Last updated: 22 March 2026 | Effective: 22 March 2026
Kayros AI ("we", "us", "our") is operated by Symon, an Australian-based sole trader. We are committed to protecting your personal data in compliance with the Thailand Personal Data Protection Act (PDPA), the Australian Privacy Act 1988, and the EU General Data Protection Regulation (GDPR) where applicable.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website (kayros.com.au), use our AI customer service platform, or interact with AI assistants powered by Kayros AI on our clients' websites and social media channels.
Kayros AI provides AI-powered customer service automation to businesses in Thailand. In the context of data protection law:
| Party | Role | Responsibility |
|---|---|---|
| Our client (salon, hotel, clinic) | Data Controller | Determines why and how personal data is collected |
| Kayros AI | Data Processor | Processes data on behalf of the controller |
| Stammer.ai (platform provider) | Sub-Processor | Hosts and processes AI conversations |
| OpenAI | Sub-Processor | Generates AI responses |
When you visit our website, we collect minimal data:
We do not use tracking cookies, advertising cookies, or third-party analytics tools that create user profiles.
When you interact with an AI assistant powered by Kayros AI on a client's platform, the following data may be collected:
This data is collected for the purpose of answering your inquiry, booking appointments, and providing customer service on behalf of the business you are contacting.
We use personal data exclusively for:
We never sell, rent, or share your personal data with third parties for marketing purposes.
| Jurisdiction | Legal Basis |
|---|---|
| Thailand (PDPA) | Consent (obtained via chatbot welcome flow) and Legitimate Interest (responding to inquiries) |
| Australia (Privacy Act) | APP 3 — Collection of solicited personal information for a lawful purpose |
| EU (GDPR) | Article 6(1)(a) Consent and Article 6(1)(f) Legitimate Interest |
Your data may be processed outside of Thailand. Specifically:
In accordance with PDPA Sections 28–29, we ensure appropriate safeguards are in place for cross-border transfers, including contractual data processing agreements with our sub-processors. By consenting to our data collection (via the chatbot welcome flow), you acknowledge and agree to this cross-border transfer.
Under PDPA, GDPR, and the Australian Privacy Act, you have the right to:
To exercise any of these rights, contact us at support@kayros.com.au. We will respond within 30 days of receiving your request.
Our website uses only essential cookies required for the website to function (e.g., language preference, cookie consent status). We do not use:
Essential cookies are stored in your browser's localStorage and do not contain personally identifiable information.
We implement appropriate technical and organizational measures to protect your data, including:
In the event of a data breach that poses a risk to your rights and freedoms:
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.
For privacy-related inquiries, data subject requests, or complaints:
If you are unsatisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand or the Office of the Australian Information Commissioner (OAIC) in Australia.