Privacy Policy

Effective date: December 14, 2025

Kiosk Merchant Suite Privacy Policy

Introduction
Bilma Technologies Ltd ("we", "us", "our") operates Kiosk Merchant Suite ("Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our Services.

Scope
This policy covers personal data collected directly when you register, use the site, or interact with the Services, and data collected indirectly (analytics, logs). It applies to users worldwide; where local laws (e.g., GDPR, CCPA) provide more rights, we comply with those rules for applicable users.

1. Data we collect

- Account and profile data: name, email, phone number, billing address, password (hashed), profile photo.
- Store data: store name, store tagline, subdomain, logos and images you upload, store settings and content.
- Transaction and billing data: subscription plan, invoices, and payment metadata (note: full card numbers are handled by third-party payment processors).
- Usage data: logs, IP addresses, device and browser information, pages visited, and feature usage.
- Uploads: files you upload (images, CSVs, assets) that are stored in our storage (may be backed by AWS S3 or similar).
- Communications: messages you send to support, and emails we send back.

2. How we use data

- Provide and improve Services, host your Store, process your settings and uploads.
- Authenticate and secure your account, prevent fraud and abuse.
- Billing and customer support, including communicating billing events or issues.
- Personalization and product analytics to improve the platform.
- Legal compliance and enforcement of our Terms.

3. Legal basis for processing (GDPR)

- Performance of a contract: to provide the Services you request.
- Legitimate interests: improving and securing the Services, fraud prevention, analytics.
- Consent: where we ask for explicit consent (marketing emails), you can later withdraw it.

4. Third-party services and sharing

- We share data with necessary third parties: hosting providers, storage (e.g., AWS S3), analytics, email providers, and payment processors.
- We may share aggregated or de-identified data which cannot reasonably be used to identify you.
- We will not sell your personal data.

5. Cookies and tracking

- We use cookies and tracking technologies for authentication, session management, analytics, and personalization.
- You can manage cookie preferences via your browser or any controls we provide.

6. Data retention

- We retain personal data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.
- If you request account deletion, we will remove or anonymize your personal data subject to legal and operational constraints; certain backup or transactional records may persist for a limited period.

7. Security

- We use administrative, technical, and physical measures to protect personal data. Examples include encrypted connections (TLS), access controls, and secure storage.
- No service can be 100% secure; notify us immediately if you suspect a breach.

8. International transfers

- Data may be processed or stored in countries other than your own. When transferring data internationally we rely on contracts, adequacy decisions, or appropriate safeguards.

9. Your rights

- Access: You may request a copy of personal data we hold about you.
- Correction: You may request correction of inaccurate data.
- Deletion: You may request deletion of your personal data subject to legal/operational limits.
- Portability: You may request an export of data in a common format.
- Objection/Restriction: You may object to or request restriction of processing in certain cases.
- How to exercise: Contact support@mikiosk.com. We will respond according to applicable law.

10. Children

- Our Services are not directed at children under 13 (or higher minimum age where local law requires). We do not knowingly collect personal data from children.

11. Changes to this policy

- We will post updates to this policy and indicate the effective date. Material changes will be announced.

12. Contact

- For privacy questions, data requests, or complaints: support@mikiosk.com.

-- End of Privacy Policy --