Effective 16 July 2026 · Plain language, on purpose. Questions any time: privacy@kaixon.ai
Kaixon is a product of Radius Studios LLC ("Kaixon", "we", "us"), a Wyoming, USA limited liability company, registered at 30 N Gould St Ste N, Sheridan, WY 82801, USA. For anything about your personal data or this notice, contact us at privacy@kaixon.ai.
We are the controller of the personal data described here — meaning we decide why and how it is used — except where we act as a processor for a subscriber's own content (see section 9).
Because we offer services to people in the EU from outside the EU, we have appointed an EU representative under Article 27 GDPR. You can contact them about your data, or about this notice, instead of contacting us directly:
Prighter EU Rep GmbH (Prighter Group)
Schellinggasse 3/10, 1010 Vienna, Austria
The easiest way to reach our representative and exercise your privacy rights (for example, to access or erase your data) is via Prighter's portal: https://app.prighter.com/portal/17396978414
We are not legally required to appoint a Data Protection Officer, and we have not appointed one. You can reach the person responsible for privacy directly at privacy@kaixon.ai.
This notice explains what personal data we collect when you use kaixon.ai — the free compliance self-assessment, the waitlist, and paid subscriptions — and what your rights are. It does not cover third-party websites we link to.
We keep data collection to a minimum. The heart of the assessment is information about your business's compliance posture — not personal data about individuals.
| What we do | Personal data | Why (purpose) | Legal basis |
|---|---|---|---|
| Compliance self-assessment & report | Your name, work email, company name, role; technical data (IP/device). Plus your answers about your organisation's practices. | Provide the GDPR / NIS2 / EU AI Act self-assessment and report you asked for; deliver it on screen and as a PDF. | Steps you asked us to take before a contract, and our legitimate interest in providing a service you requested. Email for the report: your consent / a pre-contract step. |
| Waitlist / updates | Your email address. | Send you the confirmation and product updates you signed up for. | Your consent. |
| Billing & subscriptions | Billing name, email, billing address; subscription details. Card data is handled by Stripe — we never see or store it. | Take payment, manage your subscription, issue invoices, and meet tax record-keeping duties. | Performance of our contract with you, and our legal obligations (tax records). |
| Support & operations | Your contact details and any correspondence. | Answer you and run the business. | Our legitimate interest in operating and supporting the service. |
We ask you not to enter special-category data (for example health, or racial or political information) into the form, and we avoid free-text fields that could invite it.
Your readiness score and the gaps we show you are produced by deterministic software — the same answers always produce the same result. No AI model sees your answers, and there is no profiling of you as an individual. The result is an informational self-assessment; it does not produce legal or similarly significant effects about you within the meaning of Article 22 GDPR. You stay in control of what you do with it.
The EU AI Act part of the assessment is a Beta feature, clearly labelled, because those rules are still being phased in — it is informational only.
We use a small set of trusted service providers ("sub-processors") to run Kaixon. Each is bound by a data processing agreement. The always-current list — with regions and transfer safeguards — lives at kaixon.ai/subprocessors; subscribers are notified before we add or replace a sub-processor. At the date of this notice:
We do not sell your personal data or use it for third-party advertising.
Your assessment data is stored in the EU (Belgium and Frankfurt). Some providers above are US-based or have US parent companies; where your data reaches them, the transfer is protected by Standard Contractual Clauses and/or the EU-US Data Privacy Framework. You can ask us for more detail at privacy@kaixon.ai.
When you subscribe, your dashboard and Document Vault let you build and keep your own compliance records. For any personal data you put into those records, you are the controller and we act as your processor — handling it only on your instructions, under our customer Data Processing Agreement, which is included with every subscription.
Under the GDPR you can ask us to: access your data; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time (without affecting earlier processing). To exercise any of these, email privacy@kaixon.ai — it's free, and we'll respond within one month.
You also have the right to complain to your local EU data protection authority. You can find yours via the European Data Protection Board's list of national authorities (edpb.europa.eu). You can also contact our EU representative (section 2).
Encryption in transit (TLS 1.2+) on every step and at rest (AES-256) in our EU database; strict access controls with hardware-key and multi-factor authentication on our core systems; row-level security so each subscriber can only ever reach their own records; and a deliberately small, auditable set of providers. Your report is served over a private link and is not indexed by search engines.
See our separate Cookie Policy for how we use cookies and similar technologies. In short: we use only what's needed to run the site, and any analytics we add will be privacy-friendly and cookieless.
We'll update this notice as Kaixon evolves and note the date at the top. Material changes will be highlighted.
Questions, requests, or complaints: privacy@kaixon.ai · Radius Studios LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA.