Privacy Policy

1. Who is responsible for your data?

Kairos is operated by SRX Sas di Renzo Giust & C., Via Calazze 31, 31043 Fontanelle (TV), Italy.

For privacy questions or requests, contact info@kairosritual.com.

2. What this policy covers

This policy covers the Kairos website at kairosritual.com and the private Kairos Telegram bot. It does not replace the privacy policies of Telegram, Stripe, OpenAI, Cloudflare, or other services that process data independently under their own terms.

3. Information we collect

Website

The website is a static information site. It does not currently use contact forms, newsletters, analytics, advertising pixels, or non-essential cookies. It stores your language choice in your browser’s local storage when you switch between English and Italian.

Telegram bot

When you use the bot, we may collect and store:

• Telegram user ID and available Telegram account details
• First name, optional second name, surname, and optional everyday name
• Date of birth
• Time zone, preferred language, and delivery-time preference
• Privacy-consent record
• Subscription, trial, and payment-related identifiers
• Delivery records for daily and weekly readings
• Feedback and optional notes you choose to send

4. Why we use your information

We use it to:

• create and maintain your Kairos profile;
• generate and deliver personalized daily readings and weekly outlooks;
• deliver messages in your chosen time window and language;
• provide the free trial and manage subscriptions and payments;
• prevent duplicate deliveries and keep the service reliable;
• respond to feedback and privacy requests; and
• meet legal, accounting, and security obligations.

5. Legal bases

Depending on the purpose, we rely on:

• Contract: to provide the bot, trial, subscription, and requested readings.
• Consent: to collect your profile and birth date and to send relevant profile information to OpenAI for personalized readings.
• Legal obligation: to keep records required for tax, accounting, and payment obligations.
• Legitimate interests: to secure, maintain, and improve the service without overriding your rights.

6. AI-generated readings

To generate personalized readings, we send relevant profile information, including names and date of birth, together with the target date and language instructions, to OpenAI through its API.

We do not send your Telegram user ID, consent timestamp, payment information, or subscription internals to OpenAI. OpenAI sharing settings for model feedback, evaluation, fine-tuning, and inputs/outputs are disabled for the Kairos organization, as shown in our current account settings. OpenAI processes API data under its applicable API terms and privacy documentation.

Kairos uses AI for symbolic interpretation and writing. Readings are not medical, psychological, legal, or financial advice.

7. Who receives your information?

We share only what is needed with service providers that help us operate Kairos:

• Telegram delivers bot messages and provides the Telegram account information needed to operate the chat.
• OpenAI processes the limited profile and date information needed to generate readings.
• Stripe processes subscriptions and payments. Kairos does not store your full card number.
• AWS hosts the bot application and PostgreSQL production database.
• Cloudflare hosts and serves this static website.
• Google provides Google Analytics 4 when you give analytics consent.

These providers may process information outside the European Economic Area. Where required, transfers rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

8. How long we keep information

• Profile data is kept while your account is active and until you request deletion.
• Generated readings and feedback are kept for up to 12 months.
• Delivery and operational logs are kept for up to 12 months where possible.
• Payment and accounting records are kept for the period required by law.

When you request deletion, we aim to complete it within 30 days. Backups may retain limited data until their normal rotation, and legally required records may be retained for longer.

9. Your rights

Subject to GDPR conditions and exceptions, you may ask us to access, correct, delete, export, or restrict use of your personal data. You may also object to certain processing or withdraw consent. Withdrawal does not affect processing that took place before withdrawal or processing based on another legal basis.

Send requests to info@kairosritual.com. We may need to verify your identity before acting.

You may also complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali).

10. Age requirement

Kairos is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can review and delete it where appropriate.

11. Security

We use reasonable technical and organizational measures to protect personal data. No online service can guarantee absolute security. Access to operational data is limited to what is needed to run and support Kairos.

12. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. The updated version will be published on this page with a new effective date.