Legal

Privacy Policy

Last updated: June 13, 2026 · EO9 Industries Inc. — KRONEX

1. Who We Are

This Privacy Policy describes how EO9 Industries Inc., operating as KRONEX ("KRONEX", "we", "us", or "our"), collects, uses, and protects your information when you use our AI Executive Assistant service at kronexhq.com. Our contact is patrick@kronexhq.com.

2. Information We Collect

When you connect your Gmail account to KRONEX, we access the following data through Google's OAuth 2.0 authorization:

• Email messages in your Gmail inbox (read and draft access only)
• Google Calendar events and availability
• Your name and email address (Google profile)
• Meeting transcripts processed through Fathom (when you invite the Fathom bot to meetings)

We also collect information you provide directly during onboarding: your writing style sample, VIP contact list, blocked contact list, preferred briefing time, preferred language, focus windows, and phone number for SMS briefings.

3. How We Use Your Information

We use your information exclusively to provide the KRONEX service:

• Drafting email replies in your voice for your review and approval
• Managing your Google Calendar and scheduling
• Generating your daily and weekly briefings
• Tracking commitments detected in emails and meetings
• Extracting action items from meeting transcripts
• Monitoring relationship health scores and alerting you to at-risk contacts
• Detecting opportunities and invoice references in your inbox
• Sending proactive SMS digests at your configured time

We never sell your data. We never use your email content to train AI models. We never send emails on your behalf without your explicit approval of each individual draft.

4. Data Storage and Security

Your data is stored in Airtable (United States) and processed through Make.com automation infrastructure. We apply industry-standard security measures including encrypted connections (TLS), OAuth 2.0 token security, access controls, and regular security audits. OAuth tokens are stored securely and never shared with third parties beyond the sub-processors listed below.

5. Data Retention

We retain your data for the duration of your active subscription plus 30 days. Upon cancellation, all data associated with your account is permanently deleted within 30 days. You may request deletion at any time by emailing patrick@kronexhq.com. Deletion includes all Airtable records, OAuth token revocation, and removal of all configured Make.com scenarios.

6. Your Rights (GDPR — EU Clients)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:

• Right of access — request a copy of all data we hold about you
• Right to rectification — correct any inaccurate data
• Right to erasure — request permanent deletion of your data
• Right to data portability — receive your data in a portable CSV format within 72 hours
• Right to object — object to any processing of your data
• Right to restrict processing — limit how we use your data

EU clients receive a full Data Processing Agreement (DPA) as part of their service agreement, automatically appended at signing. To exercise any of the above rights, email patrick@kronexhq.com.

7. Your Rights (CCPA — California Clients)

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. California clients receive a CCPA Addendum as part of their service agreement.

8. Third-Party Sub-Processors

KRONEX uses the following sub-processors to deliver the service. Each is bound by data processing agreements and operates under GDPR-compliant or equivalent standards:

• Google (Gmail API, Calendar API) — email and calendar access, OAuth authentication
• Anthropic Claude API — AI language model for draft generation and analysis
• ElevenLabs — voice synthesis for daily and weekly briefings
• Fathom — meeting transcription and action item extraction
• Stripe — payment processing and subscription management
• Make.com — automation infrastructure and scenario orchestration
• Airtable — secure structured data storage
• Twilio — SMS delivery for morning digest

9. Google API Data Use Policy

KRONEX's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access Gmail and Calendar data solely to provide the KRONEX AI Executive Assistant service
• We do not use this data for advertising purposes
• We do not allow humans to read your email content except as required by law or explicit user permission
• We do not use your data to develop, improve, or train generalized AI or ML models
• We do not share your data with third parties except as necessary to provide the service (sub-processors listed above)

10. Cookies

The KRONEX website (kronexhq.com) does not use tracking cookies or analytics cookies. We do not use any third-party advertising or tracking technologies on our website.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active clients by email. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions, data requests, or to exercise your rights:

Patrick Furlong, Founder
EO9 Industries Inc. — KRONEX
patrick@kronexhq.com
kronexhq.com