GDPR Compliance

1. Data Controller Information

The data controller for Kamili Mail is:

Kamili Labs LLC

Email: privacy@kamililabsllc.com

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the Kamili Mail service per your subscription agreement.
• Legitimate interest (Art. 6(1)(f)): Service improvement through anonymized analytics, fraud prevention, and security measures.
• Consent (Art. 6(1)(a)): Non-essential cookies and optional communications, where you have given explicit consent.
• Legal obligation (Art. 6(1)(c)): Tax and financial record-keeping requirements.

3. Your Rights (Articles 15-22)

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): Obtain a copy of your personal data and information about how it is processed.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restriction (Art. 18): Request that we limit processing of your data in certain circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interest.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time for consent-based processing.
• Automated Decision-Making (Art. 22): Kamili Mail does not make automated decisions with legal effects. AI features are assistive and user-controlled.

To exercise any right, email privacy@kamililabsllc.com. We will respond within 30 days.

4. Data Protection Officer

For data protection inquiries, contact our privacy team at privacy@kamililabsllc.com.

5. Cross-Border Transfer Safeguards

When personal data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission and supplementary technical measures (encryption in transit and at rest).

6. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where the alleged violation occurred. We encourage you to contact us first so we can resolve any concerns directly.