Skip to content

Privacy Policy

1. Data Controller

KAIROS Impulse, an artificial intelligence advisory firm.

Email: hello@kairos-impulse.com

KAIROS Impulse is the data controller for all personal data collected through this website.

2. Data Collected and Purposes

We apply Privacy by Design and Privacy by Default principles. Only strictly necessary data is collected:

• Contact form: name, work email, organisation, message — Purpose: responding to your enquiry. Legal basis: legitimate interest.

• AI Voice Assistant: during the conversation, the assistant may actively ask for your first name, last name, phone and email to qualify your need and offer a meeting (if you provide them voluntarily) — Purpose: qualification and scheduling. Legal basis: explicit consent.

• AI Chatbot: text messages exchanged — Purpose: answering your questions. Legal basis: explicit consent.

• Meeting scheduling (chatbot or voice assistant): name, email, phone (optional), chosen time slot, summary of your need — Purpose: planning and confirming a meeting with an advisor. Legal basis: performance of pre-contractual measures / consent.

• Careers application: name, email, phone, CV, cover letter — Purpose: processing your application. Legal basis: performance of pre-contractual measures.

• Newsletter: email — Purpose: sending our AI insights. Legal basis: consent.

• Analytics cookies (if accepted): anonymised browsing data — Purpose: site improvement. Legal basis: consent.

• Marketing cookies (if accepted): pages visited, IP address, browser and device information, shared with LinkedIn — Purpose: measuring the reach of our LinkedIn campaigns and building advertising audiences. Legal basis: consent.

3. Sub-processors and Transfers

Data you send us is processed by the following sub-processors:

• OpenRouter — routes chatbot, voice assistant and recruitment interview conversations, CV content included, to the selected language model. HQ: United States. Safeguards: Standard Contractual Clauses (SCC).

• Mistral AI — generates the chatbot, voice assistant and interview replies. HQ: France. Hosting: European Union. Should it be unavailable, fallback models are called through OpenRouter (Meta, OpenAI, Qwen, NVIDIA), hosted outside the European Union.

• OpenAI — speech synthesis: the text spoken by the assistant is sent to it. HQ: United States. Safeguards: SCC.

• Notion — storage of contact messages, newsletter sign-ups and applications (including CVs). HQ: United States. Safeguards: SCC.

• PostHog — anonymised audience measurement, only with your consent. Hosting: European Union.

• Google Analytics (Google Ireland Limited) — audience measurement, only with your consent. Group headquarters: United States. Safeguards: standard contractual clauses (SCC) and the Data Privacy Framework. A transfer outside the European Union is possible.

• LinkedIn Ireland Unlimited Company (Insight Tag) — measures the reach of our advertising campaigns and builds retargeting audiences, only with your consent to marketing cookies. Joint controller for that measurement; group headquarters: United States (Microsoft). Safeguards: standard contractual clauses (SCC) and the Data Privacy Framework. A transfer outside the European Union is possible.

• Resend — sends transactional emails: contact form acknowledgement, internal team notification, meeting confirmations, application acknowledgement and forwarding of the application file (CV included) to our recruitment team. Hosting: European Union (Ireland). US-incorporated vendor: Standard Contractual Clauses (SCC) retained as an additional safeguard.

No data is sold to third parties. Sub-processors only use your data to provide the requested service.

4. Retention Period

• Contact form: 12 months after the last exchange.

• Newsletter sign-up: 36 months after sign-up, unless you unsubscribe earlier.

• Applications and CVs: 24 months after application, in line with CNIL recommendations for unsuccessful applications.

• Meetings booked via the chatbot or voice assistant: 12 months after the meeting date.

• Chatbot conversations: not retained server-side beyond the session. No history is stored.

• Voice assistant conversations: a written transcript of the exchange is emailed to our team when the call ends (sales for visitors, recruitment for interviews), so that your request can be followed up. No audio recording is kept. These transcripts are retained for 12 months in our professional mailboxes, then deleted.

• Cookies: maximum duration of 13 months in accordance with CNIL recommendations.

These durations are enforced by a regular automated purge of our databases.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (EU) 2016/679, you have the following rights:

• Right of access to your personal data

• Right to rectification

• Right to erasure ('right to be forgotten')

• Right to restriction of processing

• Right to data portability

• Right to object

• Right to withdraw consent at any time

To exercise these rights, contact us at: hello@kairos-impulse.com

You may also lodge a complaint with your local data protection authority.

6. Cookies

This site uses cookies in the following categories:

• Essential: required for the site to function (always active).

• Analytics (PostHog): ph_phc_*_posthog cookie, 1-year duration, anonymised audience measurement (only with your consent).

• Analytics (Google Analytics): _ga and _ga_T36X9EHDNP cookies, 2-year duration, audience measurement (only with your consent). None of these cookies is set before you accept.

• Marketing (LinkedIn Insight Tag): cookies set by LinkedIn — li_sugr, bcookie, bscookie, lidc, UserMatchHistory, AnalyticsSyncHistory, li_gc — maximum duration 6 months, measurement of our advertising campaigns and building of retargeting audiences (only with your consent). In addition, __cf_bm is set by Cloudflare for bot protection on LinkedIn's servers, with a 30-minute duration. None of these cookies is set before you accept, and you can also opt out from the advertising settings of your LinkedIn account.

• AI Features: chatbot and voice assistant activation (only with your explicit consent).

You can change your preferences at any time via the 'Cookie preferences' button at the bottom of the page.

7. Security

We implement appropriate technical and organisational measures to protect your data: TLS encryption, restricted access, data minimisation, no storage of AI conversations.

8. Updates

This policy may be updated. The date of the last modification is shown below.

Last updated: August 2026.