This Privacy Policy explains how КСОР ("КСОР", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use the КСОР platform, websites, applications, AI employees, and related services (the "Service"). By using the Service you agree to this Policy. If you do not agree, do not use the Service.
1. Information we collect
- Account information — such as your name, email address, password, organization, and, for paid plans, billing details (processed by our payment processors; we do not store full card numbers).
- Content and inputs — the prompts, files, instructions, messages, and other data you or your AI employees submit, and the outputs generated for you ("Customer Content").
- Connected services — credentials and data you authorize the Service to access from third-party tools and providers you connect.
- Usage and device data — log data, IP address, browser and device information, pages and features used, and timestamps, collected automatically to operate and secure the Service.
- Cookies and similar technologies — used for authentication, preferences (such as language), and analytics. See Section 9.
2. How we use information
- to provide, operate, maintain, and secure the Service;
- to process your inputs through AI model providers and connected tools so your AI employees can perform the tasks you request;
- to process payments, manage subscriptions, and prevent fraud;
- to provide support, send service and transactional communications, and, where permitted, product updates;
- to monitor, troubleshoot, analyze, and improve the Service and develop new features;
- to comply with legal obligations and enforce our Terms.
We do not use your Customer Content to train foundation models for unrelated third parties. Where we use service providers and model providers to process your data, we do so to deliver the Service to you.
3. AI processing and model providers
To generate outputs, the Service sends your inputs and relevant context to third-party AI model providers and tools acting as our subprocessors. These providers process the data to return a result and are contractually limited in how they may use it. You should not submit information you are not authorized to share, and you are responsible for the content you submit and the actions your AI employees take.
4. How we share information
We do not sell your personal information. We share it only:
- with service providers and subprocessors (such as hosting, model, payment, analytics, and communication providers) who process data on our behalf under appropriate confidentiality and data-protection obligations;
- with third-party tools you connect, at your direction;
- when required by law or to respond to lawful requests, protect our rights, safety, and property, or investigate fraud or abuse;
- in connection with a merger, acquisition, financing, or sale of assets, in which case we will seek to ensure the recipient honors this Policy;
- with your consent or at your direction.
5. Legal bases (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we process personal information on the legal bases of performance of our contract with you, our legitimate interests in operating and improving the Service, compliance with legal obligations, and your consent where required. You may object to processing based on legitimate interests as described below.
6. Data retention
We retain personal information for as long as your account is active and as needed to provide the Service, then for the period necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may delete or anonymize Customer Content after account termination, subject to legal retention requirements and backups that age out on a rolling basis.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, to object to certain processing, and to withdraw consent. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising your rights; we do not sell or "share" personal information as those terms are defined under that law. To exercise any right, contact us at support@xsor.ru. We will respond as required by applicable law and may need to verify your identity. You may also have the right to lodge a complaint with your local data-protection authority.
8. International transfers
We and our service providers may process and store information in countries other than your own, including the United States. Where required, we use appropriate safeguards, such as standard contractual clauses, for cross-border transfers of personal information.
9. Cookies
We use strictly necessary cookies for authentication and core functionality, preference cookies (for example to remember your language), and, where permitted, analytics cookies to understand how the Service is used. You can control non-essential cookies through your browser settings; disabling some cookies may affect functionality.
10. Security
We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.
11. Children
The Service is not directed to children, and you must be at least 18 years old to use it. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@xsor.ru and we will take appropriate steps to delete it.
12. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide notice, for example by posting the updated Policy with a new effective date or by notifying you through the Service. Continued use after the changes take effect constitutes acceptance.
13. Contact
For privacy questions or to exercise your rights, contact us at support@xsor.ru.