Privacy Policy

1. Introduction

At KVTemplate ("we", "our", or "the Platform"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our restaurant platform in Ecuador.

By using KVTemplate, you accept the practices described in this Privacy Policy.

2. Data Controller

The controller responsible for processing your personal data is:

3. Data We Collect

3.1 Data provided by the User (Restaurant)

• Account information: Name, email address, password
• Restaurant information: Trade name, legal name, tax ID, address, phone number
• Menu content: Categories, dishes, prices, descriptions, photographs
• Settings: Preferences, hours, notifications

3.2 Automatically collected data

• Access data: IP address, browser type, operating system, pages visited
• Usage data: Features used, session time, interactions
• Device data: Device type, unique identifiers
• Cookies and similar technologies: Browsing information (see Cookie Policy)

3.3 Restaurant end customer data

When a restaurant uses KVTemplate to receive orders through its digital menu, the Platform may act as a data processor for certain data belonging to that restaurant's end customers, solely for the purpose of facilitating order reception and communication. The data we may process as a data processor includes:

• Contact name and phone number (for order confirmation and status tracking)
• Order information (items requested, total, payment method, and delivery address if applicable)
• Order history associated with the restaurant
• Preferences, notes, and comments linked to orders

Confirmation and communication channels with the end customer: Depending on the configuration the Restaurant activates from its administration panel, order confirmation and communication may take place through one or more of the following channels: (a) directly on the restaurant's digital menu or bio page, where the customer views the confirmation and order status in real time; (b) via the automated WhatsApp chatbot, if the Restaurant has it enabled; and (c) through order status notifications sent by the Restaurant to the customer, which may include updates such as 'received', 'in preparation', 'on the way', or 'delivered'. In all cases, the Restaurant is responsible for configuring and managing these communication channels with its end customers.

Protection of this data under the LOPD: All end customer data is processed in strict compliance with Ecuador's Organic Law on Personal Data Protection (LOPD). KVTemplate implements appropriate technical and organizational measures to guarantee the confidentiality, integrity, and availability of this data, including encryption in transit and at rest, restricted access, and auditable security controls.

The Restaurant, as the data controller vis-à-vis its end customers, is the sole party obligated to: (a) inform its customers clearly and transparently about the processing of their personal data, including KVTemplate's involvement as a data processor; (b) obtain and manage the necessary consents in accordance with Ecuadorian law; (c) handle and resolve access, rectification, erasure, objection, and portability requests submitted by its customers; and (d) notify its customers of any security breach that could affect their personal data.

KVTemplate does not use, share, sell, or process end customer data for purposes other than those strictly necessary to provide the service contracted by the Restaurant. We do not create profiles, perform automated decision-making, or transfer this data to unauthorized third parties.

4. Purpose of Processing

We use your personal data for the following purposes:

• Service provision: Providing platform access, creating and managing digital menus, processing orders
• Communication: Sending order notifications, service updates, technical support
• Payments: Processing subscription payments, generating invoices
• Service improvement: Analyzing usage, resolving issues, developing new features
• Marketing: Sending promotions and news (only with your consent)
• Legal compliance: Responding to authority requests, preventing fraud

5. Legal Basis

The processing of your data is based on:

• Contract performance: For the provision of requested services
• Consent: For marketing, non-essential cookies
• Legitimate interest: For security, service improvement, fraud prevention
• Legal compliance: For tax and regulatory obligations in Ecuador

6. Data Recipients

Your data may be shared with:

• Service providers: Hosting (Vercel), databases (Supabase)
• WhatsApp/Meta: For order integration (data governed by Meta's policy)
• Authorities: When required by law
• Professional advisors: Accountants, lawyers (only when necessary)

We do not sell your personal data to third parties.

7. International Transfers

KVTemplate uses cloud infrastructure services (such as Vercel and proprietary VPS servers, as well as Supabase for databases) that may process data on servers outside Ecuador, specifically in the United States and the European Union.

These international transfers are carried out under appropriate safeguards in accordance with Article 39 of Ecuador's Organic Law on Personal Data Protection, including: (a) standard contractual clauses approved by the European Commission or the foreign equivalent; (b) assessment that the destination country offers an adequate level of protection; and (c) continuous verification of the security measures implemented by the providers.

By using the Platform, you expressly consent to these international data transfers as described above. If you wish to obtain more information about the specific guarantees applied, you may contact us at [email protected].

8. Retention Period

We retain your data for:

• Active account: While you maintain your active account
• Billing data: 7 years (per SRI tax requirements)
• Access logs: 12 months
• After account deletion: 30 days for export, then deletion

9. Security and Breach Notification

We implement technical and organizational measures to protect your data:

• SSL/TLS encryption on all transmissions
• Encrypted storage of sensitive data
• Two-factor authentication available
• Access restricted to authorized personnel
• Continuous security monitoring
• Regular backups

In the event of a security breach affecting your personal data that may pose a high risk to your rights and freedoms, KVTemplate undertakes to: (a) notify the Ecuadorian Personal Data Protection Authority within a maximum period of seventy-two (72) hours from becoming aware of the breach, in accordance with Article 42 of the Organic Law on Personal Data Protection; (b) communicate to the affected data subject, without undue delay, the nature of the breach, the possible consequences, and the measures adopted or proposed to remedy it; (c) document all security breaches, their effects, and the corrective measures implemented.

10. Your Rights

Under Ecuador's Organic Law on Personal Data Protection, you have the right to:

• Access: Obtain confirmation about whether we process your data and access it
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Objection: Object to processing in certain circumstances
• Restriction: Request restriction of processing
• Portability: Receive your data in a structured and readable format
• Withdrawal: Withdraw your consent at any time

To exercise these rights, contact: [email protected]

11. Minors

KVTemplate is not designed for individuals under 18 years of age. We do not knowingly collect data from minors. If you discover that a minor has provided personal data, please contact us immediately to have it removed.

12. Cookies and Similar Technologies

We use cookies and similar technologies. For more information, please see our Cookie Policy.

13. Changes to this Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through a notice on the Platform or by email. The effective date is indicated at the beginning of the document.

14. Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with Ecuador's Personal Data Protection Authority.

15. Contact

For questions about this Privacy Policy or to exercise your rights:

• Email: [email protected]
• Contact form