How we source intelligence, handle data, and maintain enterprise-grade standards across every engagement. Last updated: October 23, 2026.
Kairos Intelligence is committed to the responsible handling of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection legislation. GDPR obligations extend to the processing of personal data relating to individuals in the European Economic Area.
We process personal data under the following lawful bases: legitimate interests, where processing is necessary for our intelligence services and does not override the fundamental rights of data subjects; contract performance, where processing is required to deliver intelligence reports to clients; and legal obligation, where applicable law requires processing.
You have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to processing based on legitimate interests, request restriction of processing, and request data portability where technically feasible. To exercise any of these rights, contact: hello@kairosintel.co. We respond to verified requests within 30 days.
Client data is deleted on written request, unless a longer retention period is required by applicable law.
Kairos Intelligence does not sell personal data. To ask for a copy of the personal data we hold about you, or for its deletion, email hello@kairosintel.co. We respond within 30 calendar days, as set out in our privacy policy.
To stop receiving email from Kairos Intelligence, write to hello@kairosintel.co.
Buying signals come from public sources, company announcements and verified reporting, read and interpreted by Kairos's own proprietary detection layer each time a report runs. Contact details in reports, including work emails and mobile numbers, are licensed from paid data vendors and aggregators under agreements permitting their use in the service. We do not access protected systems or collect data through deceptive means.
We do not collect private or confidential communications, data obtained through unauthorised access to protected systems, or any information obtained through misrepresentation. All signal data is processed to identify organisational buying activity — not to surveil private individuals.
A Data Processing Agreement (DPA) is available to every client on request. The DPA documents the categories of personal data processed on behalf of the client, the purposes and duration of processing, sub-processors engaged in service delivery, data subject rights procedures, security measures and incident notification obligations, and cross-border data transfer mechanisms where applicable.
To request a DPA, contact: hello@kairosintel.co. Standard DPA turnaround is five business days from a verified request. The DPA is provided at no additional charge.
All data in transit is encrypted via TLS 1.2 or higher. The website is hosted on Vercel, which maintains SOC 2 Type II certification; the product runs on Railway. Email communications are secured with DKIM, SPF, and DMARC authentication. Internal communications use Google Workspace, which is ISO 27001 certified.
The principle of least privilege is applied across all internal systems. Client report data is delivered via encrypted channels. Client data is segregated by engagement — no cross-client data is shared or referenced.
In the event of a data incident affecting client data, Kairos Intelligence will notify affected clients within 72 hours of becoming aware of the incident, consistent with GDPR notification requirements. A post-incident summary is provided upon request.
A list of sub-processors engaged in service delivery is available upon request alongside the Data Processing Agreement. All sub-processors are selected for their enterprise-grade security standards.
Kairos Intelligence operates according to a set of core principles governing how intelligence is gathered, processed, and delivered.
Every signal we use is drawn from public sources. We do not surveil individuals or track private behaviour. Our intelligence concerns organisational buying activity, not personal profiling.
We prioritise signal accuracy over signal quantity. A report is not padded to reach a target count.
We do not engage in social engineering, impersonation, or deceptive information gathering of any kind. Buying signals are gathered from publicly accessible sources, and contact details are licensed from paid data vendors and aggregators under agreements permitting their use in the service.
Intelligence delivered to clients is treated as confidential. We do not reference, share, or repurpose client engagement data across separate engagements.
Any organisation that contacts us requesting removal from our intelligence reports is removed within five business days. Contact: hello@kairosintel.co.
Reports are generated by an automated pipeline from public signal sources and licensed contact data. Every opportunity is built on a dated event with a linked source, and its factual sentences are checked against those sources before delivery. A company is profiled only when its website is confirmed to be that company. There is no human review step between generation and delivery — see the AI Usage Disclosure below.
Before a report is produced, it passes through an automated validation stage. A report that fails validation is blocked and not delivered. Targets rejected during validation are dropped rather than carried through to reach a volume target.
A report is generated each time you press Run in the dashboard, or on a weekly or two-weekly schedule you set. Your plan sets how many runs you have each month and the minimum number of days between runs, so each report brings you new signals, not the ones you have already seen. Unused runs do not carry over to the next month.
Kairos Intelligence uses AI-assisted tools as part of its signal processing and report drafting workflow. The following disclosures apply.
AI tools perform signal aggregation, pattern recognition across public data sources, and narrative drafting. Reports are generated and delivered automatically, without a human review step. The triggering event, buyer profile, estimated buying window, and outreach angle in each report are produced by this AI-assisted pipeline from the public sources described above.
AI does not access private, confidential, or protected systems. Inputs to AI tools are drawn from the sources described in the Intelligence Sources section. No client ICP data, target company data, or engagement data is used to train third-party AI models without explicit written consent.
Where third-party AI services are engaged as sub-processors, they are selected for enterprise-grade data handling standards, including data isolation and non-training commitments. Details of AI sub-processors are available alongside the Data Processing Agreement upon request.
For GDPR rights requests, DPA enquiries, security documentation, or any data responsibility question, contact our team directly.
hello@kairosintel.coRelated Documents