Privacy Policy

1. About this policy

This Privacy Policy explains how Konexium (“Konexium”, “we”, “us”) handles personal data in connection with our website and the Konexium Service. It covers two groups of people: our users (people who sign up and use the Service), and people whose business contact information may appear in the Service (for example a company’s directors or managers).

Questions and requests: privacy@konexiumai.com.

2. Information about our users

Account information: name, email address and sign-in details, handled through our authentication provider. Business information: your company, website, what you sell and who you want to reach. Usage information: actions in the Service, conversations with Baks, credit use, device, browser and log data. Connected accounts: if you connect an email or calendar account, the access needed to send the outreach you approve and to show your meetings. Communications: messages, demo and plan requests you send us. Billing information agreed with you.

We use this to provide, secure and support the Service; run research and outreach you ask for; manage plans, credits and payments; communicate with you about your account; prevent abuse; improve the Service; and meet legal obligations. Our legal bases are performance of our contract with you, our legitimate interests in operating and improving a secure service, compliance with law, and your consent where we ask for it (for example product news emails, which you can unsubscribe from at any time).

3. Business contact information in the Service

To help businesses find companies to work with, the Service collects information about businesses and people in business roles from publicly available sources: company websites, public business registries, public tenders and procurement notices, news and search engine results. This can include a person’s name, job title, employer, business email address, business phone number, published WhatsApp business link, and the web page the information was found on.

We do not seek out or intend to process special category or sensitive personal data, personal home details, or information about children. We process business contact information on the basis of legitimate interests: enabling business-to-business communication about goods and services relevant to a person’s professional role. We keep the source of each item so it can be checked.

Our customers use this information for their own outreach, and are responsible, as independent controllers, for doing so lawfully. We apply suppression lists across the platform and add an unsubscribe option to outreach emails sent through the Service.

4. Your choices: opt out and removal

If you do not want to be contacted through Konexium, use our opt-out page at konexiumai.com/opt-out, or email privacy@konexiumai.com. An opt-out takes effect immediately across the whole platform: no customer can send outreach through Konexium to the email address, phone number or company domain you give. We then remove the related personal data we hold within 30 days, keeping only the minimum needed to keep honouring your opt-out.

You can also unsubscribe from any outreach email sent through Konexium using the link it contains.

5. Who we share information with

We do not sell personal data. We share it only as needed to run the Service: with customers, who can see business contact information in their workspaces; and with service providers who process it for us under contract, including hosting and infrastructure (Heroku, Neon, Cloudflare, Oracle Cloud), authentication (Clerk), email delivery (Resend), AI model providers (such as DeepSeek, Google Gemini and Mistral), search providers (such as Serper and Tavily), and the email and calendar providers you choose to connect (Google, Microsoft).

We may also disclose information if required by law or to protect our rights, users or the public, and to a successor in a merger, acquisition or sale of assets, subject to this policy.

6. International transfers

Our providers operate in several countries, including in Europe, the United States and Asia, so personal data may be processed outside the country where it was collected. Where the law requires, we rely on appropriate safeguards such as contractual protections offered by our providers.

7. How long we keep information

User account data is kept while your account is active and deleted within 30 days of account deletion, except where we must keep it for legal, tax, security or dispute purposes. Business contact information is kept while it remains relevant to the Service and is refreshed or removed when it becomes out of date, or on request. Opt-out and suppression records are kept for as long as needed to honour them.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, encrypted storage of connected-account tokens and audit logs. No system is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you are, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise them, email privacy@konexiumai.com. We may need to verify your identity. You may also complain to your local data protection authority, such as the Nigeria Data Protection Commission, South Africa’s Information Regulator or Kenya’s Office of the Data Protection Commissioner, though we would appreciate the chance to help first.

10. Cookies

We use only the cookies and similar technologies needed to run the website and keep you signed in. We do not use advertising cookies.

11. Children

The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data about children.

12. Changes to this policy

We may update this policy. We will post the updated version with a new date and, for material changes, give notice by email or in the Service.