Last updated: [EFFECTIVE DATE]
This policy explains how OrNsoft Corporation ("OrNsoft," "we"), the company behind Kantum, collects, uses, and protects personal data when you use Kantum, a hosted software service.
We collect account details (such as name, email, and workspace settings); usage data about how you interact with Kantum; the content and connected-account data you bring into Kantum; your communications with us; and payment information processed by our payment providers. We do not store full card numbers.
We use information to provide and operate Kantum, process the actions you authorize, maintain memory, secure the service, prevent abuse, meet legal obligations, and communicate with you about the service.
To provide the service, data may be processed by the third-party AI model provider you choose to run on, by the connectors you authorize, by our payment processor, and by our hosting provider. [Final subprocessor list to be confirmed.]
Kantum maintains memory you can inspect, edit, export, and delete. You control what Kantum retains about your business.
We share data with the subprocessors described above, with the integrations you connect, and as required by law. We do not sell personal data.
We use GDPR-aligned consent controls for analytics and marketing cookies. You can manage your preferences through our consent tools.
We retain personal data for as long as needed to provide the service and for legitimate business or legal purposes. [Retention periods to be confirmed.]
We protect data with encryption in transit (TLS) and at rest (AES-256); salted and hashed credentials with keys stored separately; multi-factor and zero-trust access to production; regular access reviews; third-party penetration testing; and tenant isolation that keeps each workspace’s data separate. OrNsoft is ISO 27001 and ISO 9001 certified.
Kantum runs on AWS. By default, data is hosted in the United States (US East). For European customers, data is hosted in the European Union (Paris). Residency is determined by the customer’s region.
You may request access, correction, deletion, and export of your personal data. Many of these are exercisable directly through editable memory, and you can contact us to exercise any right.
The service is not directed to anyone under 18, and we do not knowingly collect personal data from children.
For non-EU customers, data may be processed in the United States, with appropriate safeguards. [Transfer mechanism to be confirmed with counsel.]
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and communicate material changes as appropriate.
Questions about this policy? Contact us at Support@OrNsoft.com, or OrNsoft Corporation, 10800 Biscayne Blvd. #988, Miami, Florida 33161 USA.