Data Processing Agreement

Last updated: October 2026

This Data Processing Agreement describes how Kairos processes personal data for a customer company that uses Kairos as a time-attendance system. The customer decides why the data is processed and is the controller. Kairos processes that data only to provide the service and is the processor. It covers the Kairos service, including the Kairos Time mobile app. It is not the terms of use for this website.

Roles

The customer determines the purposes of processing and instructs Kairos by configuring and using the product. Kairos processes personal data only to run the time-attendance service, including the Kairos Time app, and not for its own purposes.

Data

Kairos may process personal data of the customer’s employees and other users of the customer’s account:

Account and identity data needed to sign in and administer the account.
Work-time records, such as the start and end of the working day, schedules, shifts, breaks, and absences.
Location data, when location is used for time attendance.
NFC data, when an NFC tag is read for time attendance.
Device and technical data needed to keep the service secure and working.

Biometric authentication stays on the device. Kairos does not receive or store biometric data. Kairos does not calculate or pay salaries, and it does not sell personal data.

Duration

Kairos keeps the data for as long as the customer uses the service, and then deletes or returns it as described below, except where the law requires the data to be kept.

Duties

Kairos processes the data only on the customer’s instructions, as expressed by using the product. People who handle the data are bound to keep it confidential. Kairos uses appropriate security for the service and does not use the data for advertising.

Sub-processors

Kairos may use infrastructure providers to host and run the service. They process personal data only as needed for that work. Kairos remains responsible for their processing of the customer’s data.

Requests from people

Kairos will help the customer respond to requests to access, correct, or delete personal data that Kairos holds for that customer, to the extent the product allows.

Incidents

If Kairos learns of a personal-data breach that affects the customer’s data, Kairos will notify the customer without undue delay.

Return and deletion

When the service ends, or when the customer asks, Kairos will delete or return the customer’s personal data, except where the law requires it to be kept.

Law

This agreement is governed by the laws of the State of Israel.