Privacy Policy

Last updated: October 2026

SofterBrief ("we", "our", or "us") provides a daily curated morning executive newsletter summarizing business, market, policy, and technology news in Kenya and East Africa. This Privacy Policy details how we collect, process, and safeguard your personal data in compliance with the Kenya Data Protection Act, 2019 (KDPA) and international privacy standards.

1. Data We Collect

We believe in minimal data collection. When interacting with SofterBrief, we collect:

Email Address: Required to deliver our morning editions to your inbox.
Full Name (Optional): Used solely to personalize your email greeting.
Engagement Analytics: Delivery timestamps, open events, and link click events captured via Amazon Simple Email Service (SES) configuration sets to measure content relevance and prevent delivery to inactive addresses.
Technical & Log Data: IP addresses and browser agent strings recorded automatically during web form submissions to prevent bot spam and abuse.

2. How We Use Your Data

Your information is processed strictly to:

Deliver the daily morning briefing and transactional account notices (subscription confirmations, unsubscribe confirmations).
Maintain deliverability health by detecting dead email addresses, hard bounces, and spam complaints.
Apply our 90-Day Sunset Policy: automatically pruning cold subscribers who have not engaged with our briefing to respect reader inboxes and protect sender reputation.

3. Third-Party Service Providers

We do not sell, rent, or trade your personal data. We utilize enterprise infrastructure providers who process data strictly under confidentiality agreements:

Amazon Web Services (AWS SES & SNS): Cloud infrastructure used to dispatch emails, handle bounce processing, and route delivery telemetry.
Google Cloud Platform & Firebase: Encrypted database storage (Firestore), cloud task queuing, and web hosting.

4. Double Opt-In & Unsubscribe Rights

We operate on confirmed opt-in consent:

Double Opt-In: New subscribers must confirm ownership via an activation email before receiving newsletters.
One-Click Unsubscribe (RFC 8058): Every issue contains a universal one-click unsubscribe link in the footer and supports native unsubscribe buttons in Gmail, Apple Mail, and Outlook.

5. Your Rights Under the KDPA

Under the Kenya Data Protection Act, you possess the right to request access to your data, object to processing, or request complete erasure (the "Right to be Forgotten"). You can delete your email and associated telemetry at any time by contacting us.

6. Contact Us

If you have questions regarding this policy or wish to exercise your data rights, submit a request via our Contact & Data Portal.