01Introduction
Kuttos Technologies (“Kuttos”, “we”, “us”, or “our”) operates a commerce and retail management platform that powers online storefronts, point-of-sale (POS) systems, AI tools, and business software for independent brands and their customers (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
It applies to everyone who uses the Services — shoppers browsing a storefront, and the brands, vendors, and staff who run their business on Kuttos. By using the Services, you agree to the practices described here.
02Information We Collect
We collect the following categories of personal information:
- Identity & contact data — name, phone number, email address, and delivery or billing address.
- Account data — usernames, passwords (stored hashed), roles, permissions, and, where you choose social login, your Google or TikTok account identifier.
- Order & transaction data — items purchased or hired, amounts, payment method, billing and payment history.
- Content you provide — product images and descriptions, prompts you give to our AI tools, files you upload, and messages you send through the platform (including WhatsApp conversations).
- Technical & usage data — IP address, device and browser type, operating system, the pages you view, and how you use the Services, collected automatically through cookies and analytics.
- Location data — approximate location (such as city or region) and delivery addresses you enter, which may use Google Maps address lookup.
03How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services — process and deliver orders, run POS and inventory, and issue receipts and order updates.
- Authenticate accounts and protect against fraud, abuse, and security threats.
- Power AI features you choose to use, such as generating product descriptions, images, and videos (see “AI Features & Your Data” below).
- Communicate with you about orders, support, and important service notices, and — where permitted — send marketing you can opt out of at any time.
- Analyse and improve the Services, including by creating aggregated or de-identified data.
- Comply with our legal obligations and enforce our terms.
04AI Features & Your Data
Some features use artificial intelligence to generate content — for example, product descriptions, images, videos, marketing flyers, and chat assistance. These features are powered by Google’s Gemini and Veo models.
- When you use an AI feature, the input needed to fulfil your request (such as your prompt, product details, or an image you upload) is sent to Google’s servers to process and return a result.
- We do not use your personal information to train general-purpose AI models.
- Brand-specific AI features process that brand’s own content to generate outputs for that brand.
- AI output can be inaccurate or incomplete — please review it before relying on or publishing it. See our Terms of Service for details.
05Service Providers We Share Data With
We do not sell your personal information. We share it only as needed to run the Services — with the brand you purchase from (so they can fulfil and support your order), with our professional advisors, where required by law, and with the third-party providers below that process data on our behalf. Each provider only receives the data needed for its function and is bound to protect it.
- Vercel — website hosting, deployment, and content delivery. Privacy policy ↗
- Convex — backend database, real-time sync, and file storage. Privacy policy ↗
- MongoDB Atlas — database infrastructure (legacy data, being phased out). Privacy policy ↗
- Google — AI generation (Gemini, Veo), Maps/address lookup, Analytics, and “Sign in with Google”. Privacy policy ↗
- Flutterwave — payment processing and mobile-money collections. Privacy policy ↗
- Twilio — SMS and one-time-passcode messaging. Privacy policy ↗
- WaSender — WhatsApp message delivery (order alerts, receipts, two-way chat). Privacy policy ↗
- Resend — transactional email delivery (verification, receipts, notifications). Privacy policy ↗
- ImageKit — image hosting, optimization, and delivery. Privacy policy ↗
- PostHog — product analytics to understand and improve usage. Privacy policy ↗
- TikTok — optional social login and publishing content you choose to post. Privacy policy ↗
- Trigger.dev — background job processing (image pipelines, scheduled tasks). Privacy policy ↗
We may also disclose information in connection with a merger, acquisition, or sale of assets, or to comply with law, enforce our terms, or protect rights and safety. Links above are for reference; each provider’s own current policy governs its processing.
06Payments & Financial Data
Payments are processed by regulated third-party providers, primarily Flutterwave and the mobile-money operators it supports. We do not store full card numbers on our servers. Your payment details are handled by the payment provider under its own security standards and privacy terms.
08Data Security
We apply appropriate technical and organisational measures — including encryption in transit, hashed passwords, access controls, and role-based permissions — to protect your information. No method of transmission or storage is completely secure, but we work continuously to safeguard your data.
09Data Retention
We keep personal information for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.
10Your Rights & Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, subject to legal limits.
- Object to or restrict certain processing, and opt out of marketing at any time.
To exercise any of these rights, contact us using the details below.
11Children's Privacy
Our Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
12International Users & Data Transfers
We operate primarily in Uganda, and our providers may process data in other countries, including the United States and the European Union. By using the Services, you understand your information may be transferred to and processed in countries with different data-protection laws than your own.
13Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app. Your continued use of the Services after changes take effect means you accept the updated policy.
14Contact Us
Questions about this policy or your data? Email us at support@kuttostechnologies.com.