Privacy policy

Last updated: 5 November 2026

Who we are

Kelmo ("Kelmo", "we") is the controller for personal data collected through this website and for our own customer relationships. Contact: hello@kelmo.ai. For privacy questions, email us with the subject "Privacy".

Our two roles

Controller: for website visitors, people who chat with us, request a demo or contact us, and our merchant account holders.

Processor: when merchants use Kelmo to take orders and payments from their own customers, the merchant is the controller and Kelmo processes that data on their behalf under a data processing agreement. Questions about a merchant's handling of your data should go to that merchant first.

What we collect

• Contact details you give us: name, work email, phone, business name, country, number of locations.
• Account data for Kelmo Manager users: login email, role, security settings, activity logs.
• Billing data: Stripe, our payment provider, collects your card details and billing address. We receive your name, email, country, VAT number, subscription status and the card's brand and last four digits. We never see full card numbers.
• Website chat (Kel): your messages, the page you were on and your region. We don't store your IP address.
• Technical data: browser, device and pages viewed, and cookie data where you have consented.
• Support messages.

Why we use it and our legal basis

• To reply to chats and enquiries and arrange demos: legitimate interests, or steps before entering a contract.
• To provide the Kelmo service and Kelmo Manager: performance of a contract.
• To keep the service secure and prevent fraud: legitimate interests.
• To meet tax, accounting and legal obligations: legal obligation.
• Marketing emails: consent, or soft opt-in for existing customers where the law allows. You can unsubscribe at any time.

Who we share it with

We don't sell personal data. We share it only with providers who help us run Kelmo, under contract and for our instructions:

• Stripe (subscription billing, under its own privacy policy)
• Hosting and infrastructure: Hostinger
• Stripe Connect (card payments, only for restaurants that connect their own Stripe account; the restaurant is Stripe's customer for those payments)
• Twilio (text message codes and phone calls)
• Google (maps, address search and app notifications through Firebase)
• Anthropic and OpenAI (AI features, including the website chat)
• Our email delivery provider
• Codemagic (building restaurant apps)

International transfers

We are based outside the European Economic Area. Where personal data moves outside the EEA, we use safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Website chat: 90 days, unless it becomes a sales enquiry.
• Enquiry data: up to 24 months after last contact.
• Account and billing data: for the life of the contract, then as long as tax law requires (generally six years).

Your rights

You have the right to access, correct, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent. Email hello@kelmo.ai with the subject "Privacy". We reply within one month.

Complaints

You can complain to the Data Protection Commission (Ireland): www.dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28. If you are in the UK you may also contact the ICO; in Australia, the OAIC.

Changes

We will post any changes here and update the date at the top. Material changes will be sent to account holders.