This policy explains what KIMates collects, why we collect it, and how we handle it.
1. Information We Collect
From Businesses:
- Company name, address, registration number
- Contact email, phone, WhatsApp number
- Login email and username
- Password (hashed, never stored in plaintext)
From Customers (via QR submission):
- Mobile number, full name
- Vehicle registration (fuel stations only)
- Invoice number and amount
- Optional: geolocation (only with explicit consent)
- Technical metadata: IP address, browser user-agent, timestamp
2. How We Use It
- Provide purchase tracking to businesses
- Authenticate user accounts and protect against fraud
- Send promotional emails (only if explicitly opted in)
- Debug issues and improve the Service
3. Data Sharing
We do not sell or rent your data. Customer purchase data is visible only to the business that owns the QR code the customer scanned.
4. Security
Passwords are hashed. Tokens rotate on refresh. Suspicious refresh-token reuse triggers automatic session revocation. HTTPS is required in production.
5. Your Rights
You may request deletion of your account and associated data at any time by contacting support@kimates.com.