Privacy Policy
Effective date: May 16, 2026 · Last updated: September 8, 2026
1. Who we are
Aidos Company ("Aidos Company", "we", "us", "our") is a service brand operated by Kel-Kel Global LLC, a limited liability company duly registered in the Kyrgyz Republic.
Operator (Data Controller):
- Kel-Kel Global LLC (Общество с ограниченной ответственностью «Кел-Кел Глобал»)
- Registration number: 218633-3310-OOO
- Taxpayer Identification Number (TIN): 00506202310156
- Registered address: 22a Salieva Street, apartment 14, Osh, Kyrgyz Republic
- Website: https://the-aidos.com
- Company website: https://kelkelglobal.com
- Instagram: @aidos.company
- Contact email: office@the-aidos.com
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you (a) visit https://the-aidos.com, (b) interact with our Instagram account @aidos.company or any other messaging channel we operate, or (c) use the Aidos Company platform — including the AIDOS Desk product at https://app.the-aidos.com, a shared inbox for WhatsApp, Telegram and Instagram with a CRM and an AI assistant — to run customer conversations in your own business ("Service").
This is the only privacy policy of Aidos Company: it covers both the site and the AIDOS Desk product. It is written to comply with the Law of the Kyrgyz Republic "On personal information" No. 58 of 14 April 2008, as amended, and follows GDPR practice where our clients or their customers are in the EU/EEA.
2. Scope
This Policy applies to:
- (a) Visitors of our website and our Instagram account.
- (b) End users who chat with an AI assistant built and operated by Aidos Company on behalf of a business customer (in this case, the business customer is the data controller, and Aidos Company acts as a data processor).
- (c) Business customers who sign up for the Aidos Company platform.
3. Data we collect
3.1. Data you provide directly:
- Name and contact details (email, phone number) when you contact us or sign up.
- Company information (legal name, address, TIN) when you become a business customer.
- Content of your messages, files, or documents you send us.
3.2. Data we receive from Meta Platforms when you message us via Instagram:
- Your Instagram-Scoped User ID (IGSID).
- Your username and public profile picture (where permitted by Meta).
- Message content (text, attachments, reactions, post-backs, referrals, read receipts).
- Comments on our Instagram media and live comments.
- Conversation metadata (timestamps, conversation IDs).
3.3. Data generated automatically:
- IP address, user-agent, language, approximate location at the country level.
- Cookies and similar technologies on our website (see Section 10).
- Workflow execution logs and error reports in our automation backend.
3.4. We do NOT collect:
- Bank or card numbers, passwords, government-issued IDs, biometric data, health data, or any other "special category" data as defined by GDPR Article 9.
4. Purposes and legal basis
We process personal data only for clearly defined purposes:
- To respond to your messages on Instagram and other channels — basis: performance of a contract / our legitimate interest in providing customer service.
- To operate AI assistants for our business customers — basis: contract with the business customer / their legitimate interest.
- To improve our Service (debugging, quality assurance, model performance) — basis: legitimate interest, with logs anonymized where reasonable.
- To comply with legal obligations under the laws of the Kyrgyz Republic — basis: legal obligation.
- To send service notifications and, with your consent, marketing emails — basis: consent (you can withdraw it anytime).
5. AI processing
To generate replies, we send the content of your messages to large language model (LLM) providers. Which provider is used depends on the service: in AIDOS Desk (app.the-aidos.com) replies and hints are produced by Anthropic (Claude family models); the assistants we run for our own Instagram and website use OpenAI (model: gpt-5-mini, accessed via the OpenAI Responses API). In the future we may add or replace LLM providers. We will update this Policy when such changes occur.
LLM providers process data on our behalf as data processors under their own data-processing terms. We do NOT permit OpenAI or any other provider to use your data to train their models.
We do not train, fine-tune or otherwise develop machine-learning models on data received from Meta platforms (WhatsApp, Instagram, Messenger). Such data is used only to operate the Service for the business that owns the conversation.
6. Who we share data with (sub-processors)
We share the minimum necessary data with:
- Meta Platforms, Inc. — to receive and send messages on Instagram and WhatsApp.
- Anthropic PBC (USA) — AI replies and hints in AIDOS Desk (Claude family models). Under its API terms Anthropic does not train its models on this data.
- Voyage AI, Inc. (USA) — semantic search across the AIDOS Desk knowledge base where the business client has switched it on; the provider receives the knowledge-base texts and the text of the search query.
- OpenAI, LLC (USA) — to generate AI replies for our own Instagram and website assistants (currently model gpt-5-mini, Responses API).
- Telegram Messenger Inc. — sending and receiving messages in Telegram.
- Hetzner Online GmbH (Germany) — servers and backups for AIDOS Desk; the data centre is located in Helsinki, Finland.
- n8n GmbH (Germany) — workflow automation hosting for the assistants we run ourselves and for bespoke automation projects, not for AIDOS Desk; the instance is hosted on Google Cloud Platform in the European Union (region europe-west1, Belgium).
- Hosting and email providers required to operate our website and email.
We do not sell personal data. We do not share data with advertisers.
7. International transfers
Personal data may be transferred to and stored in countries other than the Kyrgyz Republic, including the European Union and the United States. Transfers to the United States (e.g., to OpenAI and Meta) are carried out under appropriate safeguards, including Standard Contractual Clauses where applicable.
8. Retention
- Message content and conversation logs of the assistants we run ourselves (Instagram, website): retained for up to 60 days, then deleted or anonymized.
- Conversations, contacts and deals inside AIDOS Desk: kept while the business client's account is active — that is what the shared inbox is for. After the agreement is terminated the data is kept for a further 60 days and is then deleted irreversibly; that period is fixed in the Public Offer.
- On the business client's request, a specific contact and its conversation are deleted within 7 days.
- Account data of business customers: retained for the duration of the contract plus the period required by Kyrgyz law (typically 3–5 years for accounting records).
- Marketing data: retained until you withdraw consent.
- Backup copies: deleted within 30 days after the primary record is deleted.
9. Your rights
Depending on the jurisdiction you reside in (Kyrgyz Republic, EU/EEA under GDPR, or others), you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with a supervisory authority.
To exercise any of these rights, email office@the-aidos.com. We respond within 30 days.
10. Cookies
Our website uses essential cookies (required for the site to function) and, with your consent, analytics cookies. You can manage your preferences in your browser settings.
11. Security
We use industry-standard measures (encryption in transit via TLS, access controls, logging) to protect personal data. In AIDOS Desk specifically: passwords are stored only as an irreversible bcrypt hash; messenger access tokens are encrypted (AES-GCM) and are never shown in the interface or in logs; each company's data is isolated at the level of every single request. No system is 100% secure; we cannot guarantee absolute security but we will notify you and the relevant authorities of any material data breach within 72 hours where required by law.
12. Children
The Service is not directed to children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us at office@the-aidos.com and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced on https://the-aidos.com and, where required, by email. The "Last updated" date at the top of this Policy reflects the most recent revision.
14. Contact us
- Kel-Kel Global LLC ("Aidos Company")
- 22a Salieva Street, apt. 14, Osh, Kyrgyz Republic
- Email: office@the-aidos.com
- Website: https://the-aidos.com
- Company website: https://kelkelglobal.com