This notice explains how KAI, AmaZix’s AI Community Manager, processes personal data when it operates in an online community. It supplements AmaZix’s main Privacy Notice and is provided to community members whose messages KAI may process. It is written to meet our transparency obligations under Articles 13–14 of the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
KAI is deployed on behalf of the project or organisation that operates the community you are in (“the Community Operator”). The Community Operator is the data controller; AmaZix acts as data processor, processing personal data (if any) only on the Community Operator’s instructions. AmaZix is AmaZix Limited, Room 1601, 16th Floor, Wing On Centre, 111 Connaught Road Central, Hong Kong 999077 (UBI 68655312), contactable at amazix@amazix.com.
What KAI processes, and when
KAI only processes a message when it responds to that message. At that point it processes:
- the content of your message,
- your username / user ID on the platform, and
- KAI’s own response.
KAI does not collect your real name, email address, postal address, or any demographic information; the only identifier it holds is your username / user ID on the platform. KAI does not read or store messages it does not respond to. It does not track member joins, leaves, profile changes, presence/online status, or reactions, and it does not build a profile of you.
Why (purposes and legal basis)
KAI processes this data for two purposes:
- Answering your questions. To understand your message and generate a relevant, accurate reply drawn from the Community Operator’s own documentation, and to maintain short-term conversational context (approximately the previous 48 hours) for follow-up questions.
- Community reporting and insights. To produce reports and insights for the Community Operator about how their community engages with KAI. This takes two forms: (a) aggregated statistics about overall community engagement — such as common questions and recurring themes — which do not identify individual members; and (b) where a member provides specific feedback about the Community Operator’s product or service, that feedback together with the username of the member who provided it, so that the Community Operator can address the feedback, follow up with the member for clarification, or let them know their input has been acted on.
The legal basis for both purposes is the legitimate interests of the Community Operator in running and improving a functioning, well-moderated community (Article 6(1)(f) GDPR). Your message content is not used to train or fine-tune any AI model.
Third-party AI processing
To generate replies, KAI sends message content to a third-party large language model provider at the time of the interaction only. This provider processes the data under contractual terms that exclude it from being used to train their models, and acts as a sub-processor under GDPR.
Retention
Message content and KAI’s response are stored for two purposes: KAI uses them for conversational context for approximately 48 hours, and they are subsequently used to produce community reports and insights for the Community Operator. These reports include both aggregated statistics that do not identify individual members and, where relevant, specific member feedback attributed to the member’s username. Data is retained for as long as AmaZix provides services to the Community Operator, after which it is deleted or returned in accordance with our agreement with them.
International transfers
Where personal data is transferred across borders (for example to an AI sub-processor), it is covered by an appropriate GDPR transfer mechanism such as Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. Because the Community Operator is normally the controller, please direct requests to them; AmaZix will assist them in responding. You may also contact us at amazix@amazix.com. You also have the right to lodge a complaint with a data protection supervisory authority.
Security
We protect this data with encryption in transit and at rest, access controls, and secure infrastructure.
Changes
We may update this notice; the current version is always available at amazix.ai.