Privacy policy

Account data: your name, email and authentication credentials, managed through our identity provider.

Connected keys: the brokerage and LLM API keys you choose to connect. These are encrypted with AWS KMS before storage and are never stored in plaintext or written to logs.

Operational data: the trades, signals, reasoning and cost records your agent generates, plus standard technical logs needed to run the service.

We use your information to operate your trading agent, display its activity, bill your subscription, provide support, and keep the service secure. We do not sell your personal information or your trading data.

Kairos integrates with services you authorize — including Alpaca (brokerage), your chosen LLM provider, Stripe (payments) and AWS (infrastructure). Data shared with them is limited to what is necessary to provide the service and is governed by their respective policies.

API keys are protected with envelope encryption (AWS KMS) and decrypted only inside the agent process at runtime. Data is encrypted at rest and in transit. See our security overview for details.

Operational data is retained according to your plan's log-retention window. After you delete an agent, records are soft-deleted and retained for up to 90 days before permanent removal, unless a longer period is required by law.

You may access, export or delete your data, and revoke connected keys at any time from your account. To make a privacy request, contact us at [email protected].

We may update this policy from time to time. Material changes will be announced in-app or by email, and the “last updated” date above will change.