Version 1.0 — 13 September 2026.
Richard Willingham, trading as Kyron BCP, 1 Silverdale Drive, Herne Bay, CT6 7BW, United Kingdom. For privacy enquiries, email info@kyronbcp.com.
The desktop edition stores plans on your computer. It does not upload plan contents to Kyron during activation or normal planning. The built-in planning helper uses packaged guidance; it does not send your questions to an external AI service. Exported backups and PDFs remain under your control. Cloud folders, device backups or files you share may be processed by services you choose independently.
The browser demonstration stores its draft in that browser. Clearing browser storage may remove it. Its draft is separate from the main workspace. Website hosting receives connection information even when plan contents stay local. OpenAI Sites also provides automatic traffic analytics, including unique-visitor and page-view counts over time. This is separate from the contents of your locally stored plan. See https://learn.chatgpt.com/docs/sites for the hosting platform’s description.
When checkout says “Sold through Onelink”, Stripe Managed Payments acts as merchant of record and handles payment, tax, refund and payment-support information under its own privacy notice (https://stripe.com/gb/privacy). Richard Willingham remains responsible for Kyron software support and the licence-delivery records described here. Stripe collects payment and checkout details. Kyron uses the purchase reference, product, payment status and licence record to verify payment, issue a licence and provide repeat downloads. The delivery database stores a purchase reference, signed entitlement and creation date. Kyron does not need your full card number or security code. Payment records and contact details may be accessible through the seller’s Stripe dashboard.
If you contact us, we receive your email address and the information you send. Please omit confidential plan contents and never send card details or passwords. Technical hosting logs may include connection details such as IP addresses, timestamps and request information.
Purchase and requested support information is used to perform the contract with you or take requested steps before purchase. For organisational customers’ contacts, the relevant legitimate interest is administering that organisation’s purchase and support. Security checks and fraud prevention support the legitimate interest of protecting customers and the service. Records required by applicable accounting or other law are kept to meet legal obligations.
The delivery service uses Render. The support mailbox uses Microsoft 365 supplied through GoDaddy. The website uses OpenAI Sites. These services may process connection, purchase or support information outside the UK; storing plans locally does not mean that all purchase or support information stays in the UK.
Render’s data processing addendum includes provisions for UK transfers: https://render.com/dpa. GoDaddy’s addendum describes its UK transfer terms: https://www.godaddy.com/en-uk/legal/agreements/data-processing-addendum. Microsoft describes Microsoft 365 international-transfer safeguards at https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-dpia-office365. These documents explain provider arrangements; they do not mean your data is stored exclusively in the UK. Contact info@kyronbcp.com to request information about safeguards applicable to your data.
OpenAI’s Sites terms incorporate its data processing addendum for hosted personal data. The addendum includes UK international-transfer safeguards through the UK Addendum to the standard contractual clauses. Sites does not currently offer a choice of data residency. See https://openai.com/policies/chatgpt-sites-terms/ and https://openai.com/policies/data-processing-addendum/.
Plan files and exports remain on your devices until you delete them; any independent backup or cloud service you choose may retain copies under its own settings.
We retain the minimal purchase-reference and entitlement record while we provide licence recovery and repeat downloads for that purchased major version. We review those records when that service ends and delete records no longer needed for an unresolved support matter, dispute or legal obligation. Removing a delivery record does not erase or invalidate an offline licence already saved on your computer.
Routine software-support correspondence is reviewed for deletion 24 months after the matter closes. Messages still needed for an active dispute, security investigation or legal obligation are retained for that purpose and reviewed when it ends. We do not ask you to send complete business continuity plans for routine support.
Accounting and transaction records are kept for the period required for the relevant record and accounting period under applicable law. Stripe also retains information for its own payment, fraud-prevention and legal purposes under its privacy notice.
Hosting providers retain technical records as needed to operate, secure and troubleshoot their services and meet legal obligations under their applicable agreements. We do not promise a fixed deletion period for provider-controlled records. Any log information we separately retain for an investigation is reviewed when that investigation closes and deleted when it is no longer needed. Our delivery backup rotation removes copies older than 30 days following a successful verified backup. Backups are restricted to recovery use; deletion requests affecting retained records are reapplied if a backup is restored.
Depending on the circumstances and applicable law, you may request access, correction, deletion, restriction or portability of your personal information and object to processing based on legitimate interests. Rights have exceptions, including where records must be retained by law. Contact info@kyronbcp.com with your request; we may need proportionate information to verify identity. We cannot retrieve or erase plan files held only on your device.
You may complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or another competent supervisory authority. Contacting us first does not remove that right.
The delivery service automatically checks payment status before issuing licences and downloads. Contact us if a paid purchase cannot be verified. The planning helper does not make operational decisions for your organisation.