Privacy Policy

This Privacy Policy explains how Osirios Limited ("Osirios", "we", "us", or "our") collects, uses, discloses, transfers, and protects personal data when you access or use the Kron Cutting website and subscription-based software-as-a-service platform (together, the "Service").

We process personal data in accordance with the Mauritius Data Protection Act 2017 ("Mauritius DPA") and, where applicable, we also apply internationally recognised privacy standards (including the EU/UK GDPR for individuals located in the European Economic Area and the United Kingdom).

1. Controller and Contact Details

Kron Cutting is operated by Osirios Limited

• Business Registration Number (BRN): C23202421
• Registered Address: Le Parc De Mont Choisy, Block A3 S07, 1207-03, Mauritius
• Business Address: Workshop 17, Unity Building, The Precinct, M2, Junction B11, Grand Baie, 31301, Mauritius
• Email: support@kroncutting.com

For purposes of applicable data protection laws, Osirios Limited is the data controller in respect of personal data processed under this Privacy Policy.

2. Definitions

• "Personal Data" means information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data (e.g., collection, storage, use, disclosure).
• "Customer" means the person or entity that creates an account or subscribes to the Service.
• "User" means any individual who accesses or uses the Service, including on behalf of a Customer.

3. Scope

This Privacy Policy applies to Personal Data we process when you:

• visit our website;
• create an account or use the Service;
• start or use a free trial;
• subscribe to a monthly or yearly plan;
• contact us for support, sales, or other enquiries; and/or
• receive communications from us.

This Privacy Policy does not cover the privacy practices of third parties that we do not own or control.

4. Personal Data

We collect Personal Data in the following ways:

4.1 Data you provide to us

• Account and profile data: first name, last name, job title/role, phone number, email address, and (if provided) company name and other account information.
• Communications: content of messages you send to us (e.g., support requests), including attachments you provide.
• Assistant messages: the text of questions you type into the documentation assistant on our website, and the preceding messages in that conversation. See Section 7.3.

4.2 Data collected automatically

When you access or use the Service, we may automatically collect:

• Device and technical data: IP address, browser type, device identifiers, operating system, language settings, and related technical information.
• Usage data and event data: pages/screens viewed, session information, features used, clicks, timestamps, and performance data.
• Audit logs and security logs: records of account activity and system events (including for security monitoring and abuse prevention).

4.3 Billing and payment data

Payments are processed by our payment provider.

We do not normally store full payment card details. We may receive and store limited transaction-related information, such as:

• subscription plan, billing period (monthly/yearly), status (active/cancelled);
• transaction identifiers and confirmations;
• payer information provided by the payment provider (e.g., name, email, country) and invoice-related details as applicable.

5. How We Use Personal Data

We process Personal Data for the following purposes:

• To provide and operate the Service (account creation, authentication, access control, delivering features).
• To administer subscriptions and billing (activation, renewals, cancellations, invoicing, and refunds processed via the payment provider).
• To provide customer support and respond to enquiries.
• To answer questions about the Service through the documentation assistant, and to identify gaps in our documentation.
• To secure and protect the Service (fraud prevention, abuse detection, incident response, enforcing access controls, maintaining logs).
• To analyse and improve the Service (analytics, troubleshooting, performance monitoring, development of new features).
• To communicate with you about the Service (service messages, security notices, policy updates).
• To send marketing communications where permitted by applicable law and in accordance with your preferences/opt-out choices.

6. Legal Bases for Processing

Depending on your location and the applicable law, we rely on one or more of the following legal bases:

• Contract performance: processing is necessary to provide the Service, administer your account and subscription, and deliver requested support.
• Legitimate interests: processing is necessary for our legitimate interests such as securing and improving the Service, preventing fraud/abuse, and operating our business—balanced against your rights and interests.
• Consent: where required (e.g., certain cookies/analytics in some jurisdictions; certain marketing communications). You may withdraw consent at any time where it applies.
• Legal obligation: processing is necessary to comply with legal and regulatory obligations (e.g., accounting/tax, lawful requests).

7. Cookies, Analytics, and Website Tools

7.1 Cookies

We use cookies and similar technologies to:

• enable core website and Service functionality (e.g., session management);
• remember preferences;
• improve performance and security; and
• measure and understand how the Service is used.

You can control cookies through your browser settings. If you disable cookies, some features may not function properly. See our Cookie Policy for the specific technologies used on this website and how to change your choice.

7.2 Google Analytics

We use Google Analytics to help us understand how visitors and users interact with the website and Service, including usage patterns, session information, and aggregated metrics. Google Analytics may use cookies and similar technologies to collect information such as IP address and device/usage data.

Where required by applicable law, we implement mechanisms to obtain consent for analytics cookies and/or provide appropriate cookie controls.

7.3 AI Documentation Assistant

Our website offers an optional chat assistant that answers questions about the Service from our own published documentation. Using it is entirely voluntary; the rest of the website and the Service work without it.

• What is sent. When you send a message, the text of that message and the earlier messages of the same conversation are sent to our server and from there to the providers named in Section 8.1, which generate the reply. We also send the page you are on and your browser's language setting. We do not send your name, email address, account identifier, or IP address with the message.
• Where the conversation is stored. Your conversation is stored in your own browser (local storage) so that it survives closing the tab. It is not stored in an account. You can delete it at any time with the "Clear conversation" control in the assistant panel, or by clearing your browser's site data. Please note that on a shared or public computer, the conversation remains visible to the next person until it is cleared.
• Questions we could not answer. Where the assistant cannot answer from the documentation, we may retain the text of that question for approximately three months so that we can see where our documentation needs to be improved. Email addresses and phone numbers are removed from the text before it is stored, and no IP address, account identifier, or conversation history is stored with it. The question is otherwise kept as you wrote it, so please do not type information into the assistant that you would not want retained.
• No training. We do not use assistant conversations to train any artificial-intelligence model, and we have not enabled prompt retention with the gateway provider. The providers process the content in order to generate the reply, under their applicable terms.
• Accuracy. The assistant produces automated answers and can be wrong or incomplete. It cites the documentation pages its answers are drawn from so you can check them, and it is not a substitute for our published documentation, these policies, or advice from our team. Nothing you type into the assistant reaches a member of our team; to contact us, use the contact form or the addresses in Section 16.
• Legal basis. Where the EU/UK GDPR applies, we rely on our legitimate interests in answering visitors' questions and in improving our documentation (Section 6).

8. How We Share Personal Data

We may share Personal Data with:

8.1 Service providers (processors)

We use third-party service providers that process Personal Data on our behalf to help operate the Service (e.g., hosting/infrastructure, email delivery, analytics, support/ticketing, monitoring/security, and the artificial-intelligence providers described below). These providers are authorised to process Personal Data only as necessary to provide services to us and subject to contractual obligations.

For the documentation assistant described in Section 7.3, the content of your messages

• OpenRouter, Inc. (United States) — the gateway through which we reach the language model; and
• Anthropic PBC (United States) — the provider of the language model that generates the reply.

If we change the model we use, the provider may change; we will update this list when it does.

8.2 Payment processing

We share necessary information with Payment Provider to process payments, manage subscriptions, and handle refunds in accordance with our policies.

8.3 Legal and protection purposes

We may disclose Personal Data if we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, or a lawful request;
• protect the rights, property, and safety of Osirios, our users, and the public;
• investigate and help prevent fraud, security incidents, or misuse; or
• enforce our agreements and policies.

8.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, Personal Data may be transferred as part of that transaction, subject to appropriate safeguards.

We do not sell Personal Data in the ordinary commercial sense.

9. International Transfers

Osirios Limited is established in Mauritius. The Service may involve processing and storage of Personal Data in Mauritius and other countries where we or our service providers operate. Those countries may have different data protection laws.

Where required, we implement appropriate safeguards for cross-border transfers (for example, contractual protections and other recognised safeguards).

10. Data Retention

We retain Personal Data only for as long as necessary for the purposes described in this Privacy Policy, including:

• providing the Service and support;
• maintaining security and logs;
• complying with legal obligations (e.g., tax/accounting); and
• resolving disputes and enforcing agreements.

Assistant questions retained under Section 7.3 are kept for approximately three months.

Retention criteria include the length of your relationship with us, the nature of the data, and legal requirements. After account termination, we may retain certain data for a limited period to support account recovery, maintain security, comply with legal obligations, and handle billing/records. Backup copies may persist for a limited additional period due to technical backup cycles.

11. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Data against unauthorised access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure.

You are responsible for maintaining the confidentiality of your login credentials and for activities occurring under your account.

12. Your Rights

Subject to applicable law (including the Mauritius DPA, and where applicable EU/UK GDPR), you may have rights to:

• request access to your Personal Data;
• request correction of inaccurate or incomplete Personal Data;
• request deletion of Personal Data (subject to lawful retention requirements);
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent; and/or
• request data portability where applicable.

To exercise your rights, contact support@kroncutting.com. We may request verification of your identity before responding.

You may also have the right to lodge a complaint with the relevant supervisory authority (including the Mauritius Data Protection Commissioner and, if applicable, your local EU/UK supervisory authority).

13. Marketing Communications

We may send marketing communications where permitted by law. You can opt out at any time by:

• using an unsubscribe link (if included in the message), or
• emailing support@kroncutting.com with an opt-out request.

Opting out of marketing does not affect essential service communications (e.g., billing notices, security alerts, and important updates).

14. Children

The Service is not intended for individuals under 18 years of age. We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data to us, contact support@kroncutting.com.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date at the top. Continued use of the Service after changes become effective means you acknowledge the updated Privacy Policy.

16. Contact

For privacy questions or requests, contact: support@kroncutting.com.

Osirios Limited

• Registered Address: Le Parc De Mont Choisy, Block A3 S07, 1207-03, Mauritius
• Business Address: Workshop 17, Unity Building, The Precinct, M2, Junction B11, Grand Baie, 31301, Mauritius