Khorium

Privacy Policy

Effective date: September 25, 2026

Khorium Inc. (“Khorium”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our websites, products, and services (collectively, the “Services”).

1. Information We Collect

Information you provide

  • Account details such as your name, email address, and organization.
  • Payment information processed through our third-party payment provider.
  • Simulation data and files you upload to use the Services.
  • Communications when you contact us for support or inquiries.

Information collected automatically

  • Device and browser information (type, operating system, screen resolution).
  • Usage data such as pages visited, features used, and session duration.
  • IP address and approximate geographic location.
  • Cookies and similar tracking technologies (see Section 5).
  • The organization a visit appears to come from, identified from your IP address.
  • If you are signed in to a Google account and have allowed it, Google may associate your visits with that account across your devices (see Section 5).
  • Whether you opened, or clicked a link in, an email we sent you.

2. How We Use Your Information

  • To provide, maintain, and improve the Services.
  • To process transactions and send related communications.
  • To respond to your requests, questions, and support needs.
  • To send product updates and marketing communications (with your consent).
  • To detect, prevent, and address security issues and abuse.
  • To comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share information with:

  • Service providers who assist us in operating the Services (hosting, analytics, payment processing), bound by confidentiality obligations. These currently include Google (Google Analytics), PostHog and Snitcher, all described in Section 5, and c15t, which runs our consent banner and stores a record of the choice you make.
  • Legal authorities when required by law, regulation, or legal process.
  • Business transfers in connection with a merger, acquisition, or sale of assets, with notice to you.

4. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy, unless a longer retention period is required by law. Simulation data you upload is retained only for the duration needed to process your request unless you choose to store it in your account.

5. Cookies & Tracking

We use essential cookies to operate the Services. Everything else described in this section is optional and grouped into two choices you control separately — measurement (understanding how the Services are used) and marketing (identifying the organisation a visit came from).

How you are asked depends on where you are. Privacy law differs by region, and we follow the rule that applies to you:

  • Where consent is required before anything optional runs (currently the EU and the UK), a consent banner appears on your first visit, and measurement and marketing stay switched off until you accept them. The Google tag is the one exception: it loads for everyone in a mode where it stores nothing on your device and cannot identify you, described under Google Analytics below.
  • Everywhere else (including California and the rest of the United States, and countries such as Switzerland, Brazil, Australia and Japan), measurement and marketing start when you arrive and no banner is shown; you can switch them off at any time. If your browser sends an opt-out preference signal such as Global Privacy Control, we honour it automatically and neither starts.

Either way you can change or withdraw your choice at any time using the Cookie Settings or Your Privacy Choices link in the footer of any page — both open the same controls. You can also control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Services.

Google Analytics (measurement). We use Google Analytics to understand how the Services are used. Google’s advertising features are switched off: we do not use this data to build advertising audiences, and we do not permit Google to link your visits here to your Google account or combine them across your devices for advertising. Until measurement is switched on for you, the Google tag runs without storing anything on your device or identifying you; it sends cookieless pings that Google uses only for aggregate modelling. This is also what it goes back to if you switch measurement off later: the tag stays loaded in that cookieless mode rather than being removed. You can review and delete activity Google has recorded for your account at myactivity.google.com.

Product analytics (measurement). We use PostHog to see which pages are visited and what is clicked, so that we can improve the website and our product. It runs only while measurement is switched on for you, and it does not record your screen or what you type. PostHog stores an identifier in a cookie shared across khorium.ai and our app, so if you later sign in to the app, the visits you made to this website can be linked to your account.

Company identification (marketing). We use Snitcher to identify the organisation a visit appears to come from, based on your IP address. This tells us which companies are interested in Khorium. It does not tell us who you are as an individual. It runs only while marketing is switched on for you.

Email. If you have consented to receive marketing email from us, we record whether you opened a message and whether you clicked a link in it, so that we can tell which messages are useful. You can withdraw consent at any time using the unsubscribe link in any message, or by contacting us.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal information.
  • Object to or restrict certain processing activities.
  • Request portability of your data.
  • Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

If you are in California. You may opt out of the use of your information for measurement and marketing at any time using the Your Privacy Choices link in the footer of any page; the change takes effect immediately and we do not ask you to create an account or verify your identity to make it. We also honour opt-out preference signals sent by your browser, including Global Privacy Control, without you having to do anything else. You have the right to know what personal information we hold about you, to have it deleted, to have it corrected, and not to be treated differently for exercising any of these rights. We do not sell or share personal information, and that includes the personal information of anyone under 16.

8. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

9. Children’s Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on our website with an updated effective date. Material changes will be communicated through the Services or via email.

If you have questions about this Privacy Policy, contact us at legal@khorium.ai.