Privacy Policy

Who we are

KX21, Inc. operates the AurionX AI directory. This policy explains what we collect and how we use it. Contact: thomas@aurionx.ai.

Information we collect

• Form submissions. When you submit or claim a listing, request a quote, or contact us, we collect the details you enter (e.g. name, work email, company, website, message). Our forms are provided by Kapture, which also records the form interaction (see Session recording).
• Pro purchases. If you buy a Pro listing, we receive billing details from Stripe (see Payments) and keep a record of the terms and auto-renewal consent you gave.
• Usage data. Basic, largely aggregated analytics about pages visited and outbound clicks, used to run and improve the directory.
• Cookies. We use essential cookies for site function and, where enabled, privacy-respecting analytics. We do not use cross-site advertising trackers.

How we use it

• To operate the directory, review submissions, and verify listings.
• To route quote and claim requests to the relevant vendor (a lead you submit is delivered to that company).
• To communicate with you about your submission or request.
• To detect and prevent spam, fraud, and abuse.

Payments

Stripe processes Pro payments. We never see or store your full card number. From Stripe we receive your name, billing email, country and postal code, the card brand and last 4 digits, and the payment and subscription status. We use them to switch Pro on and off, send receipts and billing emails, handle refunds, and meet tax and accounting duties. Stripe's own use of your data is covered by Stripe's privacy policy.

Email

Mailgun sends our account, billing, quote-forwarding and monthly stats emails, so it handles your email address and the message content.

Session recording

Kapture records how you interact with our forms, including the Pro terms form, so we can prove what was agreed and prevent fraud. Recording starts when you interact with a form. It captures what you type into the form, your clicks, scrolls and page changes on that page, the page text you saw (including the terms you agreed to), timestamps, and your browser, device and IP address. We keep agreement recordings for at least 3 years.

How we share it

We share information with service providers who help us run the Service (listed below). When you request a quote, your request is delivered to the vendor you selected. We do not sell your personal information (see Do Not Sell or Share My Data). We may disclose information if required by law.

Service providers

• Stripe: payments and subscriptions.
• Mailgun: email delivery.
• Kapture: forms and session recording.
• KontrolX: lead orchestration (routing quote and claim requests).
• Neon: database.
• Quave: hosting.
• Cloudflare: content delivery and security.

Data retention

• Billing and tax records: 7 years.
• Agreement records (Pro terms and auto-renewal consent, with their recordings): at least 3 years, or 1 year after the subscription ends, whichever is longer.
• Everything else (submissions, leads): as long as needed to run the directory and meet legal obligations, then deleted or anonymized.

Legal bases (EEA and UK)

If you're in the EEA or UK, we use your data to perform our contract with you (Pro, quote and claim requests), for our legitimate interests (running and securing the directory, preventing fraud, keeping proof of agreements), to meet legal obligations (tax and accounting records), and with your consent where the law requires it.

International transfers

We're based in the United States and our providers store data in the US. If you use the Service from outside the US, your data is transferred to and processed in the US.

Your rights

Depending on where you live (including under the CCPA/CPRA and GDPR), you may have the right to access, correct, delete, or port your personal information, and to opt out of sale/sharing. To exercise any right, email thomas@aurionx.ai or use Do Not Sell or Share My Data. We will not discriminate against you for exercising these rights.

Children

The Service is not directed to children under 16 and we do not knowingly collect their personal information.

Changes

We may update this policy; the "last updated" date shows the current version.