This Privacy Policy applies to the processing of personal information when you use the Keeta merchant platform, including mobile applications, web portals, POS systems, and related services. It sets out our responsibilities and how we comply with applicable data protection laws. We aim to protect individuals’ privacy, act transparently, and handle Personal Data responsibly.
The data controller is the entity with which you have entered into the merchant services or onboarding agreement, which provides the services and determines the purposes and means of processing personal data.
For transparency, the operating entities include:
References to “Keeta”, “we”, or “us” refer to the contracting entity, and any references to “you” or “your” will be interpreted as a reference to Keeta partners (merchants).
When we refer to “Personal Data” in this Privacy Policy, we mean any data that can be used to identify you as an individual whether directly or indirectly.
This Privacy Policy applies to all Personal Data processed by Keeta, in any format and across all locations, systems, and business functions, including processing carried out by employees, contractors and third-party service providers acting on Keeta’s behalf. It applies to all data processing activities throughout the Personal Data lifecycle, from collection through to deletion or anonymization. This Privacy Policy is reviewed periodically and updated to reflect changes in our processing activities, legal requirements or best practices.
Please refer to your contracting entity for address details.
Email:email.dpo@keetainc.com
This privacy policy:
A. Personal Data and Information You Provide to Us: This refers to Personal Data and business information you actively provide when registering as a merchant, setting up your store, or communicating with us.
Identity and business registration data
We collect Personal Data and business information used to create and verify your merchant account, confirm your business eligibility, and comply with legal requirements. This includes, but is not limited to, your full name, national ID or business representative ID, business registration number or license, tax identification number, and proof of ownership or authorization.
Financial and payment data
We collect Personal Data and business information necessary to process payments and settlements, including your designated bank account details, payout preferences, payment history, and relevant tax or invoicing information.
Communications and feedback data
We collect records of your interactions with us, customers, and couriers. This includes support tickets, chat transcripts, call recordings, feedback, complaints, and responses to surveys or quality assessments.
Information for verification and security
To safeguard your account and Platform integrity, under certain circumstances we may request additional verification, such as identity documents, photos.
Communications and feedback data
We collect records of your interactions with us, customers, and couriers. This includes support tickets, chat transcripts, call recordings, feedback, complaints, and responses to surveys or quality assessments.
Information for verification and security
To safeguard your account and Platform integrity, under certain circumstances we may request additional verification, such as identity documents, photos.
B. Personal Data and Information We Collect Automatically: This refers to technical and operational information automatically collected from your device or business activities when you use our Platform or Services.
Transaction and Performance Data
We record details of your transactions and service performance, including order volumes, acceptance and cancellation rates, revenue reports, fulfillment times, and refund or dispute records.
Device and Technical Data
We collect technical information from the devices you use to access our Platform, including your IP address, unique device identifiers (e.g., MAC address or Advertising ID), operating system, browser type, connection type, and system error logs.
Usage Data
We collect data on how you interact with our Platform, such as page visits, feature usage, dashboard navigation, clickstream information, and session duration. This helps us improve usability and optimize system performance.
Location Data
With your authorization, we may collect precise geographic data to support delivery coordination, service zone validation, and fraud prevention.
C. Personal Data and Information We Receive from Third Parties: We may receive data about you or your business from trusted external sources to verify your eligibility, enhance service quality, and ensure compliance.
Payment and Financial Partners
We receive transaction confirmations, payout status, risk assessments, and fraud-prevention reports from banks, payment gateways, and financial service providers.
Verification and Compliance Partners
We may obtain results of identity checks, business license verifications, and compliance screenings from third-party KYC (Know Your Customer) or due diligence partners.
Customers and Couriers
We may receive data related to your store’s orders, such as delivery confirmations, issue reports, customer ratings, or service complaints submitted through the Platform.
Marketing, Analytics, and Advertising Partners
We may receive aggregated or referral data (e.g., how your store was discovered, campaign effectiveness, or promotional reach) from advertising and analytics providers to support your business growth.
We will use your information for the purposes set out below and rely on the lawful bases listed for such processing activities.
Where Personal Data is not made available to us, we may not be able to provide you the Services you have requested or otherwise to carry out our activities in the context of our relationship with you.
Cookies are small text files stored on your browser or device. Cookies allow us to recognize your preferences in order to tailor our pages and Services to your specific needs. Some information is saved in these text files so that, when you visit our pages again, your browser or device is recognized and configured according to your previous preferences.
Cookies usually have an expiration date. Some cookies, for example, are automatically deleted when the browser is closed, while others may be stored on the device for a longer period until they are manually deleted.
We may use the following types of cookies under this Privacy Policy:
If you wish to refuse the installation of these cookies on your device or opt to remove cookies, you can do so through your browser settings. For more information on how to configure cookie usage in your browser, please refer to the website of your browser’s developer, such as:
It is important to clarify that we are not responsible for the use of cookies by third parties. Cookies placed by third parties may continue to track your online activities, so we recommend regularly managing the cookies installed in your browser.
We share your Personal Data and business information with government authorities, law enforcement, and third party service providers only when it is necessary to provide our Services, operate our business, or comply with legal, contractual or regulatory obligations. When sharing is required, we ensure that the recipients process your Personal Data and business information securely and only for the purposes described in this Privacy Policy, implements appropriate data protection measures, and we apply additional safeguards to preserve the confidentiality, integrity, and security of your Personal Data and business information.
The servers used to store the Personal Data described in the "What Personal Data do we collect" section may be located outside of your country or region, including in locations such as Frankfurt, Hong Kong, and the Kingdom of Saudi Arabia.
As a global company, some entities with whom we share Personal Data, as detailed in the "Who do we share your Personal Data and business information with" section (such as our corporate affiliates, third-party service providers, and partners), may also be located outside your jurisdiction. These entities might require access to your Personal Data and business information to provide their services or for the purposes outlined in this Privacy Policy, provided that such access is strictly limited and subject to robust security controls.
Therefore, we may transfer your Personal Data to other countries or regions that have been recognized by the applicable data protection authority as having adequate levels of protection for Personal Data (i.e., pursuant to ‘adequacy decisions’). In the absence of adequacy decisions, we will only transfer your Personal Data to countries which do not have data protection laws or to countries where your privacy and other fundamental rights will not be protected as extensively where we have implemented appropriate safeguards to ensure that your Personal Data remains protected and secure. Appropriate safeguards may include Standard Contractual Clauses approved by the competent authority, which are legal terms that bind us and the recipient to protect your Personal Data.
We only keep your Personal Data for as long as is reasonably necessary for the purposes set out in this Privacy Policy and to fulfil our legal, contractual or regulatory obligations. We will securely erase or anonymise your Personal Data as soon as the purpose for collecting it has expired. We will adopt different deletion rules according to different purposes and concrete conditions of the processing. Upon expiration of the retention period, we will process your Personal Data pursuant to the requirements of applicable laws, including deleting or anonymizing your Personal Data.
We provide you with the ability to access, manage, and update some of your Personal Data directly within your account settings.
Depending on the applicable data protection laws in your jurisdiction, you may have specific rights regarding the Personal Data we hold about you. These rights may include:
To exercise the rights above, you may log in to the Platform with your account and operate on your own, or you may raise your requests regarding these rights or other related matters by emailing us at email.dpo@keetainc.com.
Upon receiving your request, we will verify your identity and process it in accordance with applicable laws and our internal procedures. Please note that certain information may need to be retained as required by law or for legitimate business purposes (such as fraud prevention, record-keeping, or dispute resolution).
Please note that these rights are not absolute and may be subject to certain conditions or limitations under applicable law.
If you wish to exercise any rights you may have under applicable law, please contact us using the details provided in the “Contacting Us” section of this Privacy Policy. We will assess and respond to your request in accordance with the requirements of applicable law.
Our contact details are set out at the top of this Privacy Policy. Please do contact us if you would like to exercise one of your rights listed above or if have any questions or complaints about this Privacy Policy or about how we handle your Personal Data. You also have the right to complain to the relevant supervisory authority. We would however always appreciate the opportunity to address your complaint first.
From time to time, we may make changes to this privacy policy to ensure that it is accurate and up to date and to reflect any changes in the law. When we update the privacy policy, we will update the “Last Updated” date at the top of the new privacy policy or providing any other notice required by applicable law. We recommend that you review the privacy policy each time you visit the Platform to stay informed of our privacy practices.
Certain jurisdictions have additional terms described below under applicable laws. If you are located in any jurisdiction set out below, the additional terms outlined below apply to you in addition to the other terms of this privacy policy. In case of any conflicts between the other terms of this privacy policy and the applicable additional terms described below, the terms described below shall govern.
Under Brazilian law, you have specific rights regarding your personal data. We are committed to ensuring transparency and enabling you to exercise your rights effectively, which include.
In certain cases, we may be unable to comply with your request, either partially or entirely. Such circumstances may include, for example: (i) when compliance is technically unfeasible given the nature of our business; (ii) when compliance would violate our intellectual property or trade secrets; or (iii) when compliance would jeopardize the rights of third parties. In such cases, we will provide a clear explanation of the reasons for our decision.
In order to provide you with our Services, your personal data may be transferred to and processed in jurisdictions outside of Brazil for processing on our servers, which are hosted in Frankfurt, Germany. We will ensure that such transfers comply with the requirements of the General Data Protection Law (LGPD) and are subject to appropriate safeguards even while your contractual personal data is being processed outside Brazil, which may include, for example, the execution of the Standard Contractual Clauses published by the National Data Protection Agency (Agência Nacional de Proteção de Dados – ANPD) or the implementation of other transfer mechanisms provided for in the applicable law for protecting your data.
If you have any questions or comments about our privacy policy or the terms mentioned, you may contact our Data Protection Officer, Carlos Marcondes, at email.dpo@keetainc.com.