Privacy policy

Who is responsible for your data

Mauricio Zúñiga Cuéllar, NIT 94.060.281-1, Calle 3D # 66 - 47, Cali, Colombia. Contact: kainews@mauroz.xyz.

Customer data (account holders)

When you register we process: name, email, password (stored as an irreversible hash), time zone, language and service-usage data (campaigns sent, plan consumption). Purpose: providing the service, support, billing when applicable and relevant communications.

Our customers' subscriber data

Each customer manages their own subscribers' data (email, name and any fields they choose). For that data it is the customer who answers for it, and Kai News only acts on their instructions: we process it exclusively to execute the sendings and measurements the customer orders; we never use it for our own purposes nor share it across accounts.

Each account keeps its own suppression list: people who unsubscribe, bounce or complain are never contacted again by that account.

Providers we rely on, and transfers

To operate we use providers that process data on our behalf: VPS hosting, where the application and the database run; Resend for email dispatch; and Cloudflare R2 to store the images you upload.

The artificial intelligence features send OpenAI the content you work with: your brand essence, your campaign texts and your conversations with the assistant. Environment research additionally sends Perplexity a summary of your essence and your query, and consults sources on the web.

Payments are processed by the dLocal Go gateway, a product of the company dLocal. When you take out a subscription we pass it your email address and an identifier of your account, and we receive back the email associated with the subscription in order to reconcile it; we do not store your payment method details.

These providers process the data under their own security guarantees and may be located outside Colombia.

Your rights (Habeas Data)

Article 8 of Colombian Law 1581 of 2012 gives you six rights over your data. We list all six because that same law requires us to inform you of them, and because we are not the ones granting them: you have them by law, whether or not we write them here.

(a) To know, update and rectify your data. (b) To ask for proof of the authorization you gave for it to be processed. (c) To ask us to tell you what use we have made of it. (d) To file complaints with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority, if you believe that law has been broken. Write to us first: almost everything gets solved there, and the law also asks you to exhaust that step before going to the SIC (article 16). (e) To withdraw your authorization and ask for your data to be deleted. (f) To access your data free of charge. To exercise any of them, write to us at kainews@mauroz.xyz.

If you are a subscriber of a customer's list you can also use the unsubscribe link in every email; other requests will be channeled to the responsible customer, because you gave that authorization to them and they answer for it. Write to us anyway: we channel it to them, so that prior step is taken without you having to track them down yourself. On our side we keep the date you signed up and the date you confirmed, and we hand those to them whenever they need to prove it.

Security and retention

We apply reasonable measures: TLS in transit, hashed passwords, per-account isolation, daily backups and access controls. We keep data while the account is active; deleting an account removes its operational data except records the law requires us to keep.

Governing law

This policy is governed by Colombian Law 1581 of 2012 and related data-protection rules.