Privacy Policy — Koios

Data controller

Octocube — Olivier Caetano, sole trader, 1A rue des Chaneaux, 63200 Marsat, France. SIREN 451 182 596. Publisher of the Koios application. Contact: contact@octocube.fr.

Data processed

• Account — email address, account identifier and account creation date. Authentication is handled by Supabase Auth: the publisher does not store your password and has no access to it.
• Ideas and project descriptions — the project name, the problem addressed, the intended audience, the market and the competitive information you enter, together with any text you add to describe your idea. This content is what you choose to submit for analysis.
• Generated analyses and verdicts — the summaries, assumptions, checkpoints and verdicts produced by the application from your input, stored in your account so that you can find them again.
• Technical data — error logs, application version, operating system and device type, used to operate the service and resolve technical issues.
• Support communications — the content of messages you send to us and the email address used.

Koios does not request access to the location of your device. The application does not collect your contacts, does not use advertising identifiers for profiling or advertising purposes, and does not perform advertising profiling.

Purposes and legal bases

• Create and manage your account and provide analysis features — performance of a contract.
• Ensure security, stability and troubleshooting — legitimate interest.
• Respond to support requests — performance of a contract and legitimate interest.
• Comply with legal, accounting and tax obligations — legal obligation.

Processing by AI models

Koios analyses rely on the Claude model, provided by Anthropic. The ideas and project descriptions you enter are transmitted to it to be interpreted, analysed and summarised, then returned in the form of an analysis within the application. This transmission is necessary for the service to operate: without it, no analysis can be produced.

Under the contractual terms applicable to Anthropic’s API services, content submitted through that channel is not used to train or improve its models. The publisher enables no data-sharing option that would depart from this.

Your ideas are not sold, rented or transferred to third parties, and are never shared with other Koios users: the content of your account is visible only to you and, where you submit a support request, to the publisher.

Web search

To identify existing solutions and document the market, Koios queries Tavily, a third-party web search service. Elements of your request — keywords and phrasing drawn from what you entered — are sent to it as search queries.

Tavily is not an AI model provider. It receives neither your account, nor the full text of your project, nor the analysis produced: only those queries, which it answers with public sources that the application then uses. Tavily is a third-party service with its own privacy policy.

Recipients and service providers

Data is not sold, rented or transferred for advertising purposes. It may be accessed by the publisher and by technical service providers strictly necessary for the operation of the service:

• Anthropic — provider of the Claude model: interpretation, analysis and summarisation of the ideas and descriptions you submit.
• Tavily — third-party web search service: receives the search queries built from your request and returns public sources.
• Supabase — authentication, database and storage of accounts, submitted ideas and generated analyses.
• Cloudflare — hosting and execution of the API Workers and of the application’s workflows.

Where certain providers process data outside the European Economic Area, transfers are handled in accordance with applicable regulations, including through appropriate contractual safeguards where required.

Data retention

• Account, submitted ideas and associated analyses: retained for the duration of use of the service and until the account is deleted or deletion is requested by the user, subject to applicable legal retention obligations.
• After a deletion request: processed as soon as reasonably possible and no later than 30 days.
• Technical logs and support communications: retained for as long as necessary to process the request and monitor technical issues, then deleted.

Certain data may be retained for longer where required by law or where necessary for the establishment, exercise or defence of legal claims.

Security

Communications between the application and our services are encrypted in transit using HTTPS/TLS. Administrative access is restricted to the publisher and protected by authentication and access-control mechanisms. Data is hosted by professional service providers that apply their own security measures.

Your rights

You have rights of access, rectification, erasure, restriction, objection and data portability in relation to your personal data. These rights may be exercised from within the application or by email: contact@octocube.fr.

Account and associated data deletion is described step by step on a dedicated page.

You may also lodge a complaint with the French data protection authority, the CNIL (opens in a new tab).

Minors

Koios is intended for professional use and is not intended for persons under the age of 18.

Scope of analyses

Koios structures a line of thinking and documents assumptions. The analyses and verdicts it produces are decision-support material provided for information only: they do not constitute investment advice, legal advice or business-formation guidance, and they do not guarantee that a project will succeed. Users remain solely responsible for their decisions.