Privacy policy

Last updated 13 October 2026.

Followkite is a web app for email outreach and transactional email, operated by Shahab Uddin. This page explains what we collect, why, and what you can ask us to do with it. Questions: support@followkite.com.

Two kinds of data

• Your account data. We decide how it is used, as the controller.
• Data you put into a workspace (contacts, campaigns, messages and the people your app emails). You decide how it is used; we process it only to run the service for you, as your processor.

What we collect

Account

• Your email address and a salted hash of your password (never the password itself).
• If you turn on two-factor sign-in, its secret, stored encrypted.
• Sign-in sessions, and an activity log of important actions in your workspace (for example sign-ins, setting changes and campaign launches).
• Your plan and billing status. Card details go to our payment provider and are never stored by Followkite.

Workspace content

• Contacts you import or add, and the campaigns and templates you write.
• For inboxes you connect: the access tokens or mailbox passwords, stored encrypted. For each received message we keep the sender, subject and a short preview, so replies can be detected and shown in the Unibox. Full messages are loaded from your mailbox when you open them.
• If you turn on open or click tracking for a campaign or a transactional email: whether and when the email was opened or a link was clicked. Tracking is off unless you choose it.
• Transactional email: the message, its recipient and its delivery events. Message bodies are deleted after 3 days and the rest of the record after 30 days.

Cookies

One cookie, fk_session, keeps you signed in. It is HttpOnly and set only after you sign in. Followkite uses no advertising or analytics cookies.

Why we use it

• To provide the service you signed up for: sending, receiving and reporting on email, and keeping your account secure.
• To protect senders and recipients: we monitor bounce and spam complaint rates, and pause or suspend sending that breaks our terms.
• To email you about your account: verification, password resets, security notices and billing. We do not send you marketing without your consent.

We do not sell personal data, and we do not use your workspace content to train models or for advertising.

Who processes it for us

• Cloudflare: hosting, database and file storage.
• Amazon Web Services (Amazon SES): delivery of transactional email sent through Followkite sending.
• Google and other mailbox providers: only for inboxes you connect, under the permissions you grant.
• Our payment provider: payments and invoices, when online payments are enabled.

These providers may process data outside your country. Each is bound to use it only to provide its service to us.

How long we keep it

• Account and workspace data: while your account is open.
• Transactional email: bodies 3 days, records 30 days.
• Do-not-contact and unsubscribe records: kept for as long as the workspace exists, so people who opted out are never emailed again.
• When you ask us to close your account, we delete its data within 30 days, except what the law requires us to keep, such as billing records.

Your choices and rights

• Ask for a copy of your data, a correction or deletion: email support@followkite.com from your account address. We answer within 30 days.
• Disconnect any inbox at any time; Followkite then stops reading it.
• If you received an email sent through Followkite and want it to stop, use the unsubscribe link in that email. You can also write to us; for workspace content we pass your request to the workspace owner, who controls that data.

Security

Passwords are hashed; inbox credentials, two-factor secrets and webhook secrets are encrypted; sessions use HttpOnly cookies; every workspace's data is kept separate and access is limited by role. No system is perfectly secure; if a breach affects your data we will tell you without undue delay.

Changes

If we change this policy in a way that matters, we update the date above and tell account owners by email before the change takes effect.