Privacy policy
Last updated [EFFECTIVE DATE]
This Privacy Policy explains how [COMPANY LEGAL NAME] ("Kamu", "we", "us") handles personal data when you use our service and website.
1. Who we are
Kamu is operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. For privacy questions, contact us at hello@kamu.so.
2. Data we collect
- Account data — your name, email, and login credentials (authentication is handled by our provider; we do not store your password in plain text).
- Product data — the product URL, description, goals, connected channels, and settings you provide so Kamu can do your growth work.
- Billing data — subscription and payment details, processed by Stripe. We do not store full card numbers.
- Prospect data — to run outreach on your behalf, Kamu discovers and stores business-contact information about prospects (e.g. name, work email, company, role, and the public source it was found on). For this data, you are the controller and Kamu is your processor — see our Data processing addendum.
- Usage data — logs of agent actions, activity, and diagnostic/technical data needed to operate and secure the service.
3. How we use data
We use data to provide, operate, secure, and improve the service; to perform the growth work you configure; to process billing; to communicate with you (including digests and service notices); and to comply with legal obligations.
4. Legal bases
Where GDPR applies, we rely on: performance of our contract with you; our legitimate interests in operating and improving the service; your consent where required; and compliance with legal obligations. For outreach to prospects, the lawful basis is determined by you as the controller.
5. Sharing and sub-processors
We share data with the vendors that help us run the service (for example, LLM, email, search, hosting, and billing providers). These are listed on our Sub-processors page. We do not sell personal data. We may disclose data where required by law.
6. International transfers
Some sub-processors are located outside your country. Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses. See the Data processing addendum.
7. Retention
We retain personal data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period, unless a longer retention is required by law. You can ask us to delete prospect data at any time.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact hello@kamu.so. Prospects whose data we process on a customer's behalf should contact that customer (the controller); we will assist them as processor.
9. Cookies
Our website and app use a small number of cookies, described in our Cookie policy.
10. Security
We use technical and organizational measures to protect personal data, including encryption in transit, access controls, and encryption of stored channel credentials. No system is perfectly secure; we cannot guarantee absolute security.
11. Children
The service is not directed to children and is intended for business use only. We do not knowingly collect data from anyone under 18.
12. Changes
We may update this policy from time to time. Material changes will be communicated through the service or by email.
13. Contact
Questions or requests? Email us at hello@kamu.so.