Privacy Policy

Last updated: January 29, 2026

1. Introduction

SendKite ("we," "our," or "us") is operated by Mates Rates Service Pty Ltd. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email marketing platform and services.

By using SendKite, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Password (securely hashed)
  • Profile information you choose to provide

2.2 Social Media Data

Instagram: When you connect your Instagram Business or Creator account, we access:

  • Instagram username and profile picture
  • Instagram bio
  • Follower count
  • Your Instagram posts (images, videos, captions)
  • Post engagement metrics (likes, comments)

Important: We only access Instagram Business or Creator accounts connected through Facebook Login. We do not access personal Instagram accounts.

LinkedIn: When you connect your LinkedIn account, we access:

  • LinkedIn profile name and picture
  • Email address
  • Profile URL
  • Your LinkedIn posts (text, images, videos)
  • Post engagement metrics (likes, comments, shares)

2.3 Contact Lists

When you import or create contact lists, we store:

  • Email addresses of your subscribers
  • Names (if provided)
  • Custom tags and segments
  • Subscription status and preferences

2.4 Usage Data

We automatically collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Email campaign analytics (opens, clicks)

3. How We Use Your Information

We use your information to:

  • Provide and maintain our service
  • Generate AI-powered email campaigns from your Instagram and LinkedIn content
  • Send emails on your behalf to your contact lists
  • Calculate optimal send times based on engagement patterns
  • Extract brand colors and identity from your social media profiles
  • Track email delivery, opens, and clicks
  • Improve our AI algorithms and service quality
  • Communicate with you about your account

4. Third-Party Services

We use the following third-party services that may process your data:

4.1 Google Gemini AI

We use Google Gemini 3 Pro to analyze your social media content and generate email campaigns. Your Instagram/LinkedIn images and text are sent to Google's API for AI processing. Google's privacy policy applies to this data processing.

4.2 Resend (Email Delivery)

We use Resend to deliver emails. Your contact email addresses and email content are processed by Resend. Their privacy policy applies to email delivery.

4.3 Supabase (Database)

Your data is stored securely in Supabase's cloud infrastructure with row-level security policies protecting your information.

4.4 Meta/Facebook (Instagram API)

Instagram data is accessed through Meta's Graph API. Meta's privacy policy governs how they handle your Instagram data.

4.5 LinkedIn API

LinkedIn data is accessed through LinkedIn's API. LinkedIn's privacy policy governs how they handle your LinkedIn data.

5. Data Retention

We retain your data as follows:

  • Account data: Until you delete your account
  • Social media data: Until you disconnect your Instagram or LinkedIn account
  • Email campaign data: For up to 2 years for analytics purposes
  • Contact lists: Until you delete them or your account

6. Data Deletion

You can request deletion of your data at any time:

  • Social media data: Disconnect your Instagram or LinkedIn account in Settings, or we will automatically delete it if you revoke access through the respective platform
  • Account data: Contact us at privacy@sendkite.io to request complete account deletion
  • Contact lists: Delete individual contacts or entire lists from your dashboard

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request data portability
  • Withdraw consent at any time

GDPR (European Users)

If you are in the European Economic Area, you have additional rights under GDPR. Contact us to exercise these rights.

CCPA (California Users)

California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell your personal information.

8. Data Security

We implement security measures including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Row-level security in our database
  • Regular security audits
  • Access controls and authentication

9. Children's Privacy

SendKite is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

For questions about this Privacy Policy or our data practices:

  • Email: privacy@sendkite.io
  • Company: Mates Rates Service Pty Ltd
  • Website: https://sendkite.io