Privacy & Data Policy

Kyron ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy & Data Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to all services provided through the Kyron platform, including our website, mobile applications, and any associated APIs or integrations. By using Kyron, you acknowledge that you have read and understood this policy.

If you have any questions, please contact us at privacy@kyron.app.

The data controller responsible for your personal data is:

Kyron
Contact: privacy@kyron.app

If you have concerns about how your data is handled, please reach out to us at the contact above before lodging a complaint with a supervisory authority.

We collect the following categories of personal data:

• Contact information: Your name, email address, and any message you submit via our contact form. This is only collected when you proactively reach out to us.
• Waitlist registration: Your email address if you sign up for early access. We use this solely to notify you when Kyron launches.
• Chat conversation data: Messages you send to our AI assistant on this website. These are forwarded to our backend service to generate responses and are not linked to your identity unless you include personal details in the message itself.
• Usage & device data: IP address, browser type, operating system, pages visited, and session duration, collected automatically when you access our website.

We do not collect banking credentials, account numbers, transaction history, or any other financial data at this stage.

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Consent (Art. 6(1)(a)): Where you have given clear consent, for example to receive marketing communications or to connect a financial account. You may withdraw consent at any time.
• Contractual necessity (Art. 6(1)(b)): Processing required to provide the Kyron service to you under our Terms of Service, including account management and financial data aggregation.
• Legitimate interests (Art. 6(1)(f)): For purposes such as fraud prevention, security monitoring, product analytics, and improving our services, where these interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)): Where we are required to retain or disclose data to comply with applicable law, regulation, or court order.

We use the data we collect to:

• Respond to enquiries submitted through our contact form.
• Send you a notification when Kyron launches, if you have joined the waitlist.
• Operate the AI assistant on our website and provide relevant responses to your chat messages.
• Analyse usage patterns to improve the website and product experience.
• Maintain the security of our services and detect abuse.
• Comply with our legal and regulatory obligations.

We do not use your data for third-party advertising and we do not sell your personal data to any third party.

We share your data only where necessary and with appropriate safeguards in place:

• Email delivery (Resend): Contact form submissions are forwarded via Resend, a transactional email provider, so we can receive and reply to your message. Resend processes your name and email address solely for this purpose.
• AI backend: Chat messages you send to our AI assistant are forwarded to our backend service to generate a response. These messages are not stored or used for any purpose beyond the immediate conversation.
• Cloud infrastructure: Our website and services run on cloud infrastructure under data-processing agreements that include GDPR-compliant safeguards.
• Legal & regulatory: We may disclose data to law enforcement or regulatory authorities where required by law.

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

Some of our service providers may process your data outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions recognising the destination country as providing an equivalent level of data protection.

You may request a copy of the relevant transfer mechanism by contacting us at privacy@kyron.app.

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Contact form submissions: Retained for as long as needed to respond to and resolve your enquiry, then deleted.
• Waitlist email addresses: Retained until Kyron launches and you have been notified, or until you request removal — whichever comes first.
• Chat messages: Not stored persistently beyond the duration of the conversation session.
• Usage & device data: Retained in aggregated or anonymised form for analytical purposes; raw data is not kept beyond 90 days.

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure:Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Right to restriction: Request that we limit how we process your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format and transfer it to another controller.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: Not be subject to solely automated decisions that produce significant legal effects, and to request human review where applicable.

To exercise any of these rights, please email us at privacy@kyron.app with the subject line "Data Rights Request". We will respond within 30 days. We may ask you to verify your identity before processing your request.

We use a minimal set of cookies to operate and improve our services:

• Strictly necessary cookies: Required for authentication and session management. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with the site. These are only set with your consent.

You can manage your cookie preferences at any time via our Cookie Settings (coming soon). You may also control cookies through your browser settings; however, disabling certain cookies may affect the functionality of the platform.

Kyron is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us at privacy@kyron.app and we will take steps to delete it promptly.

We may update this Privacy & Data Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify registered users by email at least 14 days before the changes take effect.
• Where required by law, request fresh consent.

We encourage you to review this policy periodically. Continued use of Kyron after changes take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us:

Email: privacy@kyron.app

We will do our best to address your concern promptly. If you are not satisfied with our response, you have the right to lodge a complaint with your local EU data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.