Privacy Policy

Sektra AI (“Sektra”, “we”, “us”) makes an AI assistant for shared inboxes. This policy explains what personal data we collect through sektra.ai and app.sektra.ai, how we use it, who we share it with, how long we keep it, and your rights.

For the people who sign up and use Sektra, and for website visitors, we are the controller. For the content of the inboxes and numbers a workspace connects, the customer is the controller and we process it on their instructions. If you are a client of one of our customers, contact them first and we will help them answer.

Account details. Your name, email address, profile picture if you sign in with Google or Microsoft, your organisation, your role, and your settings. We never see a password.

Connected accounts. The mail in a connected Gmail or Outlook inbox, for the period your plan covers and as new mail arrives: addresses, names, subjects, bodies, attachments, labels and dates, along with the access tokens Google or Microsoft issue. For a connected WhatsApp number: the messages, media and contacts on that number, and the provider credentials you give us, stored encrypted.

What your team adds. Notes, assignments, tags, templates, reminders, and the questions and tasks given to the assistant, together with what Sektra derives from your data, such as priorities, summaries and action items.

Billing. Your plan, invoices, and the billing details you enter at checkout.

Usage data. Which features and pages are used, the campaign that brought you to signup, browser and device type, approximate location from your IP address, error reports, and support messages you send us.

• to run the Service: sync inboxes, prioritise and summarise mail, draft replies, answer questions, run action items and show analytics;
• to send the messages your team writes or approves;
• to manage your workspace and subscription and send service emails such as invitations and digests;
• to keep the Service secure and enforce plan limits;
• to understand how the product is used and improve it;
• to answer support requests and meet legal obligations.

We do not:

• sell personal data or share it for anyone else’s marketing;
• use the content of your mail or messages for advertising;
• use your data to train AI models, ours or anyone else’s.

AI features send content to a model to produce a result, such as a summary or a draft. The content is not retained by the model service, not shared with the companies that built the models, and never used for training. Only members of your workspace with access to an inbox can see what the AI produces from it.

Sektra’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the features you see in Sektra, shown only to your workspace, and never used for advertising or to train general models. The same rules apply to inbox data received from Microsoft. You can revoke either permission at any time from your Google or Microsoft account.

We share personal data only with the providers we need to run Sektra, each bound by contract to use it only for the service they provide us: cloud hosting and storage, sign-in, payment processing, email delivery, product analytics and error monitoring. Payments are handled by Paddle.com as our Merchant of Record, under its own privacy policy.

Google, Microsoft and your WhatsApp provider receive data because you connected them, under their own policies. Beyond that we disclose personal data only if the law requires it, to protect the rights or safety of Sektra or others, or as part of a sale of our business, in which case we will tell you first.

Our servers and storage are hosted on Amazon Web Services in the United States. Where personal data relating to individuals in the European Economic Area, the United Kingdom, or Switzerland is transferred outside those regions, we rely on Standard Contractual Clauses and other appropriate safeguards provided by our service providers.

We keep workspace data for as long as the workspace exists, including while it is paused. Disconnecting an inbox stops syncing. When the owner asks us to delete a workspace, we permanently delete everything in it within 30 days, after which backup copies expire on their rotation schedule. Invoices are kept as long as tax law requires, and logs for a limited period for security and debugging.

Depending on where you live, you may have the right to access the personal data we hold about you, correct or delete it, receive a copy, restrict or object to its use, and withdraw consent, under laws such as the GDPR.

Email hello@sektra.aifrom the address on your account and we will respond within 30 days. If your request concerns data in a customer’s workspace, we will pass it to that customer. You can also complain to the data protection authority where you live.

The app uses cookies needed to keep you signed in. The website and app also use an analytics cookie, set on the sektra.ai domain, to measure which pages and features are used and where signups come from. We do not use advertising cookies. You can block the analytics cookie in your browser without affecting the Service.

Data is encrypted in transit and at rest and production access is limited to a small number of named engineers. Our security page has the details.

We will notify you of significant changes to this policy via email. Continued use of Sektra after changes constitutes acceptance of the updated policy.