Kairux

Kairux

Privacy Policy

Kairux Asistente — Privacy Policy

Platform: Kairux Asistente (kairux.es)  ·  Last Update: October 2026

At Kairux Asistente, we are committed to protecting your privacy and ensuring the correct use of the personal data we process through our platform.

1. Who is the Data Controller?

Kairux Asistente is operated by:

  • Identity: KAIRUX TECH, SOCIEDAD LIMITADA
  • Tax ID (CIF): B93933331
  • Address: Paseo de la Castellana 194, Piso 0, Puerta B, 28046 Madrid, Spain
  • Phone: +34 621 095 495
  • Website: https://kairux.es
    Registry: Registered with the Commercial Registry of Madrid, sheet M-895341, entry 1, dated 13/08/2026
  • Email: info@kairux.es

2. What are the purposes of data processing?

Kairux Asistente processes information provided by users for the following purposes:

  • Service Management: To provide the Kairux Asistente platform — WhatsApp Business messaging management, AI-assisted responses, automations, and customer support tools — and related technical support.
  • Administrative and Billing: To manage accounting and fiscal obligations.
  • Communications: To send information about Kairux Asistente services, product updates, or events, provided you have given your consent.
  • WhatsApp Business API Services: To manage WhatsApp messaging, automations, and message templates via the WhatsApp Business Platform Cloud API.

3. Data Retention

Personal data is kept as long as the commercial relationship exists or as required by law:

  • Customer Data: Duration of the contract plus 3 years.
  • Messaging Data: 12 months, unless deleted earlier.
  • Meta Access Tokens: Deleted immediately upon disconnection.
  • Billing Data: 5 years, according to Spanish tax law.

4. Legal Basis

Kairux Asistente processes data based on: contractual performance for our services, legal obligations for tax purposes, and user consent for communications and WhatsApp API integration.

5. Recipients and International Transfers

Kairux Asistente does not share your data with third parties except as required by law or with the service providers that act as data processors under a signed agreement:

  • Meta Platforms Ireland Ltd. / Meta Platforms Inc. — WhatsApp Business Platform (Cloud API), to send and receive messages.
  • Hetzner Online GmbH — hosting, in data centres in the European Union (Germany).
  • OpenAI Ireland Ltd. — language models that generate the assistant’s replies, transcribe voice notes and recorded sales calls, and analyse conversations (tags and content moderation).
  • Anthropic PBC — alternative language models for the assistant’s replies.
  • TypeSafe AI (Jev model) — scores the interest of each conversation and suggests the next step. It receives the conversation text and the summary of sales calls, without phone number or email.
  • Google Ireland Ltd. — Google Calendar and Google Meet, to create and check appointments when the business connects its calendar.
  • Stripe Payments Europe Ltd. — payment processing; and our tax and accounting advisors.

If we call you about our service, we may record the call, with a notice at the start, to transcribe it instead of taking notes. The audio is deleted once transcribed; we keep only the text and a short summary, based on our legitimate interest in documenting the sales conversation. You can ask us at the start of the call not to record it.

Transfers outside the European Economic Area (including to Meta Platforms Inc. in the USA) are covered by the Standard Contractual Clauses approved by the European Commission or by a valid adequacy decision. Internal analytics (dashboards, conversation search and prediction models) run on our own server in the EU, without sharing data with third parties. No automated decisions with legal or similarly significant effects are made; you can always ask to be attended by a person.

6. User Rights

You have the right to access, rectify, delete, restrict, or port your data. You may also object to processing. To exercise these rights, email info@kairux.es. You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Integration with Meta and WhatsApp Business API

Kairux Asistente uses the WhatsApp Business Platform Cloud API provided by Meta Platforms Ireland Limited. By using the platform, you authorize Kairux Asistente to:

  • Access and manage your WhatsApp Business Account (WABA).
  • Send and receive messages on your behalf.
  • Manage approved message templates.

Data Ownership: WhatsApp assets (WABA, phone numbers, history) remain the property of the client. Kairux Asistente acts as a management platform. You can revoke access at any time through your Meta Business Suite.

Our processing complies with the WhatsApp Business Data Processing Terms.

8. Security

Kairux Asistente implements technical and organizational measures to ensure data security, including HTTPS/TLS encryption, secure token storage, and access controls.

9. Cookies

Kairux Asistente uses essential cookies for the operation of the platform and analytical cookies to improve performance. You can manage or disable cookies via your browser settings.

10. Data Deletion

You may request the deletion of your account and associated personal data at any time by emailing info@kairux.es from the address associated with your account. Data will be deleted within 30 days, except where retention is legally required (e.g. billing records).

11. Integration with TikTok

The Kairux dashboard has a TikTok section where a business can connect its TikTok accounts, post its videos to them and see their stats. Accounts are connected through TikTok’s official Login Kit, where you see and authorize the permissions you grant.

Data we receive from TikTok: the account’s identifier, display name and profile picture; the account’s numbers (followers, following, likes and video count); and the list of its videos with their title, cover image, link, date, duration, views, likes, comments and shares. We also check the account’s posting options: the available privacy levels, whether comments, duets and stitches are allowed, and the maximum video length.

How we use it: only to show it to you in your dashboard and to post the videos you choose, with the title, privacy and settings you decide for each post. Kairux never posts anything to your account unless you ask it to, does not sell this data, does not use it for advertising, does not share it with third parties and does not send it to artificial intelligence models.

How we store it: we store the account’s identifier, display name and profile picture, and the access tokens in encrypted form, on our servers in the European Union. Stats and the video list are requested from TikTok each time you open the section and are not stored. For each post we keep a record of its title, the chosen privacy level and the result. The video file is kept only while it is being sent to TikTok and is deleted afterwards. The videos you post are processed by TikTok (TikTok Technology Limited, Ireland) under its own privacy policy.

How to remove access: you can disconnect an account at any time from the TikTok section of the dashboard: we revoke access on TikTok and immediately delete the account’s tokens and data. You can also remove the permission from your TikTok account’s security and permissions settings, or email us at info@kairux.es.