Legal
Last updated: October 9, 2026 · EO9 Industries Inc. — KRONEX
This policy describes how EO9 Industries Inc., a Quebec corporation operating as KRONEX ("KRONEX", "we", "us"), collects, uses, stores and deletes personal information when you use the KRONEX AI Executive Assistant service or the website kronexhq.com. We are based in Quebec City, Canada.
Under Quebec's Act respecting the protection of personal information in the private sector (Law 25), Patrick Furlong is the person in charge of the protection of personal information at EO9 Industries Inc. Any request, question or complaint about your personal information goes to him at the address above.
When you connect your Google account, KRONEX receives access through Google's OAuth 2.0 authorization. You see the exact permissions on Google's consent screen before you approve them. They are:
You give us directly, through the onboarding form and the service agreement: your company name, country (and state, where relevant), preferred language, time zone, briefing time, the mobile number for your morning text message, VIP contacts, blocked contacts, a short sample of your writing, and your focus hours.
If you use Fathom to record meetings, KRONEX receives the transcript and attendee list of those meetings. If you email meeting notes to the private notes address we give you, we receive those notes.
KRONEX also keeps records of what it did for you: the sender, subject, language and risk level of processed emails; the commitments it detected; calendar requests and the action taken; meeting summaries and action items; briefings sent; and a relationship score for each contact it has seen in your inbox. It does not keep a copy of your mailbox.
We never sell personal information. We never use your email content to train AI models under our control, and our AI provider's terms prohibit it from training on it. We never send a reply to a business email on your behalf; every drafted reply waits in your Gmail Drafts. KRONEX sends on your behalf only in two narrow places: calendar responses to meeting requests (accepting, declining, proposing another time) and your own briefings and alerts.
Processing is automated. Our operator does not read your mailbox. He sees the records KRONEX keeps (section 3) and the system's alerts when he supports you or checks that the system is running; beyond that, human access happens only to investigate a security incident or where the law requires it. Google's Limited Use requirements apply to all data received from Google APIs: we use it only to provide the service, never for advertising, and never to build or improve generalized AI or machine-learning models.
Your personal information is stored and processed outside Quebec, primarily in the United States, by the following providers under contractual protections. Each one receives only what its part of the service needs:
Our website is a static site with no accounts, no forms and no cookies; checkout happens on Stripe's pages.
We keep your personal information for the duration of your subscription plus 30 days. When your service ends — by cancellation, by non-payment, or at your request — KRONEX deletes, 30 days later, every record associated with your email address across its database, replaces your account record with an anonymised entry, deletes the Google tokens it held, and sends you a confirmation. You can request deletion at any time by email to patrick@kronexhq.com. You can also revoke KRONEX's access to your Google account yourself at any time, from your Google Account's security settings; KRONEX stops the moment you do.
If a confidentiality incident involving your personal information occurs, we record it in our incident register and assess the risk of injury. Where an incident presents a risk of serious injury, we notify you and the Commission d'accès à l'information du Québec, and we take the measures needed to reduce the risk. Clients covered by GDPR are notified within 72 hours, as their Data Processing Addendum provides.
Quebec (Law 25). You have the right to be informed of the personal information we hold about you, to access it, to have it rectified, to withdraw your consent, to ask that it be deleted or de-indexed, and to receive the information you gave us in a structured, commonly used technological format. If you are not satisfied with how we handled a request, you may file a complaint with the Commission d'accès à l'information du Québec.
Elsewhere in Canada (PIPEDA). You have the right to access and correct your personal information and to complain to the Office of the Privacy Commissioner of Canada.
European Economic Area and United Kingdom (GDPR). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your supervisory authority. EU clients sign a GDPR Data Processing Addendum as part of their service agreement. Exports are delivered in a portable format within 72 hours of a request.
California (CCPA/CPRA). You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information. California clients sign a CCPA addendum as part of their service agreement.
To exercise any of these rights, email patrick@kronexhq.com. We respond within 30 days.
All connections are encrypted in transit. Access to your Google account is by OAuth 2.0 token only; we never hold your Google password. The KRONEX application has passed Google's verification for restricted Gmail access, including the independent security assessment Google requires, and is re-verified annually. Access to our systems is limited to the person named in section 2.
kronexhq.com sets no cookies and runs no analytics or advertising technology.
When this policy changes, we update the date at the top of this page and notify active clients by email.
Patrick Furlong, Founder
EO9 Industries Inc. — KRONEX
patrick@kronexhq.com
Quebec City, Quebec, Canada