LEGAL
Privacy
Private communication is not an advertising asset.
Kimpa provides the service without selling personal data or using private message content to build advertising profiles.
Every message has end-to-end protection by Ollandi. Kimpa states that email content is not sent to advertising platforms or AI training systems.
Scope of this policy
This Privacy Policy explains how Glemad ("we", "us"), the company behind Kimpa, collects, uses, shares, and protects information in connection with kimpa.io and the Kimpa products and services (together, the "Services"). Depending on your location, the Glemad entity responsible for the Services is Glemad Management Services Limited, a company incorporated in the Federal Republic of Nigeria, or another Glemad Inc. group affiliate providing Kimpa in your region.
Information we collect
We collect information you provide directly, such as account and billing details, domain and organization information, and the content of messages, files, and calendar entries you create in the Services; information generated by your use of the Services, such as device, log, and diagnostic data; and information from cookies and similar technologies described in our Cookie Policy.
How we use information
We use information to provide, maintain, and secure the Services; authenticate accounts and detect fraud or abuse; provide customer support; communicate service and security notices; and, where you opt in, provide optional features such as Kimpa Assist. We do not use the content of your private communications to build advertising profiles.
We do not sell your data
Glemad does not sell personal information and does not share the content of your messages, files, or calendar with advertisers. Any processing of information for product analytics is based on de-identified or aggregated data that does not identify you, your organization, or any individual.
Kimpa Assist and AI features
Where you use AI-assisted features such as Kimpa Assist, your content is processed to generate the requested output and is not used to train general-purpose or third-party models without your organization's prior consent. Only de-identified, aggregated usage data may inform product improvement.
How we share information
We share information with service providers who process it on our behalf under confidentiality and data-protection obligations consistent with this policy, when required by law or to protect rights and safety, in connection with a merger or transfer of business, or with your consent. We do not publicly disclose the specific technical infrastructure or providers we use, for security reasons.
International transfers
Information may be processed in a country other than your own. Where applicable data protection law requires it, we put in place an appropriate transfer mechanism before information is processed outside your region.
Data retention
We retain information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. After account closure, we delete or de-identify personal data within a reasonable period, typically within ninety (90) days, except where longer retention is required by law or legitimate backup rotation.
Security
We protect information with technical and organizational measures described on our Security page, including encryption in transit and at rest, access controls, and incident response procedures. No method of transmission or storage is completely secure, and we encourage you to use strong, unique account credentials.
Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent where processing relies on it. You can exercise most of these rights from your account settings or by contacting privacy@glemad.com, and you may lodge a complaint with your local data protection authority.
Children's privacy
The Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children, and we will delete any such information we become aware of.
Regional disclosures
Where the Nigeria Data Protection Act 2023 or another data protection law applies to our processing of your information, we process personal data as a data controller for our own business purposes and as a data processor on behalf of organizations that use Kimpa, consistent with that organization's instructions.
Changes to this policy
We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. We will post the revised policy with a new effective date and provide reasonable notice of material changes.
Contact
Questions about this policy or our data practices can be sent to privacy@glemad.com.