Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Sidekick AI Inc., doing business as Email Donut, collects, uses, shares, and protects information when you use Email Donut websites, applications, integrations, browser extensions, and related services.

1. Who We Are

Email Donut is a business-to-business software platform for ecommerce and lifecycle marketing teams. Email Donut helps users collect email inspiration, plan marketing calendars, review marketing context, and generate campaign briefs and copy. Email Donut may connect to third party platforms such as Klaviyo and Shopify when a user authorizes an integration.

2. Information We Collect

A. Account and Workspace Information

• Name, email address, and profile photo
• Authentication information from supported sign-in providers
• Workspace, brand, board, subscription, and settings information
• Support messages and other communications

B. Klaviyo Integration Data

If you connect Klaviyo, Email Donut receives access only to the Klaviyo data authorized through the OAuth permission flow. This may include account metadata, campaigns, flows, metrics, templates, lists, segments, tags, and profile data such as email addresses, phone numbers, names, identifiers, and marketing attributes.

Email Donut currently uses Klaviyo data to help users understand marketing context, create calendar plans, generate campaign briefs, and improve content workflows. Email Donut does not send messages through Klaviyo or write customer data to Klaviyo unless a future feature is separately enabled and authorized by the user.

C. Shopify and Ecommerce Data

If you connect Shopify or another ecommerce platform, Email Donut may process store, product, order, customer, and performance data authorized through that integration. This data is used to provide product context, calendar planning, reporting, and related analytics features.

D. User Content

• Uploaded or saved email examples
• Calendar inputs, campaign notes, and generated plans
• Generated copy, briefs, templates, and feedback
• Images or URLs added to articles, briefs, or boards

E. Usage, Device, and Log Information

• Pages or features used and actions taken
• Basic log data such as timestamps, IP address, and request metadata
• Device, browser, and approximate location information
• Error, job, and operational logs

F. Browser Extension Data

The Email Donut browser extension allows users to save marketing emails they choose to add to their Email Donut library. When a user clicks Save, the extension may collect the selected email HTML, visible sender information, subject line, date, and user-assigned categories or tags.

The extension does not transmit content from pages the user does not explicitly save. Extension data is used to provide the user’s Email Donut library and related product features.

3. How We Use Information

• Provide, operate, secure, and improve Email Donut
• Authenticate users and manage accounts
• Connect and maintain authorized integrations
• Generate marketing calendars, reports, campaign briefs, and copy
• Process payments, subscriptions, and support requests
• Detect errors, abuse, security events, and service issues
• Comply with legal obligations and enforce our terms

4. AI Features

Email Donut uses artificial intelligence features to classify email examples, generate calendars, draft copy, summarize context, and produce related marketing outputs. Inputs sent to AI providers may include brand context, calendar details, campaign information, connected integration context, user instructions, and selected email examples.

AI outputs are provided for review and editing by users. Users are responsible for reviewing outputs before using them in marketing or business workflows.

5. How We Share Information

We do not sell personal information. We share information only as needed to provide Email Donut, operate authorized integrations, comply with law, protect rights and safety, or complete a business transfer.

• Cloud infrastructure and database providers, including Firebase and Google Cloud
• Payment processors and billing providers, such as Stripe
• AI providers used to generate or process requested outputs
• Error monitoring, analytics, logging, and operational service providers
• Third party platforms that you choose to connect, such as Klaviyo or Shopify

6. Integration Credentials

OAuth tokens and integration credentials are used to connect Email Donut to services authorized by the user. We protect integration credentials using access controls and encrypted storage where applicable. Users can revoke integrations from Email Donut or from the connected platform.

7. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and feature.

Users may request deletion of account data, saved library content, or connected integration data by contacting us. Some information may be retained where required for security, legal, billing, backup, or legitimate business purposes.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These include HTTPS, authenticated backend access, authorization checks, least-privilege integration scopes, environment-based secret management, cloud provider security controls, restricted production access, logging and monitoring, access reviews, and vulnerability remediation processes.

No method of transmission or storage is completely secure. If we become aware of a security incident affecting personal information, we will investigate and provide notices where required by law or applicable platform requirements.

9. Cookies and Similar Technologies

We use cookies and similar technologies to maintain sessions, remember preferences, measure usage, and improve the service. You can manage cookies in your browser settings, but some features may not work properly without them.

10. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, object to, or restrict processing of personal information. To exercise these rights, contact us at khaled@emaildonut.com.

11. International Processing

Email Donut and its service providers may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border data transfers.

12. Children

Email Donut is intended for business use and is not directed to children. We do not knowingly collect personal information from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date. Continued use of Email Donut after updates means you accept the revised policy.

14. Contact

For privacy-related questions or requests, contact khaled@emaildonut.com.

Mailing address: Sidekick AI Inc., 470 Front Street West, Suite 1104, Toronto, ON M5V 0V6, Canada.