Privacy Policy

This Privacy Policy explains how Konexium (“Konexium”, “we”, “us”) handles personal data in connection with our website and the Konexium Service. It covers two groups of people: our users (people who sign up and use the Service), and people whose business contact information may appear in the Service (for example a company’s directors or managers).

Questions and requests: privacy@konexiumai.com.

Account information: name, email address and sign-in details, handled through our authentication provider. Business information: your company, website, what you sell and who you want to reach. Usage information: actions in the Service, conversations with Baks, credit use, device, browser and log data. Connected accounts: if you connect an email or calendar account, the access needed to send the outreach you approve and to show your meetings. Communications: messages, demo and plan requests you send us. Billing information agreed with you.

We use this to provide, secure and support the Service; run research and outreach you ask for; manage plans, credits and payments; communicate with you about your account; prevent abuse; improve the Service; and meet legal obligations. Our legal bases are performance of our contract with you, our legitimate interests in operating and improving a secure service, compliance with law, and your consent where we ask for it (for example product news emails, which you can unsubscribe from at any time).

To help businesses find companies to work with, the Service collects information about businesses and people in business roles from publicly available sources: company websites, public business registries, public tenders and procurement notices, news and search engine results. This can include a person’s name, job title, employer, business email address, business phone number, published WhatsApp business link, and the web page the information was found on.

We do not seek out or intend to process special category or sensitive personal data, personal home details, or information about children. We process business contact information on the basis of legitimate interests: enabling business-to-business communication about goods and services relevant to a person’s professional role. We keep the source of each item so it can be checked.

Our customers use this information for their own outreach, and are responsible, as independent controllers, for doing so lawfully. We apply suppression lists across the platform and add an unsubscribe option to outreach emails sent through the Service.

If you do not want to be contacted through Konexium, use our opt-out page at konexiumai.com/opt-out, or email privacy@konexiumai.com. An opt-out takes effect immediately across the whole platform: no customer can send outreach through Konexium to the email address, phone number or company domain you give. We then remove the related personal data we hold within 30 days, keeping only the minimum needed to keep honouring your opt-out.

You can also unsubscribe from any outreach email sent through Konexium using the link it contains.

We do not sell personal data. We share it only as needed to run the Service: with customers, who can see business contact information in their workspaces; and with service providers who process it for us under contract, in these categories: hosting and infrastructure, authentication, email delivery, AI model providers, web search providers, and the email and calendar providers you choose to connect (Google, Microsoft). For the current list of providers, write to privacy@konexiumai.com.

We may also disclose information if required by law or to protect our rights, users or the public, and to a successor in a merger, acquisition or sale of assets, subject to this policy.

Konexium does not request access to Google APIs. If you sign in with Google, Konexium receives only your name, email address and profile picture to create your account.

Sending outreach from your mailbox: you can connect Gmail, Google Workspace, Outlook or another mailbox by entering its outgoing mail (SMTP) settings and an app password you create for Konexium, or connect a Microsoft 365 or Outlook account by signing in with Microsoft. Konexium uses this only to send the messages you have approved. It cannot read, search or delete the email in your mailbox. You can revoke an app password in your email provider's settings at any time.

Meetings: you can connect a calendar by pasting its private calendar (iCal) address, or by signing in with Microsoft. Konexium reads events read-only, only to show your meetings with people outside your organization on the Meetings page, and never creates, changes or deletes events.

Mailbox passwords, calendar addresses and access tokens are encrypted at rest. Calendar and mailbox data are never sent to an AI or machine-learning model, including those of the AI model providers named in section 5: when you ask Baks about your meetings, Konexium answers directly from your synced calendar, and calendar data is not available to AI assistants you connect to Konexium. This data is never used to train AI models. You can disconnect a mailbox or calendar at any time in Settings; Konexium then deletes the stored credentials, and for a calendar also the meetings it synced.

Our providers operate in several countries, including in Europe, the United States and Asia, so personal data may be processed outside the country where it was collected. Where the law requires, we rely on appropriate safeguards such as contractual protections offered by our providers.

User account data is kept while your account is active and deleted within 30 days of account deletion, except where we must keep it for legal, tax, security or dispute purposes. Business contact information is kept while it remains relevant to the Service and is refreshed or removed when it becomes out of date, or on request. Opt-out and suppression records are kept for as long as needed to honour them.

We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, encrypted storage of connected-account tokens and audit logs. No system is completely secure, and we cannot guarantee absolute security.

Depending on where you are, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise them, email privacy@konexiumai.com. We may need to verify your identity. You may also complain to your local data protection authority, such as the Nigeria Data Protection Commission, South Africa’s Information Regulator or Kenya’s Office of the Data Protection Commissioner, though we would appreciate the chance to help first.

We use only the cookies and similar technologies needed to run the website and keep you signed in. We do not use advertising cookies.

The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data about children.

We may update this policy. We will post the updated version with a new date and, for material changes, give notice by email or in the Service.