Kirana Ai is the data controller for personal data processed through the Kirana AI service. This Notice explains what we collect, why we use it, who receives it, how long we retain it, and the choices available to you.
Data we collect
- Account data, including name, email address, phone number, login identifiers, language, and store details.
- Business content, including inventory, sales, customers, orders, messages, prompts, and AI conversations that you choose to enter.
- Support and communications data, including requests, feedback, and related correspondence.
- Technical and usage data, including IP address, device and browser information, security events, feature usage, and diagnostic records.
How and why we use data
- To create accounts and provide the service under our contract with you.
- To process store data, generate requested AI responses, and support customer ordering under our contract with you.
- To protect accounts, prevent fraud, troubleshoot, and improve reliability based on our legitimate interests in operating a secure service.
- To answer support requests and maintain necessary business records.
- To meet tax, accounting, legal, and regulatory obligations.
- To send optional promotional communications only where consent or another lawful basis permits; you may opt out at any time.
Data sharing
We share data only as needed with service providers that support hosting, database operations, AI processing, communications, analytics, security, and customer support; professional advisers such as legal and accounting providers; and public authorities where law requires it.
Paddle is our Merchant of Record and receives information needed to sell subscriptions, manage billing, process payments, prevent fraud, calculate taxes, issue invoices, and provide purchase support. Paddle handles payment data under its own privacy notice.
Store customer data
When a kirana owner enters customer information or receives an online order, that store is responsible for having an appropriate reason to collect and use the information. Kirana Ai processes that information to provide the requested tools and protect the service.
Retention
We retain account and business data while an account is active and for a reasonable period afterward when needed for recovery, security, disputes, legal obligations, or financial records. We delete or anonymise data when it is no longer necessary, subject to required retention periods.
Security
We use appropriate technical and organisational safeguards, including access controls, encryption in transit, restricted administrative access, and monitoring. No online service can guarantee absolute security.
Your rights
Subject to applicable law, including India’s Digital Personal Data Protection Act, you may request access, correction, updating, or erasure of personal data; withdraw consent where processing relies on consent; object or complain about processing; and nominate another person where the law provides. You may submit a request through the support channel shown with your account or purchase. We may verify your identity before completing a request.
Cookies and local storage
Kirana AI uses essential cookies and browser storage for sign-in, security, language preferences, carts, and core service operation. We do not currently use advertising cookies. If optional analytics or marketing cookies are introduced, we will provide appropriate notice and controls.
International processing
Our service providers may process data outside your state or country. Where required, we use contractual protections and other lawful safeguards for such transfers.
Changes
We may update this Notice as our service or legal obligations change. We will post the revised date and provide additional notice for material changes where required.