Privacy Policy

Account Information: When you create an account, we collect your name, email address, and password (stored in hashed form).

Store Data: When you connect your Shopify or WooCommerce store, we access and store the following data to power the AI assistant:

• Orders — order numbers, amounts, customer names, emails, fulfillment status
• Products — product names, prices, SKUs, inventory levels, variants
• Customers — names, email addresses, purchase history, tags
• Store information — domain name, currency, timezone, plan

Email Inbox Data: If you connect Gmail, we read your inbox threads in order to display them in the Kai Londo inbox and generate AI-drafted replies. We do not store your email content on our servers beyond what is needed to display your inbox session.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, AI chat messages, and actions approved or cancelled.

Communication Data: If you connect Telegram, we store your Telegram Chat ID to send you order notifications and daily briefings.

We use the information we collect to:

• Provide, operate, and maintain the Kai Londo platform
• Power the AI chat assistant with live, grounded store data
• Execute approved store actions (price updates, inventory changes, etc.) on your behalf
• Send email campaigns and automation flows to your customers via Resend
• Send Telegram notifications for new orders, cancellations, and daily briefings
• Generate store reports, forecasts, and inventory insights
• Improve our AI models and platform features (using anonymised, aggregated data only)
• Send you product updates, service announcements, and support messages
• Comply with legal obligations

We do not sell your personal data. We share data only in these circumstances:

Service Providers: We work with the following sub-processors to deliver our service:

• Supabase — authentication and database storage (EU/US)
• Vercel — serverless compute and hosting (US)
• OpenRouter / Anthropic — AI language model processing (messages are not retained for training)
• Resend — email delivery for marketing campaigns
• Shopify API — reading and writing to your Shopify store
• WooCommerce REST API — reading and writing to your WooCommerce store
• Google OAuth — Gmail inbox access
• Telegram Bot API — sending notifications

Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email before your data becomes subject to a different privacy policy.

Kai Londo uses AI language models (via OpenRouter) to generate responses, insights, and recommendations. Your store data is injected into AI prompts as context ("grounding") to ensure accurate, data-driven responses.

Important: Your store data and customer information is sent to AI model providers for inference only. It is not used to train their models. We use providers who offer data processing agreements that prohibit training on customer data.

All AI-generated store actions (price changes, inventory updates, etc.) require explicit approval from you before being executed. No automated mutations occur without your confirmation.

We retain your data for as long as your account is active. Specifically:

• Account data — retained until you delete your account
• Store data (orders, products) — cached temporarily and refreshed from source; deleted within 30 days of account deletion
• AI chat conversations — retained until you delete them or your account
• Audit logs — retained for 12 months
• Email/campaign data — retained until you delete campaigns or your account

You can request deletion of your data at any time by emailing privacy@kailondo.com. We will complete deletion within 30 days.

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication is handled by Supabase with bcrypt password hashing
• Row-level security (RLS) ensures users can only access their own data
• API keys and tokens are stored encrypted; we never log or expose them in plaintext
• Service-role database access is restricted to internal server functions only

Despite our measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we commit to notifying you within 72 hours of any confirmed breach affecting your data.

Depending on your location, you may have the following rights:

• Access — request a copy of all personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request an export of your data in a machine-readable format
• Objection — object to processing of your data for certain purposes
• Withdraw consent — disconnect any third-party integration (Shopify, Gmail, Telegram) at any time from your Integrations settings

To exercise any of these rights, email privacy@kailondo.com. We will respond within 30 days.

Kai Londo uses session cookies for authentication (to keep you logged in). We do not use third-party advertising cookies or tracking pixels.

We use Supabase authentication cookies which are HTTP-only, secure, and expire when you log out or after 7 days of inactivity.

Kai Londo is a B2B business tool intended for commercial use only. Users must be at least 18 years of age to create an account or use the Service. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with their data, please contact us immediately at privacy@kailondo.com and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the updated policy on this page with a revised "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us: