Privacy Policy

1. Data we collect

• Account: name, email and password (stored only as an argon2id cryptographic hash).
• Business: restaurant details, locations, menu and uploaded images.
• Security: the network prefix of the IP address (not the full IP) and the browser used in sessions and in the audit log.
• Payout account: to receive Pix payments, the business provides Pagar.me with the account holder’s registration details (CPF or CNPJ — Brazilian tax IDs —, name, date of birth or company details, address, phone) and bank account. This data goes straight to Pagar.me, which performs identity verification; KINS keeps only a masked summary (for example, the last digits of the document and the account) and the registration status.
• Subscription: when you subscribe to a paid plan, the payment is processed by Stripe (Stripe, Inc. and affiliates), which receives your name, email and card details directly in its own environment. KINS does not store card data: it keeps only the subscription identifiers, the plan, the status and the invoice history. Because Stripe processes data outside Brazil, there is an international transfer under the cases of art. 33 of the LGPD (Brazil’s General Data Protection Law).

2. Menu end customers

The public menu does not require sign-up. The cart is stored only in the visitor’s browser until they place an order.

To show the business how many times the menu was opened, we count views anonymously and in aggregate (one total per restaurant per day). We do not store IP addresses, cookies or any visitor identifier for this.

• Orders: when placing an order, the customer provides their name and phone number, and optionally the table and notes. For delivery orders, also the address, used by the business to deliver the order. This data is used by the business to prepare the order and contact the customer about it.
• Loyalty program: when the business runs a program, the phone number on the order identifies the customer’s stamp or points balance at that business, along with their name and history of credits and redemptions. The balance is not shared between businesses.
• Coupons: we record which coupon was used on each order to enforce the usage limits set by the business.
• Pix payments: when the customer chooses to pay by Pix through the menu, the CPF (Brazilian tax ID) and email provided are sent to Pagar.me (Pagar.me Instituição de Pagamento S.A., part of the Stone group), which generates the Pix and processes the payment. KINS does not store the payer’s CPF or email: it records only the amount, the payment status and the charge identifiers, to confirm the order and allow refunds.
• Card payments: card details (number, expiration date and security code) are sent by the customer’s browser directly to Pagar.me, which returns a single-use token for the charge. KINS never receives or stores the full number or the security code: it records only the card brand, the last four digits and the number of installments, and the CPF and email are sent to Pagar.me as with Pix.

In these cases, the business decides how it uses its customers’ data, and KINS processes it on the business’s behalf to operate the platform. If the business connects its own system (for example, its cash register or POS) to KINS integrations, order data is also sent to that system, under the business’s responsibility. Requests for access, correction or deletion can be made to the business or through our chat (see section 7).

3. Purpose and legal basis (LGPD)

We process data to perform the platform’s terms of use, comply with legal obligations and keep accounts secure (legitimate interest).

4. Security

• Logical isolation between organizations and role-based access control.
• Uploaded images are reprocessed and have their metadata (such as GPS location) removed.
• Passwords, tokens and credentials are never written to logs.

5. Chat support

All KINS support (sales, support and privacy) is provided through a chat on the website and in the dashboard, supplied by Crisp IM SAS, a company based in France, which processes the data on our behalf.

• Conversation data: the messages and files you send and, if you provide them, your name and email.
• In the dashboard: when you are logged in, the chat receives your name, email and the identifiers of your organization and restaurant, so the team knows which account it is. Passwords and access keys are never sent.
• Technical data: the page you wrote from, browser, language and IP address.
• Cookies and local storage: the chat is loaded on website and dashboard pages and keeps an identifier in your browser to maintain the conversation across pages and visits. We do not use it for advertising.

Because Crisp is located outside Brazil, this data is subject to international transfer, carried out under the cases of art. 33 of the LGPD.

6. AI assistant

When the restaurant uses the AI assistant in the dashboard, KINS sends Anthropic, PBC, a company based in the United States acting as a sub-processor, only what is needed to generate the response:

• Menu text: names and descriptions of products, categories, options and add-ons.
• Aggregate sales figures: quantities, amounts, times, and the most used products and coupons.

No personal data of end customers (name, phone, address, CPF, email or order notes) is sent. KINS stores the analysis results and the usage count. Because Anthropic is located outside Brazil, this data is subject to international transfer, carried out under the cases of art. 33 of the LGPD.

7. Your rights

You can request access to, correction, portability or deletion of your data, or contact the data protection officer, through the chat, under the Privacy and data topic.