Privacy Policy

Account Information: When you create an account, we collect your name, email address, and password (stored in hashed form).

Store Data: When you connect your Shopify or WooCommerce store, we access and store the following data to power the AI assistant:

• Orders: order numbers, amounts, customer names, emails, fulfillment status
• Products: product names, prices, SKUs, inventory levels, variants
• Customers: names, email addresses, purchase history, tags
• Store information: domain name, currency, timezone, plan

Email Inbox Data: If you connect Gmail, we read your inbox threads to show them in the Kai Londo Inbox and draft replies you ask for, and we send the replies you approve. We do not keep a copy of your mailbox. Section 5 explains exactly what we access from your Google account and how it is used.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, AI chat messages, and actions approved or cancelled.

Communication Data: If you connect Telegram, we store your Telegram Chat ID to send you order notifications and daily briefings.

We use the information we collect to:

• Provide, operate, and maintain the Kai Londo platform
• Power the AI chat assistant with live, grounded store data
• Execute approved store actions (price updates, inventory changes, etc.) on your behalf
• Send email campaigns and automation flows to your customers via Resend
• Send Telegram notifications for new orders, cancellations, and daily briefings
• Generate store reports, forecasts, and inventory insights
• Improve our platform features (using anonymised, aggregated usage data only, never data received from Gmail or other Google APIs)
• Send you product updates, service announcements, and support messages
• Comply with legal obligations

We do not sell your personal data. We share data only in these circumstances:

Service Providers: We work with the following sub-processors to deliver our service:

• Supabase: authentication and database storage (EU/US)
• Vercel: serverless compute and hosting (US)
• Anthropic: AI language model processing (messages are not used for training)
• Resend: email delivery for marketing campaigns
• Shopify API: reading and writing to your Shopify store
• WooCommerce REST API: reading and writing to your WooCommerce store
• Google (Gmail API): reading your inbox and sending replies you approve (see section 5)
• Telegram Bot API: sending notifications
• Paddle: payment processing and subscription billing

Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email before your data becomes subject to a different privacy policy.

Kai Londo uses AI language models (Claude, by Anthropic) to generate responses, insights, and recommendations. Your store data is injected into AI prompts as context ("grounding") to ensure accurate, data-driven responses.

Important: Your store data and customer information is sent to AI model providers for inference only. It is not used to train their models. We use providers who offer data processing agreements that prohibit training on customer data.

All AI-generated store actions (price changes, inventory updates, etc.) require explicit approval from you before being executed. No automated mutations occur without your confirmation.

AI Memory: To make the assistant more useful over time, Kai Londo saves short notes about you learned from the messages you type, such as what your store sells, how you like answers formatted, and standing instructions you give. It does not learn from the AI's replies, attached documents, your email, or your customers' details, and it filters out email addresses, long numbers, and credentials. You can view and delete every note, or clear them all, in Settings → AI Memory.

Connecting Gmail is optional. If you connect it, you choose to give Kai Londo access through Google's sign-in screen, and you can remove that access at any time.

What we access:

• Read your Gmail inbox (gmail.readonly): the sender, subject, and body of your recent inbox threads
• Send email as you (gmail.send): only replies you write, or AI-suggested replies you review and approve
• Your Google account email address, to show which Gmail account is connected

How we use it: only to provide the Inbox features you use in Kai Londo:

• Show your recent inbox threads inside Kai Londo, next to that customer’s order history from your store
• Draft a reply when you ask for one; you review and edit it before anything is sent
• Summarise recent customer emails when you ask the AI assistant
• Show a count of your unread primary emails on your dashboard
• Send the replies you approve, immediately or at a time you schedule

Sharing: to draft or summarise email when you ask, the relevant email text is sent to our AI provider (Anthropic) for processing only. Anthropic does not use it to train their models. We do not share Google user data with anyone else, we never sell it, and we never use it for advertising.

Storage and deletion: we do not keep a copy of your mailbox. Threads are fetched from Gmail each time you view them. We store only your Gmail access tokens (encrypted), replies you schedule (until they are sent), and anything you choose to paste into or discuss in your AI chat (in your chat history, until you delete it). Disconnecting Gmail in Integrations deletes the tokens we hold. To also remove the permission from your Google account, visit myaccount.google.com/permissions. Deleting your Kai Londo account removes everything above.

Human access: no one at Kai Londo reads your email, unless you ask us to for support, it is needed to investigate security issues or abuse, or the law requires it.

AI models: we do not use Google user data to develop, improve, or train generalized AI or machine learning models.

Limited Use: Kai Londo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We retain your data for as long as your account is active. Specifically:

• Account data: retained until you delete your account
• Store data (orders, products): cached temporarily and refreshed from source; deleted within 30 days of account deletion
• AI chat conversations: retained until you delete them or your account
• AI memory notes: retained until you delete them in Settings or delete your account
• Audit logs: retained while your account is active; deleted within 30 days of account deletion
• Email/campaign data: retained until you delete campaigns or your account

Your customers' data: Kai Londo reads your customers' orders and contact details live from your store and does not keep a copy. It keeps only what its features need: emails sent to them, order alerts, and chat answers you asked for. When one of your customers asks Shopify to delete their data, Kai Londo deletes their email history and order alerts and removes their email address and phone number from your saved chats. When you uninstall the app, order alerts from that store are deleted and the store's access token is removed.

You can request deletion of your data at any time by emailing privacy@kailondo.com. We will complete deletion within 30 days.

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication is handled by Supabase with bcrypt password hashing
• Row-level security (RLS) ensures users can only access their own data
• API keys and tokens are stored encrypted; we never log or expose them in plaintext
• Service-role database access is restricted to internal server functions only

Despite our measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we commit to notifying you within 72 hours of any confirmed breach affecting your data.

Depending on your location, you may have the following rights:

• Access: request a copy of all personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your account and all associated data
• Portability: request an export of your data in a machine-readable format
• Objection: object to processing of your data for certain purposes
• Withdraw consent: disconnect any third-party integration (Shopify, Gmail, Telegram) at any time from your Integrations settings

To exercise any of these rights, email privacy@kailondo.com. We will respond within 30 days.

If you are located in Turkey, you additionally have rights under the Personal Data Protection Law No. 6698 ("KVKK"), including the right to learn whether your data is processed and to lodge a complaint with the Turkish Personal Data Protection Board (Kişisel Verilerin Korunması Kurumu).

Kai Londo uses session cookies for authentication (to keep you logged in). We do not use third-party advertising cookies or tracking pixels.

We use Supabase authentication cookies which are HTTP-only, secure, and expire when you log out or after 7 days of inactivity.

See our full Cookie Policy for details.

Kai Londo is a B2B business tool intended for commercial use only. Users must be at least 18 years of age to create an account or use the Service. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with their data, please contact us immediately at privacy@kailondo.com and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the updated policy on this page with a revised "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us: