1. Who We Are
Kormex AI ("we", "us") operates the website and AI agent services at kormexai.com. This Privacy Policy explains what personal data we collect, why, and the rights you have. For questions contact [email protected].
2. Data We Collect
- Account data: name, work email, company and region you provide at sign-up.
- Onboarding data: business goals, markets, languages and brand details you share with Kosmo.
- Content & assets: brand assets, posts and materials you upload or we generate for you.
- Connected-platform data: when you connect Google Business Profile, Facebook or Instagram, we receive the data those platforms return for the scopes you authorize (for example business profile info, page name, Instagram handle, and metrics needed to deliver the Service). We do not receive your platform password.
- Usage data: interactions with the dashboard, feature usage and event logs used to operate and improve the Service.
3. How We Use Data
- To provide, operate and secure the Service (including publishing content and pulling metrics from connected platforms).
- To generate AI content and reports in your selected languages.
- To communicate with you about your account, trial and subscription.
- To comply with legal obligations and platform terms (including Meta Platform Terms).
4. Legal Bases (where applicable)
We process your data on the bases of contract performance (to deliver the Service you requested), legitimate interest (to secure and improve the Service), and consent (where you have connected a third-party platform or subscribed to marketing).
5. Sharing & Sub-Processors
We share data only as needed: (a) with our LLM provider (OpenRouter) to generate content; (b) with our email provider (Brevo) to send transactional messages; (c) with our payments provider (Stripe) to process subscriptions; and (d) with Google/Meta solely to the extent required to operate the integrations you authorize. We do not sell your personal data.
6. International Transfers
As a cross-border service operating across Mexico, the United States and Canada, your data may be processed in these regions and by the sub-processors above. We rely on standard contractual safeguards where required.
7. Data Retention
We keep account and content data for the life of your subscription and for a reasonable period afterward to meet legal and operational needs. Connected-platform tokens are stored only as long as needed to operate the integration and are deleted when you disconnect or request deletion.
8. Your Rights
You may request access, correction, export or deletion of your personal data at any time from your dashboard or by contacting [email protected]. Where we received your data from Facebook or Instagram, you may also use our Data Deletion Request page, as required by the Meta Platform Terms.
9. Cookies
See our Cookie Policy.
10. Children
The Service is not directed to children under 16 and we do not knowingly collect their data.
11. Changes
We may update this Policy. Material changes will be notified via the Service or email.
Last updated: August 8, 2026