Privacy Policy

1. Data we collect

• Account & business data: vendor name, phone number, email, business name, outlet locations, city and billing details.
• Catalog & operational data: catalog items, categories, combos, prices, photos of menus, price lists or catalogs you upload for AI scanning, brand story and gallery media, tables, orders, order status history, staff roles and activity logs.
• End-customer data (your customers): customers can browse storefronts and place orders without creating an account. We process only what is needed for the order — items, table/session or delivery details, and any name or phone number a vendor records at the counter for order lookup. Customers may optionally create an account by verifying their mobile number with a one-time password (OTP); for account holders we store the mobile number, order history and saved favorite stores. Ordering never requires an account.
• Waitlist data: name, phone number, business name, city and business type submitted through our early-access form.
• Support & diagnostics: messages you send us, crash reports, device/browser information, IP address and usage analytics.

2. How we use data

• Provide, operate, secure and improve the Service — building your digital storefront, routing orders, powering dashboards, fulfilment boards and kitchen screens, and sending order OTPs and status updates.
• Set up accounts, process billing and communicate about service changes, onboarding and support (typically via WhatsApp, SMS or email).
• Send product news and offers — only with your consent, which you can withdraw anytime.
• Prevent fraud and abuse, enforce our Terms and comply with legal obligations.
• Aggregate and de-identify data for product analytics. We never identify your business in published material without consent.

3. Legal bases & compliance

We process data to perform our contract with you, to meet legal obligations, and for legitimate interests such as service security and improvement. Where consent is required — for example, marketing messages — we ask for it first. We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

4. AI catalog scanning

When you use the AI catalog scan, your menu, price list or catalog photo is processed by our AI service providers solely to extract items, prices and categories. Photos and extracted text are used only to build your catalog and, by our instruction, are not used to train third-party AI models.

5. Data sharing

• Service providers: hosting, storage, AI processing, analytics and communication tools — only to perform services on our behalf, under contracts that limit their use of the data.
• Professional advisors and authorities: where required for business operations, compliance or by law.
• We do not sell personal data, and we do not run third-party advertising on the platform.

6. Storage & international transfers

Data may be processed or stored on servers located in India or other countries, with reputable cloud providers. Where data crosses borders, we implement appropriate safeguards.

7. Security

We apply administrative and technical safeguards proportionate to risk — encryption in transit, access controls, audit logging and backups. No system is 100% secure; please also keep your own devices, PINs and staff access hygiene in order.

8. Data retention

We retain data while your account is active, including while paused. If you delete your account, we delete or de-identify personal data within a reasonable period, except where retention is required by law (for example, tax records).

9. Your responsibilities as a vendor

For data about your own customers and staff, you act as the data controller. Obtain any necessary notices or consents before collecting their data through KioSnap, configure staff access responsibly, and respond to your customers' privacy requests — we assist where legally required and technically feasible.

10. Cookies & similar technologies

We use necessary cookies for authentication and security, and functional/analytics cookies to improve the Service. Browser settings can limit cookies, which may affect functionality.

11. Your choices & rights

• Access, correct, export or delete your personal data via the dashboard or by contacting us.
• Opt out of non-essential marketing communications at any time.
• Export your data before closing your account.

12. Children

The Service is not directed to individuals under 18.

13. Changes to this policy

We may update this policy periodically and will revise the “Last updated” date when we do. For significant changes we will notify vendors directly.