Privacy Policy

1. Introduction

Welcome to Kairos (usekairos.cloud) ("we," "us," or "our"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy describes how we collect, use, and share your personal information when you use our AI-driven cloud monitoring and alerting SaaS platform.

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our service to you:

• Account Data: When you create an account, we collect your email address, name, and securely hashed passwords through our authentication provider, Supabase Auth.
• Monitor Configuration Data: We store the configurations you create, including target URLs, prompts, schedules, and specific monitor settings.
• Run & Alert History: We maintain logs of execution results, scraped data, and AI-generated alerts resulting from your configured monitors.
• Usage/Analytics Data: Through PostHog, we collect information on how the service is accessed and used, including pages viewed, features interacted with, device information, browser type, and IP addresses.
• Payment Data: All payment processing is handled by Paddle, our Merchant of Record. We do not directly collect, process, or store complete payment card details.
• Cookies & Tracking Technologies: We use cookies and similar tracking technologies to track activity on our service and hold certain information for essential functionality and analytics.

3. How We Use Your Information

We use the collected data for various purposes, including:

• To provide, maintain, and deliver our services to you
• To process your payments and manage billing
• To monitor usage, analyze trends, and improve the platform
• To detect, prevent, and address technical issues and security breaches
• To communicate with you about updates, support, and account-related matters
• To comply with our legal obligations and enforce our agreements

4. AI Data Processing

As an AI-driven platform, your configured monitors (including URLs and prompts) may be processed by our third-party AI providers to generate insights and alerts. We explicitly require that our AI providers do not use your configuration data, prompts, or execution results to train their foundational models. Your data remains yours and is solely used to fulfill your specific monitoring requests.

5. Third-Party Service Providers

We employ third-party companies and individuals to facilitate our service. These selected third parties have access to your personal data only to perform specific tasks on our behalf:

• Supabase: Provides our database and authentication infrastructure. (Privacy Policy)
• Paddle: Acts as our Merchant of Record for billing and payment processing. (Privacy Policy)
• PostHog: Provides product analytics to help us understand usage patterns. (Privacy Policy)
• AI/LLM Providers: Various AI providers process your monitor inputs to deliver intelligent alerts.

6. Data Sharing & Disclosure

We do not sell your personal information. We only share your data with trusted service providers as detailed above, in response to lawful requests by public authorities (including national security or law enforcement requirements), or in connection with a merger, acquisition, or sale of company assets.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. When you close your account, we will delete or anonymize your personal information, monitor configurations, and run history in accordance with our deletion policies, unless further retention is legally required.

8. Data Security

We take the security of your data seriously. We implement industry-standard security measures, including encryption in transit and at rest, strict access controls, and regular security audits. In the event of a data breach, we have incident response procedures in place to mitigate impact and notify affected users promptly.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access, update, or delete the information we have on you
• The right of rectification if your information is inaccurate or incomplete
• The right to object to our processing of your personal data
• The right to data portability (receiving a copy of your data in a structured format)
• The right to opt-out of optional analytics tracking (configurable in your account settings)

10. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. By providing your information to us, you consent to this transfer.

11. Children's Privacy

Our service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information.

12. GDPR/CCPA Compliance

For users in the European Economic Area (EEA), we process your data based on legitimate interest, consent, or contractual necessity. We comply with data subject rights under the GDPR. For California residents, we comply with the CCPA. We do not sell your personal data. To exercise your "Do Not Sell" or other regulatory rights, please contact us.

13. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email or a prominent notice on our service before the change becomes effective.

14. Contact

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to contact our Data Protection Officer (DPO), please email us at support@usekairos.cloud.