Privacy policy

1. Who we are and our role

Kitipoi is operated by Kitipoi ("we", "us"). Kitipoi lets businesses set up AI agents that chat with their customers, show their catalogue and take order requests.

Our role depends on who you are:

• If you chat with a business through Kitipoi, that business decides why your data is collected and is responsible for it. We process it on the business's behalf to provide the chat, and we also let you delete it yourself (see Your rights).
• If you are a business owner, request a demo or visit our website, we decide how your data is used and are responsible for it.

2. What we collect

From customers who chat with a business:

• Your Google account details when you sign in: name, email address, profile photo and Google account ID. We never see your Google password.
• Your messages and the agent's replies.
• Order requests: the items, your phone number, your delivery address if you choose delivery, and any note you add.
• Delivery addresses you choose to save, and your phone number if you save it.

From business owners: business name and ID, email address, mobile and WhatsApp numbers, a securely hashed password (or your Google account ID if you sign in with Google), and the business details, catalogue and product photos you add.

From people who request a demo: name, email address and mobile number.

From everyone: technical data such as your IP address, the pages you visit and the time of your visit, which we use for security and to prevent abuse.

3. How we use it

• To let you chat with a business's agent and get answers from the information that business provides.
• To send your order request to the business so it can accept, decline and fulfil it.
• To show a business its conversations, questions its agent couldn't answer, and its orders.
• To run business accounts, sign people in and keep accounts secure.
• To reply to demo requests.
• To protect the service, for example by limiting repeated failed sign-ins and excessive requests.

We process your data with your consent, which you give by signing in to a chat or submitting a form, or where it is otherwise necessary to provide the service you asked for or permitted by law. You can withdraw consent at any time by deleting your data (see Your rights); this doesn't affect processing that already took place.

We don't sell your personal data, and we don't use it for advertising.

4. AI processing

The agent's replies are written by an AI model, Google Gemini. To produce each reply, your messages, the conversation so far and the business's information are sent to Google, which processes them and stores the conversation for a limited time so it can continue it. Google handles this data under its own terms for the Gemini API.

AI replies can be wrong or incomplete. Check anything important, such as prices, availability or opening hours, with the business.

5. Who we share it with

• The business you chat with or order from. It sees your name, email, messages and order details, and your phone and address when you send an order.
• Google, for sign-in and for the AI replies described above.
• Our service providers, who process data for us under contract: Vercel (hosting and product-photo storage), Neon (database) and Resend (email).
• Authorities or others, when the law requires it or to protect the rights and safety of our users or of us.

Our service providers may process data outside the UAE and India. Where they do, we rely on their contractual commitments to protect it.

6. How long we keep it

We keep personal data for as long as we need it for the purposes above. In particular:

• Your customer profile, saved addresses and carts stay until you delete them or delete your data.
• Conversations and orders stay as part of the business's records. If you delete your data, they are kept without your name, email, phone or address.
• Business account data stays while the account is open.
• Technical and security records, such as IP addresses and sign-in attempts, are kept as long as we need them to secure the service and investigate abuse.

When data is no longer needed, we delete it or remove what identifies you.

7. Your rights

Depending on where you live, you may have the right to access your personal data, correct or update it, delete it, withdraw your consent, and, in India, nominate someone to exercise your rights if you die or become unable to. You can also complain to us, and to the data protection authority where you live.

In the chat you can do much of this yourself:

• Change your phone number and saved addresses, or delete them, in Your account.
• Delete your data with Delete my data in Your account. This removes your profile, saved addresses and carts, removes our link to your AI conversations and asks Google to delete them, and clears your name, email, phone and address from your past chats and orders with every business. It can't be undone.

For anything else, email sales@kitipoi.com. We may need to confirm it's you before acting on a request. If you chat with a business, you can also contact that business directly.

8. Security

We protect data with encryption in transit, hashed passwords, access limited to people and systems that need it, and limits on repeated sign-in attempts and requests. No system is perfectly secure, but we work to protect your data and will act promptly if something goes wrong, including notifying you and the authorities where the law requires.

9. Cookies and similar storage

We use only what the service needs to work: a cookie that keeps business owners signed in, a cookie that remembers your language, short-lived cookies during sign-in, and your browser's session storage to keep you signed in to a chat until you close the tab. We don't use advertising or third-party tracking cookies.

10. Children

Kitipoi is not meant for children. If you are under 18, use it only with the permission of a parent or guardian. If you believe a child has given us personal data without that permission, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We'll change the date at the top, and tell you about significant changes in the app or by email where we can.

12. Contact

Please feel free to contact us via email sales@kitipoi.com for enquiries and support.