Privacy policy

Ozi is operated by Ked Creative Technology (“we”, “us”), in Nigeria. We run the website at getozi.com and the Ozi app at app.getozi.com.

For questions about this policy or your information, email [email protected].

We are the controller of information about the people who visit our website and the people who hold Ozi accounts. We decide how that information is used, and this policy explains it.

We are a processor of the information our customers put into Ozi: their contact lists, the emails they send, and the mail that arrives in their mailboxes. We handle it only to provide Ozi to that customer and on their instructions. If you received an email sent through Ozi, or you sent mail to an address hosted on Ozi, the business behind that address is responsible for your information. Contact them first; we will help them answer you.

When you visit the website. We count visits with Simple Analytics, which uses no cookies and does not identify you. Our servers keep short-lived logs of requests, including IP addresses, for security and to fix problems.

When you create an account. Your name and email address, and your profile photo if you sign in with Google or GitHub. The teams you belong to, your role in them, and the one-time codes we email you to sign in.

When you pay. Payments are handled by Bachs. We never see or store your full card number; we keep your plan, billing email and whether invoices are paid.

When you use Ozi. The information needed to run the features you use:

• Your domains, and the contacts you add or import, with any details you store about them.
• Campaigns, templates, automations, and the emails you send: who they went to, the subject and the content.
• What happened to each email. If you turn on open and click tracking for a domain, this includes when a recipient opened an email or clicked a link, with their IP address and the app or browser they used.
• The mail in your mailboxes, including attachments, folders, filter rules, saved contacts and calendars.
• Requests your apps and AI agents make to the API, with the IP address, app or browser, and the key used, and the calls we make to your webhooks.

When you contact us. Whatever you write to us, and our replies.

• To provide Ozi: send and receive your email, store your mailboxes, run your campaigns and automations, and show you what happened.
• To keep Ozi secure and reliable, and to stop spam, fraud and abuse of our service.
• To bill you and keep the records the law requires.
• To email you about your account, such as sign-in codes, limits and changes to these terms.
• To send product news, only if you asked for it. Every such email has an unsubscribe link.
• To understand, in aggregate, how the website and app are used, so we can improve them.

Under the Nigeria Data Protection Act 2023, and the GDPR and UK GDPR where they apply, we rely on:

• Contract: to provide the service you signed up for.
• Legitimate interests: to secure Ozi, prevent abuse, and improve the product, in ways you would reasonably expect.
• Consent: for product news, which you can withdraw at any time.
• Legal obligation: for tax, accounting, and lawful requests.

We do not sell personal information. We share it only with the providers who help us run Ozi:

• Amazon Web Services: sends and receives email, checks incoming mail for spam and viruses, and stores mail and images.
• Our server provider: the virtual private servers where we run the Ozi app, database and mail servers.
• Bachs: takes payments and manages subscriptions.
• Google and GitHub: only if you choose to sign in with them.
• Simple Analytics: counts website visits without identifying anyone.

Each provider may use the information only to provide its service to us. If you connect Ozi to another service yourself, such as through a webhook, an integration or an AI agent using your API key, that information goes where you send it.

We may also disclose information when the law requires it, or to protect our users, the public or Ozi from harm. If Ked Creative Technology is involved in a merger or sale, information may pass to the new owner under this policy.

• API request logs are deleted after 30 days.
• Records of calls to your webhooks are deleted after 30 days.
• Automation run history is deleted after 90 days.
• The content of emails you send is deleted after a set period; we keep the record that each email was sent, and what happened to it, for your reports.
• Mailboxes, contacts, campaigns and templates are kept until you delete them or close your account.
• Billing records are kept as long as tax law requires.

When you close your account we delete your information within a reasonable period, except where we must keep it by law. Any copies held in backups are removed as those backups expire.

Ozi runs on servers and Amazon Web Services regions that may be outside your country, including outside Nigeria. When information leaves Nigeria, the European Economic Area or the United Kingdom, we rely on the safeguards those laws provide, such as standard contractual clauses with our providers.

Connections to Ozi are encrypted. API keys and mailbox passwords are stored only as secure hashes, so they cannot be read back, even by us. Access to production systems is limited to the people who need it to run Ozi.

When you read mail in Ozi, images from outside the message are fetched by our servers rather than your browser, so senders cannot see your IP address or tell when you opened their email.

No system is perfectly secure. If a breach affects your information, we will tell you and the regulator as the law requires.

Depending on where you live, you can ask to see the information we hold about you, correct it, delete it, receive a copy, object to or restrict how we use it, and withdraw consent you have given. Email [email protected] and we will answer within the time the law allows. We may need to confirm it's you first.

You can also complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.

The website sets no tracking cookies; it remembers your light or dark theme in your browser's own storage. The Ozi app uses only the cookies needed to keep you signed in and secure.

Ozi is a service for businesses and is not meant for anyone under 18. We do not knowingly collect information about children.

When we change this policy we update the date at the top. If a change is significant, we will tell account holders by email before it takes effect.

Ked Creative Technology, operator of Ozi. Email [email protected], or see our contact page. The rules for using Ozi are in our terms of service.