Privacy Policy

1. Who we are

This website (kpos.ai, the “Site”) is operated by Keyus Inc (“KPOS,” “we,” “us”), a California-based company located at 735 W Duarte Rd Ste 307, Arcadia, CA 91007. This Privacy Policy explains how we collect, use, disclose and protect information in connection with the Site.

2. Information we collect

Information you provide

When you submit a demo request or contact form, we collect the information you choose to provide — typically your name, work email, company, phone number and message.

Information collected automatically

We use a privacy-friendly, cookieless web analytics service (Cloudflare Web Analytics) to understand aggregate traffic and performance. It does not use cookies or fingerprinting and does not track you across sites. Standard server logs may record technical data such as IP address, browser type and pages requested.

3. How we use information

• To respond to your inquiries and demo requests;
• To provide, maintain, improve and secure the Site;
• To communicate with you about products and services you requested;
• To comply with legal obligations and enforce our terms.

4. How we share information

We share information only as needed:

• Service providers who process data on our behalf — for example, our form-delivery provider (Web3Forms), our hosting/analytics provider (Cloudflare), and our email provider (Google Workspace / Google LLC), which receives and stores the inquiry emails sent to us;
• Advertising measurement partners (Google, LinkedIn, OpenAI), which receive anonymous conversion signals as described in Section 5;
• Legal and safety purposes, where required by law or to protect rights and safety;
• Business transfers, in connection with a merger, acquisition or sale of assets.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under California law.

5. Cookies and tracking

Our traffic analytics are cookieless (Cloudflare Web Analytics). On the pages our ads link to (and for submissions of our contact form and partner application portal) we also measure, first-party and without cookies, how long the page is viewed, how far it is scrolled and whether the form is started or the contact link is clicked — no form contents are included. In addition, to measure whether our advertising works, the Site loads conversion-measurement tags from our advertising partners: Google (Google Ads / Google Analytics 4, loaded with Consent Mode defaults set to “denied” until you accept), LinkedIn (Insight Tag) and OpenAI (ChatGPT ads measurement pixel). These tools may use cookies or similar technologies to attribute a visit or inquiry to an ad. When you submit a form, we report only an anonymous conversion event — your name, email, phone and message are never included in measurement data. Essential local storage (for example, your language or theme preference) stays in your browser.

6. Data retention

We retain the information you submit for as long as necessary to respond to your inquiry and for legitimate business or legal purposes, after which it is deleted or anonymized.

7. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use and disclose;
• Access a copy of your personal information;
• Delete your personal information, subject to exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information — note we do not sell or share it;
• Non-discrimination for exercising your rights.

To exercise these rights, email us at cs@key.us. We will verify your request and respond within the time required by law.

8. Do Not Sell or Share My Personal Information

We do not sell or share your personal information. Because we do not engage in these activities, no opt-out mechanism is required; however, you may still contact us with any questions at cs@key.us.

9. Security

We use reasonable administrative, technical and physical safeguards (including HTTPS and access controls) to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

The Site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

11. International users

The Site is operated in the United States. If you access it from outside the US, you understand your information will be processed in the US.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision.

13. Contact us

Keyus Inc · 735 W Duarte Rd Ste 307, Arcadia, CA 91007
Email: cs@key.us · Phone: +1 (833) 833-3833

Appendix — Text messaging (SMS)

When you call a restaurant served by KPOS and verbally agree to receive a text, we collect your mobile phone number (from caller ID) to send the message you requested — such as the restaurant’s address, a menu or online-ordering link, or an order confirmation. Mobile phone numbers and SMS opt-in consent are used solely to deliver the messages the caller requested and will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Message frequency depends on your requests; message and data rates may apply. Reply STOP to opt out and HELP for help at any time. See our SMS Program & Messaging Policy for details.

Appendix — KBoss mobile app

The KBoss mobile app (the “App”) is a business-analytics app for owners and managers of restaurants using the KPOS point-of-sale system. The App is published by Hante Corp.; data processing in connection with the App follows this Privacy Policy.

Information the App processes

• Account & authentication. Your merchant account identifier and authentication tokens, used to sign you in and give you access to your own business data. Passwords are encrypted in transit and never stored by the App in plaintext.
• Business data. Sales, orders, products and related analytics for your stores, retrieved from KPOS servers (api.kpos.io) for display. The App is a viewer — this data remains your business’s.
• Push notification token. If you enable notifications, a device push token (via Firebase Cloud Messaging, a Google service) is used to deliver business alerts such as refunds or anomalies.
• Basic device data. Standard technical information needed to operate and secure the App (e.g., app version and platform).

How it is used

Solely to provide the App’s functionality: authenticate you, display your business analytics, and deliver alerts you opt into. The App does not use your data for advertising, does not sell it, and does not track you across other companies’ apps or websites (no advertising identifiers).

Retention and your choices

Push tokens are retained only while notifications are enabled — turning notifications off invalidates the token. You can disable notifications in the App or device settings and sign out at any time. To access, correct or delete account or business data, email cs@key.us.

Appendix — Ordering through AI assistants (KposGo connector)

Some KPOS restaurants can be ordered from through AI assistants (for example Claude or ChatGPT) using our KposGo connector at mcp.kposgo.com and the restaurant pages at kposgo.com/r/…. This appendix covers that service.

What the assistant sends us

Only what is needed to prepare your order: the restaurant, the items, quantities and options you chose, any item notes you asked for, an optional first name used to greet you, and a cancellation reason if you ask to cancel. Our tools refuse card numbers, phone numbers and payment claims. Your IP address is used transiently for rate limiting and abuse prevention.

What you give us directly

To confirm an order you open our confirmation page and enter your mobile number, which we verify by SMS and use to sign you in to the restaurant’s KPOS customer account. Your number is shared with the restaurant for pickup only and is never returned to the AI assistant. Payment details are entered on the restaurant’s KPOS checkout page and handled by our payment processor; they never pass through the assistant or our ordering API.

What the assistant can see

The order’s status, pickup time, the restaurant’s order reference and a pseudonymous customer reference — not your name, phone number, address or order history.

Retention

Order records are kept as required for the restaurant’s accounting and our legal obligations. Confirmation-page sign-in sessions expire and are deleted; the phone number stored with them is deleted with the session.

Your AI assistant

The AI assistant you use is operated by its own provider (such as Anthropic or OpenAI), whose privacy policy governs your conversation with it. We do not receive your conversation, only the tool requests described above. Questions or requests: cs@key.us.