Privacy Policy

Keystonne OS is restaurant management software operated from India by Kerning Design LLP ("we", "us") — a limited liability partnership incorporated under the Limited Liability Partnership Act, 2008. Keystonne is a brand registered to Vibhas Singh; the service is operated by Kerning Design LLP, which determines the purposes of account, support and service-administration data. For restaurant-controlled customer records, the restaurant is the data fiduciary and we process data on its instructions.

Kerning Design LLP is registered with limited liability, LLPIN AAS-6453. Registered office: 2nd Floor, Space No. 04, Shri Pratap Tower, besides Phoenix United Mall, LDA Colony, Lucknow, Uttar Pradesh 226012, India.

This policy explains what personal data we handle when you use https://os.keystonne.in and the Keystonne OS marketing site, why we handle it, and how to contact us about it. India's Digital Personal Data Protection Act, 2023 ("DPDP Act") has a phased start. Its core processing, individual-rights and children's-data duties are scheduled to commence in May 2027. The requests and response commitments below are available now; this policy does not claim those future duties are already in force.

It is written to be read. If anything here is unclear, write to us at the address in Raising a grievance below and we will answer in plain language.

What we collect, and why

Your account. Your email address and password hash (or your Google account's email, if you sign in with Google), and the language you choose. We use these to sign you in and to speak to you in your language. Purpose: providing the service you signed up for. This describes our purpose, not a declaration that one legal basis covers every jurisdiction.

Your business. The business name, outlet address, GSTIN, FSSAI licence, PAN and registration type you enter at onboarding or in settings. These print on the tax documents the product exists to produce. They are business identifiers, but where a proprietor's PAN identifies a person, we treat it with the same care as personal data.

Your team. Names, phone numbers, roles and PINs (hashed) of staff you add. You are responsible for telling your team their details are stored here.

Your customers. Names and phone numbers you or your staff enter — for credit (house-account) records, loyalty, or receipts — and the order history attached to them. You are the data fiduciary for your customers' data; we process it on your instructions. We never sell it, never use it to advertise, and never contact your customers except to deliver something you asked us to send (an e-bill link, for example).

Operational records. Orders, bills, payments, stock movements and the double-entry journal derived from them. These are business records, retained because tax law expects them to be.

Support and demo requests. If you fill the contact form we collect the name, phone number and city you give us, solely to respond to you.

Where it lives

Business records are stored in a Supabase-managed PostgreSQL database in the ap-south-1 (Mumbai) region, with business access isolated by row-level security. The application runs on Vercel. Transactional email (sign-in and notifications) is delivered through Resend. The database's location does not mean every provider processes every category of data only in India; hosting, delivery, security and optional AI providers operate their own infrastructure.

Usage and performance measurement. We measure which pages are opened and how fast they load, using Vercel Web Analytics and Speed Insights — the same company that already hosts the application. Vercel describes Web Analytics as cookie-free aggregated measurement that uses a hash derived from the incoming request to distinguish visits; its visitor-session identifier is discarded after 24 hours. Speed Insights receives page-performance measurements. Our integration does not deliberately attach your account name, email address or customer details to these measurements. It removes the query string and fragment and replaces bearer-code segments on e-bill, unsubscribe, payment and export URLs before sending measurement events. Other page paths can contain record identifiers; these controls are not a promise that all request data is incapable of identifying someone.

See Vercel Web Analytics privacy information and Speed Insights for the providers' descriptions.

This includes pages your customers open from a link you sent them. They are measured with the same URL filtering. We do not use these measurements for advertising or deliberately link them to a customer profile.

Security and abuse prevention. Vercel BotID protects selected account-creation and recovery requests. Its browser challenge uses client-side signals to assess whether a request is automated; its analysis depends on the configured service level. Hosting and security services also receive request information such as IP addresses and browser details to serve and protect the service. These security checks are separate from page-view measurement. See Vercel BotID.

AI features. When you use an AI surface (the copilot, dish planner, voice entry), the text needed to answer — your question, dish names, your ingredient list — is sent to Anthropic's API to generate the reply. Model outputs never write to your data without your explicit approval, and AI features are optional: the product works with them off.

Payments. Payment credentials are handled by our payment gateways — Razorpay and Cashfree. We store subscription and mandate references, payment status, the outcome of a charge and the tax invoice raised against it. We do not store full card numbers or card security codes.

We do not sell personal data to anyone, and we do not use your business's data to train AI models.

How long we keep it

Your operational records are kept for as long as you have an account, because they are your books. If you close your account we delete your tenant's data after a winding-down period, except where Indian law requires longer retention of specific records. You can ask for deletion sooner at the address below.

Your rights

You can ask us now, at the address below, to:

• tell you what personal data of yours we hold,
• correct or complete it,
• erase it, where the law does not require us to keep it,
• and raise a grievance, as described below.

If you are a customer of a restaurant that uses Keystonne OS, your first stop is that restaurant — they control what was entered about you. We will help them honour your request.

Cookies

The app uses cookies and local browser storage for sign-in, language, service preferences and offline operation. Security providers may use their own request and browser mechanisms as described above. We do not set advertising cookies. Blocking essential storage may prevent sign-in or offline operation.

Children

Keystonne OS is a business tool. A person creating a business workspace must be at least 18 and authorized to act for the business. The eligibility declaration is not age verification. Do not create a workspace using a false declaration.

Restaurants remain responsible for having authority to enter information about their staff and customers, including any minors, and for providing appropriate notices and obtaining any required consent. Do not use the service for advertising directed at children. If you believe an under-18 person has created a workspace or a child's data has been entered without authority, contact support@keystonne.in. We will review the report, restrict inappropriate use and arrange correction or deletion where required, while preserving legally required fiscal records. Do not email identity documents or additional children's data unless we request a proportionate, secure way to verify the issue.

Changes

When this policy changes we will update the date above and, for material changes, tell you in the app before they take effect.

Raising a grievance

Write to the Grievance Officer, Kerning Design LLP at support@keystonne.in, or by post to Grievance Officer, Kerning Design LLP, 2nd Floor, Space No. 04, Shri Pratap Tower, besides Phoenix United Mall, LDA Colony, Lucknow, Uttar Pradesh 226012, India.

Tell us what happened and how to reach you. We acknowledge every grievance within 3 working days, and give a substantive response within 30 days. Where the law prescribes a shorter period, the shorter period applies.

These are our response commitments, not a claim that every past request met them. Ask for a reference when you contact us; include it in follow-ups. We may need to verify your authority before disclosing or changing personal data. We will explain any lawful retention requirement or other reason a requested action cannot be taken.