Privacy Policy

Authorm is operated by [PLACEHOLDER: full legal entity name, e.g. Kolmont BV], registered at [PLACEHOLDER: registered address], company number [PLACEHOLDER: company / VAT number] (“Authorm”, “we”, “us”). We are the data controller for the personal data described in this policy.

Questions about this policy or your data can be sent to [PLACEHOLDER: privacy@authorm.app or DPO contact].

We collect different data depending on how you interact with Authorm:

• Demo requests. First and last name, company, role, mobile number and email address, submitted through our demo form.
• Free Authority Scan. The LinkedIn profile URL or public profile information you submit, and the analysis we generate from it (Executive Authority Score, communication style, recommendations).
• Customer accounts. Once you become a customer: your Executive DNA profile (voice, positioning, pillars), content drafts, relationship and reputation data you connect to the platform, and data from any third-party integrations you choose to connect (for example Google, LinkedIn, HubSpot).
• AI provider keys. If you connect your own Claude or OpenAI API key, we store it securely to route your requests to that provider on your behalf. We do not use your key for any purpose other than powering your own Authorm workspace.
• Website usage data. Standard technical and analytics data (pages visited, device/browser type, approximate location) collected via cookies or similar technologies — see Section 8.

We never sell your personal data, and we never use it to train public AI models.

Authorm uses AI to draft content, analyse signals and prepare recommendations on your behalf. Depending on your setup, this processing happens through:

• An AI provider you connect yourself (Claude or OpenAI), under that provider’s own data processing terms; or
• [PLACEHOLDER: if Authorm offers a built-in/managed AI option, describe the model provider(s) used and the data processing agreement in place with them.]

In both cases, the minimum data needed to generate the requested output is sent to the AI provider. We do not permit AI providers to use your data to train their general-purpose models where that option is within our control.

We share personal data only where necessary to run Authorm, with providers such as:

• Hosting and infrastructure: [PLACEHOLDER, e.g. hosting provider]
• Customer relationship / support tooling: [PLACEHOLDER, e.g. CRM, helpdesk]
• Email delivery: [PLACEHOLDER, e.g. email provider]
• AI providers: Anthropic (Claude) and/or OpenAI, where connected
• Integrations you explicitly connect: Google, LinkedIn, HubSpot, or others you choose to authorise

Each of these providers processes data under a data processing agreement and only for the purposes described in this policy. We do not sell or rent personal data to third parties.

Some of our providers (including certain AI providers) are located outside the European Economic Area, for example in the United States. Where this is the case, we rely on recognised safeguards such as the EU Standard Contractual Clauses. [PLACEHOLDER: confirm exact mechanisms once the sub-processor list is finalised.]

• Demo requests and Free Authority Scan submissions: [PLACEHOLDER: e.g. 12 months from last contact if you do not become a customer]
• Customer account data: for as long as your subscription is active, plus [PLACEHOLDER: e.g. 30 days] after cancellation, unless a longer period is required by law
• Marketing consent: until you unsubscribe or withdraw consent

Under GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting past processing;
• lodge a complaint with your local data protection authority — in Belgium, the Gegevensbeschermingsautoriteit / Autorité de protection des données.

To exercise any of these rights, contact us at [PLACEHOLDER: privacy contact email].

Authorm uses essential cookies to run the site and, with your consent, analytics cookies to understand how visitors use it. [PLACEHOLDER: link to a dedicated cookie policy / cookie consent banner configuration, and list actual cookie categories and providers in use, e.g. analytics, session, preference cookies.]

We use industry-standard technical and organisational measures — encryption in transit, access controls, and regular reviews — to protect your data. [PLACEHOLDER: add specifics once finalised, e.g. encryption at rest, SOC 2 status, pen-testing cadence.]

Authorm is intended for business professionals and is not directed at, or knowingly used by, children under 16.

We may update this policy from time to time. Material changes will be announced on this page, with an updated “last updated” date above.

[PLACEHOLDER: full legal entity name], [PLACEHOLDER: registered address] — [PLACEHOLDER: privacy contact email].