Privacy Policy

Vendor accounts. When you create a kitchen account we collect your email address, name, and the kitchen details you enter (name, location, hours, menu, payment instructions). If you sign in with Google, we receive your name and email from Google.

Customer orders. Customers do not create accounts. When someone places an order we collect the details they enter — name, phone number, email (optional), delivery address (for delivery), and the items ordered — so the order can be passed to the kitchen.

Technical data. Basic logs and session cookies needed to keep you signed in and to operate the service.

We use it to operate Khaao: to create your kitchen’s ordering page, to route each order to the correct kitchen, to show vendors their orders, and to provide support. We do not sell your information.

An order’s details are shared with the kitchen you ordered from, so it can prepare and fulfil the order. We use trusted service providers to run Khaao — including Supabase (database and authentication), Vercel (hosting), and Google (sign-in) — who process data on our behalf.

Booking a demo. Our “Book a demo” page (/book) embeds Calendly, a third-party scheduling service based in the United States, to let you book a live demo session with our team. Calendly is loaded only on that page and sets its own cookies there; when you book, the name, email and any answers you enter go to Calendly to schedule the meeting. We pass only campaign (UTM) parameters to Calendly — never your personal details in the link.

To understand how people find and use Khaao, we use two privacy-conscious analytics providers: PostHog (product analytics — pageviews, referrer/campaign source, which links are clicked, and where visitors drop off) and Microsoft Clarity (aggregate session replay and heatmaps). Both run in a low-PII configuration: we collect coarse, non-identifying data such as device type, browser, approximate city/region (from IP, which is then discarded), referrer and campaign (UTM) parameters, and the on-site events we define. Sensitive fields — including checkout customer details — are masked and are never sent to analytics; that information stays in our database (Supabase) only. We do not use these tools for cross-site advertising and they do not require a cookie banner for our Canadian audience. PostHog (US/EU) and Microsoft Clarity (US) process this data outside Canada; by using Khaao you consent to this cross-border processing. You can opt out of analytics collection at any time by enabling your browser’s “Do Not Track” setting or an ad/tracker blocker.

Online card payments are processed by our payment provider, Stripe; the kitchen is the merchant and receives the funds in its connected Stripe account. Khaao does not collect or store your full card or banking details. Where a kitchen offers an offline method (such as cash or Interac e-transfer), that payment is arranged directly between the customer and the kitchen.

We keep account and order information for as long as your account is active or as needed to operate the service and meet legal obligations. You can ask us to delete your account and associated data.

You may request access to, correction of, or deletion of your personal information by contacting us. Customers who want an order record removed can contact the kitchen or us.

Khaao is not directed to children and is intended for use by adults operating or ordering from independent kitchens and restaurants.

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Questions about this policy? reach out to us and we’ll respond as soon as we can.