Trust & Data

KAI security and data handling

KAI by AmaZix answers your community from your own documentation, keeps about 48 hours of conversational context, and does not use community message content to train or fine-tune AI models. Your project, as the community operator, is the data controller and AmaZix acts as data processor. Data is encrypted in transit and at rest.

Where does KAI get its answers?

KAI answers from the community operator's own documentation. KAI uses the message it is replying to, plus short-term conversational context, to give a relevant reply drawn from that documentation.

What data does KAI process, and when?

KAI only processes a message when it responds to that message. At that point it processes the content of the message, the member's username or user ID on the platform, and KAI's own response. KAI does not collect real names, email addresses, postal addresses or demographic information. It does not read or store messages it does not respond to, does not track joins, leaves, profile changes, online status or reactions, and does not build a profile of members.

Is community message content used to train AI models?

No. Community message content is not used to train or fine-tune AI models. To generate replies, KAI sends message content to a third-party large language model provider at the time of the interaction only. That provider acts as a sub-processor under the GDPR, under contractual terms that exclude the data from being used to train its models.

How long is data kept?

About 48 hours of conversational context is kept. Message content and KAI's responses are then used to produce community reports and insights for the community operator. Data is retained for as long as AmaZix provides services to the community operator, after which it is deleted or returned in accordance with the agreement with them.

What do community reports contain?

Two things: aggregated statistics about community engagement, such as common questions and recurring themes, which do not identify individual members; and, where a member gives specific feedback about the community operator's product or service, that feedback with the member's username, so the operator can follow up.

Who is responsible for the data?

The community operator is the data controller; AmaZix acts as data processor. AmaZix processes personal data only on the community operator's instructions. The legal basis is the community operator's legitimate interest in running and improving a well-moderated community (Article 6(1)(f) GDPR). AmaZix is AmaZix Limited, Room 1601, 16/F, Wing On Centre, 111 Connaught Road Central, Hong Kong, contactable at amazix@amazix.com.

How is the data protected?

Data is encrypted in transit and at rest. It is also protected by access controls and secure infrastructure.

Is data transferred across borders?

Where personal data is transferred across borders, for example to the AI sub-processor, the transfer is covered by an appropriate GDPR transfer mechanism such as Standard Contractual Clauses.

What rights do community members have?

Under the GDPR, community members can access, rectify, erase, restrict or object to the processing of their personal data, and ask for data portability. Because the community operator is normally the controller, requests go to them, and AmaZix helps them respond. Members can also contact AmaZix at amazix@amazix.com and complain to a data protection supervisory authority.

This page summarises the KAI Privacy Notice. If this summary and the Privacy Notice ever differ, the Privacy Notice applies. For community analytics, see also the AmaZix Reporting Privacy Notice. Questions: amazix@amazix.com.