Skip to content
kagi

Kagi · website information · 28 October 2026

Privacy notice

What this website processes, what it does not save, and where further verification is required.

Controller and pending registry details

The legal business and controller is Kagi, at Banstraat 14-2, Amsterdam, the Netherlands. The KvK number has not yet been provided; no registration status is implied. Existing privacy and enquiry contact: info@symmaxa.com.

This notice remains under review and is not presented as a complete GDPR Article 13 notice: the KvK detail and provider processing arrangements below remain unresolved.

Enquiries and email requests

The contact page checks your name, email, optional organisation, enquiry type, course or service, delivery preference and message in your browser. It prepares a draft for you to review; the website does not submit it or save these fields. Opening your email application does not mean a message was sent. If you send it, your email provider and the recipient’s mailbox provider process the message and addressing metadata. No enrolment, booking or subscription is confirmed by this website.

Enquiries about a proposed service would generally be handled to take steps at your request before a contract (Article 6(1)(b)); other correspondence may rely on legitimate interests in answering requests (Article 6(1)(f)). The legal controller must confirm these grounds and mailbox retention. Newsletter requests are expressions of interest, not automatic subscriptions; an actual newsletter service and opt-in process are not connected.

Ask Kagi is currently unavailable

The adviser is intentionally unavailable while setup is deferred; rejected questions are not forwarded to the AI service. You may browse the course catalogue or email us instead.

If separately authorised and enabled later, your messages would be sent through Lovable’s AI Gateway to the configured OpenAI model service to generate answers. This website does not save your conversation. Please do not share confidential information. Clearing or reloading the page removes browser conversation state, not provider records. Provider and hosting retention remains unverified.

AI answers can be incorrect; they are general education, not legal advice, incident response or certification guarantees. The planned shared request limit stores only global counts and window timestamps, not visitor identifiers or messages; it is not connected.

Providing the requested adviser and protecting it from abuse are proposed legitimate interests (Article 6(1)(f)), subject to the controller’s assessment and provider agreements. No mandatory consent checkbox substitutes for establishing the appropriate lawful basis.

Hosting and browser information

Lovable hosting and delivery infrastructure receive network information such as IP address, request path, user agent and time. Hosting cookies and diagnostic scripts were observed on the previous published version; arrangements for this release remain under review. Fonts are now served by this website, without Google Fonts requests. Search terms and course preferences in URLs may appear in browser history and host logs; do not include private information. The website does not intentionally log chat content.

Saved necessary-only preferences expire after 180 days. See Cookies & storage for the observed inventory. Host, gateway, model-provider and email retention periods remain to be confirmed.

Recipients, locations and transfers

Depending on the feature you use, recipients include the legal controller and its mailbox provider, Lovable hosting and AI Gateway, delivery/security infrastructure and the configured model provider. The planned quota provider is not yet selected or connected. Exact legal entities, retention, processing locations, contracts and any transfers outside the EEA remain to be confirmed. We do not claim EU-only processing. The controller must explain applicable transfer safeguards and how to obtain a copy before this notice is complete.

Your choices and rights

You may browse without using AI, keep information out of email drafts, clear the on-page conversation and remove saved cookie preferences. Where the GDPR applies, you may request access, correction, erasure, restriction and portability where applicable, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact info@symmaxa.com; do not send identification documents unless necessary and requested securely.

You may complain to the Dutch Autoriteit Persoonsgegevens or your competent supervisory authority. Providing enquiry details is voluntary; without a sent email, the recipient cannot respond. The adviser generates recommendations, but this website does not make automated decisions with legal or similarly significant effects.

Design concept