Data Requests
Exercise your GDPR rights for data processed by Kernion on agency.kernion.io.
If Kernion processes personal data about you through agency.kernion.io (for example, because you signed up for a trial, emailed support, or used the demo chat), you can ask us to honor any of the following rights. We respond to verified requests within 30 days, as required by Art. 12(3) GDPR.
If your question is about a Kernion customer (a business that
uses our platform to talk to you), that customer is the data controller for
their end-user data. In that case, the faster route is to send your request to
the customer directly — their site will have its own /legal/dsr page. You can still tell us, and we will forward your
request to the right operator.
Your rights
Pick the right that fits, then use the linked button to send us a structured email:
- Access (Art. 15) — get a copy of the personal data we hold about you, and information on how we process it.
- Rectification (Art. 16) — correct inaccurate data.
- Erasure (Art. 17) — delete your personal data, subject to legal retention obligations we have to meet (e.g. tax law requires invoice retention for 10 years).
- Restriction (Art. 18) — limit how we process your data while a question about accuracy or necessity is resolved.
- Portability (Art. 20) — receive your data in a structured, machine-readable format.
- Objection (Art. 21) — object to processing based on legitimate interest, or to direct marketing (we act on direct-marketing objections without asking why).
- Opt-out of AI training — request written confirmation that your data is not used to train AI models. We do not send data for training; this is a formal written receipt.
Or, send one email
If the rights above don't map neatly, email hello@kernion.io with the
subject prefix [DSR] and a short description. Include the email
addresses and any identifiers (order number, trial account, phone number) so we
can verify you without asking follow-up questions.
Verification
Before we act on a request that would reveal or change personal data, we verify the requester. Usually this is done by asking you to reply from the email address the data is linked to. For requests that touch billing or account data, we may ask for a second confirming signal.
Complaints
If you are unhappy with how we handle your request, you have the right to lodge a complaint with your local data-protection supervisory authority (e.g. the BfDI in Germany, the CNIL in France, AZOP in Croatia). We'd prefer to hear from you first — a lot of complaints turn out to be fixable if we know about them.