Privacy

GetGrocery is a demo of Kiosk. This page says what it stores and for how long.

What GetGrocery stores

• Accounts. An account that an AI assistant opens here has no e-mail address and no password. The demo's sample accounts, which you can sign in with, have an e-mail address and a hash of a password.
• Your orders. The products, the total, the delivery slot, the delivery address, your time zone, the status, and any refund or credit.

What Kiosk stores for an AI assistant

• The assistant's key. An AI assistant that registers gives us its public key. We store it with the account it acts for, the label you give it, its spending cap and when it was linked. We never receive its private key. An assistant that registers on its own gets an account with no e-mail address.
• Link codes. When you link an assistant to your account, we store a hash of the code, never the code. A code expires 15 minutes after we make it.
• Call counts. We count the calls of each assistant account since its last proof of work, and we record the value of each visit you complete. The call toll reads both.
• Events. We keep each event that we send to your assistant, for example a confirmation, for 24 hours. Then we delete it.
• Payments. You enter your card on Stripe's page, and Stripe keeps it. We store your Stripe customer id, the two mandates that your assistant signs for each payment, the amount, the currency, Stripe's payment id, the receipt values and any refund. This demo uses Stripe's test mode: no real money moves.
• Identity checks. We store only the facts that the KYC provider confirmed, for example age_over_18, and when it confirmed them. We never receive a document, a name or a date of birth.

Server logs

Each request writes a log line with its path, its parameters and the IP address it came from. We remove passwords, e-mail addresses, tokens and keys from the parameters before we write them. The server's system journal keeps these lines until it deletes its oldest lines to stay below its size limit.

We do not sell or share what we store. We set one cookie, the session cookie that keeps you signed in and protects our forms.

How long we keep it

We keep everything above that names no other time until we wipe this demo. Some orders here were placed by real AI assistants, so a routine reset keeps accounts and orders. We wipe them by hand, with no fixed schedule.