Privacy policy

Effective 8 September 2026

The short version. Kairis never receives, stores, or reads your email. The service runs inside the AI app you already use (Claude or ChatGPT), which reads your mailbox through its own connector. Kairis only delivers instructions to that app. The personal data we hold about you is limited to what is needed to issue and check your license: at most an email address, which AI app you use, and timestamps.

1. Who we are

Kairis is an early-stage service operated by its founders, private individuals based in the Netherlands, who together act as the controller for the personal data described in this policy. Contact: hello@kairis.tech. The identity of the responsible persons is available on request. If a legal entity takes over the operation of Kairis, we will update this policy and notify license holders by email.

2. What Kairis does, and what it does not do

Kairis is a remote server that provides instruction packs (rules for prioritising email and drafting replies) to your AI application over the Model Context Protocol. Your AI application, using your own mailbox connector, reads your email and applies those instructions. Your email is processed by your AI application provider under their terms, not by us.

3. Personal data we process

DataWhyLegal basisRetention
Email address, chosen AI app, request time (self-serve demo only)To send your confirmation link and license key, to prevent duplicate demo keys, and to contact you about your demo and licensePerformance of a contract (art. 6(1)(b) GDPR)Unconfirmed requests: 24 hours. Confirmed: for the life of the license plus 12 months
License record: a cryptographic hash of your key, an organisation or account name, creation and expiry dates, statusTo validate your license on every requestPerformance of a contractLife of the license plus 12 months
Sign-in data: OAuth client registrations, grants, hashed tokensTo keep you signed in from your AI applicationPerformance of a contractUntil the token or grant expires or is revoked (at most 1 year)
Request log: the first 8 characters of your key hash, the name of the tool called, and a timestampSecurity, abuse prevention, and understanding usageLegitimate interest (art. 6(1)(f) GDPR)A few days, in our hosting provider's log retention
Anti-abuse signals on the sign-up form (IP address, browser characteristics, processed by Cloudflare Turnstile and rate limiting)To stop automated abuseLegitimate interestNot stored by Kairis; see Cloudflare's policy for their retention
Emails you send us at hello@kairis.techTo answer youLegitimate interestAs long as needed to handle your request

We do not use analytics or advertising trackers on our pages, and we do not sell or share personal data for marketing.

4. Who we share data with

We use a small number of service providers who process data on our behalf under data processing agreements:

Your AI application provider (for example Anthropic or OpenAI) and your mailbox provider are not our processors. They process your data under your own agreements with them.

5. Where data is stored

License and sign-in records are stored in Cloudflare's distributed key-value storage, which replicates globally to serve requests quickly. Records contain no mailbox content and, for most license holders, no personal data beyond an account name.

6. Your rights

Under the GDPR you can ask us to access, correct, delete, or restrict the personal data we hold about you, to receive it in a portable format, and to object to processing based on legitimate interest. Write to hello@kairis.tech; we respond within one month. Deleting your license record ends your access to Kairis. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

7. Security

License keys are stored only as SHA-256 hashes and cannot be recovered from our records. Access tokens are stored hashed. All connections use HTTPS. The Kairis server holds no mailbox credentials, so a compromise of Kairis could not expose your email.

8. Children

Kairis is intended for professional use by adults. We do not knowingly process data of anyone under 18.

9. Changes

We will post changes to this policy on this page and update the effective date. For material changes we will notify license holders by email where we have an address.

Connect Kairis · Privacy policy · Terms of service · hello@kairis.tech