Privacy Policy

1. Data controller

The data controller is KhoudAi, a sole proprietorship. Contact: info@khoudai.com. [postal address to be completed].

2. Data we process

• Your account data: email address and password (stored in encrypted form).
• Your contacts: the data you import, such as name, email address, company and custom fields.
• Your sequences: the content of the emails you write and their scheduling settings.
• Sending events: sent, delivered, opened, clicked, bounced, replied, unsubscribed — used to show you statistics and stop sequences automatically.
• Minimal technical logs required to operate and secure the service.

3. Purposes and legal bases

• Providing the service (performance of contract): contacts, sequences, scheduling and sending.
• Tracking sends for your account (performance of contract): statistics and automatic stopping rules.
• Security and abuse prevention (legitimate interest): authentication, encrypted secrets, logs.
• Compliance with legal obligations where applicable.

4. Processors and third parties

Sifet relies on a limited set of processors: Resend for email sending and delivery events, and a cloud hosting provider for the database, authentication and application hosting.

We never sell or rent personal data. A current list of processors is available on request at info@khoudai.com.

5. Data retention

• Account and contact data: kept until you delete your account.
• Sending events: kept for the time needed to operate your sequences and statistics, then purged.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to its processing. You may also lodge a complaint with your local data protection authority.

To exercise your rights, write to info@khoudai.com. Regarding the personal data of the contacts you import, you act as the controller of your own mailing campaigns: you are responsible for answering your contacts' requests, and Sifet gives you the tools to delete contacts and honour unsubscribes.

7. Cookies

Sifet only uses cookies that are strictly necessary to keep you signed in. No advertising cookies or third-party trackers are used.

8. Security

API keys and webhook secrets are encrypted at rest on the server and never displayed again after being saved. Access to data is restricted to what is necessary to operate the service.