Privacy Policy

1. Who This Policy Covers

This policy covers two groups of people:

• Shop owners — people who create a Kedai account to run a storefront.
• Shop customers — people who order, book, or message a shop that uses Kedai. If that is you, the shop you bought from is responsible for your personal data; Kedai processes it on the shop's behalf as a data intermediary under Singapore's Personal Data Protection Act (PDPA). You can contact us directly too — see section 9.

2. Information We Collect

From shop owners: the information you provide when creating an account (email address, shop name, business details) and usage data to improve the platform.

From shop customers, on behalf of the shop: the details you give when ordering or booking — your name, contact details (phone number, email address, or messaging handle), delivery or pickup address, order and booking contents, and messages you exchange with the shop through its connected channels (such as WhatsApp, Telegram, or email).

3. How We Use Your Information

• To provide and maintain the Kedai platform
• To send transactional messages (OTP codes, order confirmations, booking and status notifications)
• To let shops manage their orders, bookings, and customer conversations
• To improve the platform based on usage patterns
• To communicate important service updates to shop owners

Customer data is used only to operate the shop's storefront — we do not use it for our own marketing.

4. Data Storage

Your data is stored on servers in the Asia-Pacific region (Singapore). We use industry-standard security measures to protect your information.

5. Data Sharing

We do not sell personal information. We share data only with the third-party services needed to operate the platform:

• Mailjet — transactional email delivery
• Telegram and Meta (WhatsApp) — message delivery on channels a shop connects
• Stripe — subscription billing for shop owners' paid plans
• Our hosting and infrastructure providers

Shops can see the data their own customers submit; one shop can never see another shop's data.

6. Cookies

We use session cookies to keep you logged in. We do not use tracking cookies or third-party analytics.

7. Your Rights

Shop owners can access and update their account data through account settings. To request a copy of your data, or to request account deletion, email us at support@kedai.sg — we action deletion requests within 30 days.

Shop customers should contact the shop they purchased from in the first instance (its contact details are on its storefront). You can also email us at support@kedai.sg and we will assist directly.

8. Data Retention

We retain data for as long as the related shop account is active. When an account is deleted on request, associated personal data is removed from active use within 30 days, and from backups as those backups expire on their fixed rotation.

9. Contact

For privacy questions, data requests, or to reach our data protection contact, email support@kedai.sg. This contact is available to shop owners and shop customers alike.

10. Changes to This Policy

We may update this policy from time to time. We will notify shop owners of significant changes via email or an in-app notice.