Privacy Policy

Kaainovar, based in Nairobi, Kenya, operates this platform. This Privacy Policy explains what information we collect, how we use it, and your rights. For privacy requests, contact bridgeagency.ltd@gmail.com.

1. Who we are

Kaainovar is an AI workforce platform for small and medium businesses in Kenya, including spas, restaurants, gyms, real estate, and travel agencies.

2. Data we collect

• Business account data: name, email, password (stored as a bcrypt hash), business name, and answers to the onboarding questions about the business.
• Customer conversation data: messages, bookings, and customer contact details that our clients' customers send through connected channels.
• Payment data: payment records from M-Pesa (via IntaSend) and, on plans that support it, card payments via Stripe. We do not store M-Pesa PINs or full card numbers.
• Integration data: tokens and account identifiers for connected services such as Gmail, Outlook, Slack, Calendly, Discord, WhatsApp, and Instagram, held only to run the integration.
• Usage and security logs: IP address, login times, and request logs for rate limiting and security.

3. How we use data

We use data to run the AI agents, send SMS (via Twilio), handle bookings and payments, provide analytics, keep the service secure, and meet legal obligations.

4. AI processing

Messages are sent to Anthropic's Claude models to generate replies. Anthropic processes this data only to provide the service.

5. Service providers

We work with Render (hosting), Neon (database), Twilio (SMS), IntaSend and Stripe (payments), and Anthropic (AI).

6. Data retention

Account data is kept while the account is active and for any period after cancellation that the law requires. Customers can ask for deletion as described in section 8.

7. Security

We use encryption in transit (HTTPS), hashed passwords, role-based access, and rate limiting.

8. Your rights under the Kenya Data Protection Act, 2019

You have the right to access, correction, deletion, and objection, and the right to complain to the Office of the Data Protection Commissioner. Contact bridgeagency.ltd@gmail.com to exercise these rights.

9. Children

The service is for businesses and is not directed at children under 18.

10. Google API Services User Data Policy

Kaainovar's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Changes

We will post updates on this page and update the date above.

12. Contact

Email: bridgeagency.ltd@gmail.com

← Back to home