Privacy policy
Last updated 3 November 2026
KON AI is a marketing workspace run by Kaiyan Medical ("we") for its own brands, including Kaiyan Medical, Oren Medical and Nuon Medical. This policy explains what information KON AI collects, how it is used, and the choices you have.
Who can use KON AI
KON AI is not open to the public. Accounts are created by our administrators for members of our marketing team. Each team member only sees the brands they have been given access to.
Information we collect
- Account details: your name, work email address, password (stored only as a secure hash) and the brands and role you have.
- Activity in KON AI: what you create and change (tasks, posts, replies, approvals), kept as an activity history for the team.
- Connected accounts: when a team member connects one of a brand's accounts, we store the access granted by that service and the brand's marketing results read from it (see below).
- Website visitors: if a brand adds the KON AI tracking code to its own website, we record page visits and forms filled in on that website, to show the brand which companies show interest.
- Business contacts at interested companies: for a company that showed interest, KON AI looks up the general contact details and the names and job titles of senior staff (for example the CEO or the purchasing manager) that the company publishes on its own website, and, for UK companies, its directors in the official Companies House register. With Apollo (apollo.io), a business contact database, KON AI also finds the names and job titles of senior staff; a team member can choose to look up one person's verified work email or the company's size, one at a time. We only keep an email address for a person if the company published it or Apollo verified it as their work address, and we never collect personal emails or phone numbers. This is used to contact the company about our products and is deleted when the lead is erased; anyone can ask us to remove their details.
Google user data
A team member can connect a brand's Google accounts. KON AI asks only for the access it needs, and uses it only to show that brand's results in KON AI:
- Google Analytics (read only): website visits, traffic sources, top pages and conversions.
- Google Search Console (read only): search queries, clicks, impressions, positions and indexing status of the brand's websites.
- YouTube: the channel's videos, views and audience figures (read only); and, only if the team chooses to, posting a reply to a comment on the brand's own videos after a person has approved it.
- Google Ads and Google Business Profile, when connected: campaign and listing results for the brand.
KON AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google user data is used only to provide and improve the features KON AI shows to the brand that connected it.
- We do not sell Google user data, and we do not use it for advertising.
- We do not use Google user data to train or improve general AI or machine-learning models.
- People cannot read Google user data, except our administrators when you ask for help, when needed for security, or when the law requires it.
- We do not transfer Google user data to others, except as needed to run KON AI (our hosting provider), to comply with the law, or as part of a merger or sale with the same protections.
Other connected services
The same rules apply to the brand's other connected accounts, such as Facebook, Instagram, Threads, LinkedIn, Klaviyo, Bing Webmaster Tools and Reddit: KON AI reads the brand's own results and comments, and only publishes a post or reply after a team member has approved it.
AI features
KON AI uses an AI model (Anthropic's Claude) to summarise results and suggest next steps. The relevant figures are sent to the AI provider to produce a suggestion. Under its commercial terms, the provider does not use this data to train its models. Every suggestion is reviewed by a person before anything is done.
How we keep it safe
- All traffic is encrypted (HTTPS). Access granted by connected services is stored encrypted.
- Each brand's data is kept separate; team members only reach the brands they belong to.
- Changes are recorded in an activity history that cannot be edited.
How long we keep it, and deleting it
- A team member can disconnect a connected account at any time in Settings → Integrations. KON AI then deletes the stored access and stops reading from that service.
- You can also remove KON AI's access from the service itself, for example at myaccount.google.com/permissions for Google.
- Results already read from a service are kept while the brand uses KON AI, so the team can compare periods. To have them deleted, contact us and we will delete them within 30 days.
- When a team member leaves, their account is removed; their past actions stay in the activity history.
Your rights
You can ask us for a copy of your information, to correct it, or to delete it. Contact us using the details below.
Changes to this policy
If we change this policy, we will update the date at the top of this page.
Contact
Kaiyan Medical — Contact. See also our terms of service.