Legal

Privacy Policy

Last updated: 4 November 2026

1. Introduction

This Privacy Policy describes how Kiita Group collects, uses, and protects information when you use KIITA ORDER, in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

2. Information We Collect

2.1 Vendor Information

Name, email, Instagram handle, store name, slug, cuisine type, vendor bio, menu and product photos, Stripe Connect account info (via Stripe), Telegram chat ID.

2.2 Transaction Data

Order details, values, fulfilment dates, and fulfilment method.

2.3 Usage Data

AI action counts per vendor per month (not conversation content).

2.4 Buyer Information

Name, email, phone number, delivery address (for delivery orders), and order details collected at checkout.

3. How We Use Your Information

  • Operate and improve KIITA ORDER
  • Process transactions and manage Stripe Connect payouts
  • Send transactional emails (order confirmations, password resets, notifications)
  • Send Telegram notifications
  • Provide AI features (Kii, caption generation)
  • Calculate and apply commission
  • List storefronts on KIITA CRAVE
  • Comply with legal obligations

4. Data Sharing

We do not sell your data. We share only with: Stripe (payments), Supabase (database), Resend (email), Anthropic (AI via Claude API — vendor menu context included in calls), Telegram (bot notifications).

Buyer details needed to fulfil an order (name, phone number, delivery address and order items) are shared with the vendor you order from. Vendors may pass these details to their own delivery partner, only to deliver that order.

5. Data Retention

Vendor data retained while account is active. Order data retained minimum 12 months. You may request deletion via our contact form.

6. Security

HTTPS encryption, Supabase row-level security, live/test key separation. No system is entirely secure.

7. Your Rights Under PDPA

Access, correct, or withdraw consent for your personal data. Contact us via our contact form.

8. Cookies

Session cookies and auth tokens only. No third-party tracking or advertising cookies. We count page visits with Vercel Web Analytics, which uses no cookies and does not identify you or follow you across other websites.

9. Changes

Material changes notified via email or dashboard. Continued use = acceptance.

10. Contact

Contact us