Privacy Policy

1. Data controller

The data controller is KhoudAi, a sole proprietorship. Contact: info@khoudai.com. Uccle, Brussels, Belgium.

2. Data we process

• Your account data: email address and password (stored in encrypted form).
• Your contacts: the data you import, such as name, email address, company and custom fields.
• Your sequences: the content of the emails you write and their scheduling settings.
• Sending events: sent, delivered, opened, clicked, bounced, replied, unsubscribed — used to show you statistics and stop sequences automatically.
• Minimal technical logs required to operate and secure the service.

3. Purposes and legal bases

• Providing the service (performance of contract): contacts, sequences, scheduling and sending.
• Tracking sends for your account (performance of contract): statistics and automatic stopping rules.
• Security and abuse prevention (legitimate interest): authentication, encrypted secrets, logs.
• Compliance with legal obligations where applicable.

4. Processors and third parties

Sifet relies on a limited set of processors: Resend for email sending and delivery events, and a cloud hosting provider for the database, authentication and application hosting.

We never sell or rent personal data. A current list of processors is available on request at info@khoudai.com.

5. Data retention

• Account and contact data: kept until you delete your account.
• Sending events: kept for the time needed to operate your sequences and statistics, then purged.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to its processing. You may also lodge a complaint with your local data protection authority.

To exercise your rights, write to info@khoudai.com. Regarding the personal data of the contacts you import, you act as the controller of your own mailing campaigns: you are responsible for answering your contacts' requests, and Sifet gives you the tools to delete contacts and honour unsubscribes.

7. Cookies

Sifet only uses cookies that are strictly necessary to keep you signed in. No advertising cookies or third-party trackers are used.

8. Security

API keys and webhook secrets are encrypted at rest on the server and never displayed again after being saved. Access to data is restricted to what is necessary to operate the service.

9. Sign in with Google

If you sign in with Google, Sifet only receives your name, email address and profile picture. This data is used solely to create your account and identify you.

10. Gmail data and warm-up mailboxes

The warm-up module (“Warm an email”) can use personal mailboxes that you connect yourself, with your explicit consent. Sifet only accesses them to: verify the connection, find warm-up emails sent by Sifet, open them, mark them as important or move them out of spam, and reply to them.

Sifet does not read, analyse or store your other emails. Gmail data is never sold, never used for advertising, never transferred to third parties (except where required by law) and never used to train AI models. No human reads it, except with your consent for technical support or for security reasons.

Sifet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Connection credentials are encrypted on the server. You can remove a mailbox at any time in Sifet or revoke access at myaccount.google.com/permissions; its credentials are then deleted.

11. AI-assisted writing

Warm-up emails are written by an AI service based on the topics and context you provide. The content of your mailboxes is not sent to this service.

12. Transfers, minors and changes

• Some processors may process data outside the EU, with appropriate safeguards (standard contractual clauses).
• Sifet is not intended for people under 16.
• We may update this policy; the date at the top shows the latest version.
• Contact: info@khoudai.com.