DRAFT for review. This page is awaiting review by KYM AI and legal counsel before launch.
This page explains, in plain words, what information KYM AI collects through this website and the KYM PA Guardian app, why, and what you can do about it. We follow the privacy laws that apply to you, including US state privacy laws such as the California Consumer Privacy Act (CCPA), and the EU and UK GDPR for visitors from Europe.
Who we are
KYM AI ([LEGAL ENTITY NAME AND REGISTERED ADDRESS]). We decide how your information is used (the "controller"). Contact us through the contact form.
What we collect
- Contact and quotation forms: your name, email, country, and anything you choose to tell us (company, service, budget, message).
- Beta sign-up: your name, email, country and whether you use Windows or Mac, so we can email you the right download link.
- Website chat: the questions you type into the chat assistant and its answers, linked to a random visitor ID, so we can answer you and improve the assistant. Please don't share passwords, card numbers or health details there.
- Your account: your email address and a sign-in record, so we can send sign-in links and keep your account secure.
- AI credits: your balance, each purchase and each use, and payment records from our payment provider (we never see or store your full card number).
- A scrambled (one-way hashed) version of your internet address and your browser type, used only to block spam.
- A random visitor ID stored in your browser, so we can link messages you send us from the same browser.
Why we use it
- To reply to you and prepare quotations: to take steps you asked for.
- To run your account and your credit balance: to provide the service you signed up for.
- To keep the website free of spam and fraud: our legitimate interest in running a secure service.
- To meet tax and accounting rules for payments: legal obligation.
We do not sell your personal information or share it for cross-context behavioural advertising, as those terms are defined in US state privacy laws such as the California Consumer Privacy Act. California and other US state residents can ask to know, correct or delete their information without being treated differently.
Cookies and browser storage
This site does not use advertising or analytics cookies. It stores your sign-in session and a random visitor ID in your browser so the site works. If that ever changes, we will ask first.
Who helps us
We use a small number of service providers: database and server hosting, website hosting, email delivery, a payment provider, and AI model providers when your assistant uses a cloud AI model. They process information only on our instructions. [DATA LOCATIONS: to be confirmed at launch.] When information moves between countries we use recognised safeguards such as the EU Standard Contractual Clauses.
How long we keep it
Messages and quotation requests: up to 24 months after our last contact. Account and credit records: while your account is open, and payment records for as long as tax law requires.
Your rights
- ask what we hold about you and get a copy;
- ask us to correct it;
- withdraw consent and ask us to delete it;
- object to or limit how we use it;
- complain to us and to your local data protection authority.
To use any of these rights, write to us through the contact form. We aim to reply within 7 days, and always within the time the law allows.
Children
Our services are for adults. If you set up the app for someone else, please make sure they are happy for you to do so.
Changes
If we change this policy in a way that matters, we will tell account holders by email before the change takes effect.