them acts.
Mailbox deleted by an administrator: Restorable for 30 days, then permanently removed.
Organisation deletion: Approved by Zomail, then carried out 14 days later; cancellable until then.
Erasure under data-protection law: Within 72 hours, no grace period.
Backups: Aged out within about 379 days.
Invoices; archive under retention or legal hold: As described above.

7. Contact

Deletion requests and questions: support@zomail.io. Personal-data requests: privacy@zomail.io. More about how we handle data: https://zomail.io/privacy/.