Legal document
Data Deletion
How to request erasure of your personal data, how long KAIROS takes to respond, and what may temporarily remain.
- Last updated
1. How to request deletion
You may request erasure of your personal data by writing to:
Provide enough information for us to identify the relationship or data concerned. We may request reasonable additional information to verify your identity and prevent fraudulent deletion requests.
2. Response period
KAIROS will generally respond within the statutory one-month period from receipt of the request.
Where necessary because of the complexity or number of requests, the period may be extended by up to two additional months. In that case, KAIROS will inform you of the extension and the reasons for it within the first month, in accordance with the GDPR.
3. What we will delete
Where erasure legally applies, KAIROS will delete personal data found in active systems under its control once the original purpose has ended.
For the current Diagnostic flow, this includes active copies stored in the recipient mailboxes used by KAIROS, currently Lark and Gmail.
4. What may temporarily remain
Erasure does not always mean immediate disappearance of every technical copy.
Certain data may temporarily remain:
- in provider-managed backups or logs according to technical cycles;
- where law requires retention;
- where blocking is necessary to establish, exercise or defend legal claims;
- where immediate erasure of a technical copy is not reasonably possible and the copy is isolated from ordinary use.
Once the retention or blocking reason ends, the data will be destroyed in accordance with applicable law.
6. Ordinary enquiry retention
Enquiries that do not become clients are removed from active use 12 months after the last substantive interaction, unless a legal reason requires specific data to be retained or blocked.
5. Social-platform data
When KAIROS enables social integrations and receives data or tokens through a platform API, deletion requests will also be handled under that platform's specific requirements.
For LinkedIn, once an integration is active, KAIROS must delete API-derived data, including applicable tokens, when a user requests deletion or closes their account with KAIROS, unless a legal obligation prevents deletion.