Privacy Policy

Account information. When you sign up, Kiosk receives your email address and basic account identifiers from Clerk, the authentication provider used by the platform.

Business profile data. When you create a business profile, Kiosk stores the information you provide: business name, description, category, services, location, contact details, opening hours, and any other fields you complete.

Usage and event data. Kiosk records events such as when a business profile is viewed, contacted, or accessed through an MCP endpoint. These events are associated with the business profile, not directly with individual visitors.

Agent interaction data. When an AI agent connects to a business MCP endpoint, Kiosk logs session events and tool calls. These logs are used for the analytics shown to business owners.

Kiosk uses the information you provide to operate the platform:

• To create and display your business profile
• To provision and serve your business's MCP endpoint to compatible AI agents
• To display analytics about how your profile has been accessed
• To maintain platform security and prevent abuse

Kiosk does not sell your personal information to third parties. Kiosk does not use your information for advertising targeting.

When you publish a business profile, the information in that profile becomes publicly accessible. This includes your business name, description, services, location, contact details, and opening hours.

Published profiles are accessible through the Kiosk marketplace, the Kiosk Master MCP endpoint, and business-specific MCP endpoints. Compatible AI agents may access, store, and use this information according to their own policies.

Your account email address and Clerk user identifier are never included in public-facing responses.

Kiosk uses the following third-party services to operate:

• Clerk — handles user authentication, sign-in, and sign-up. Your email and account credentials are stored and managed by Clerk. See clerk.com/privacy.
• Supabase / PostgreSQL — stores business profiles, categories, capabilities, analytics events, and agent interaction logs. Data is stored in a PostgreSQL database hosted on Supabase.
• Amazon Web Services — the platform infrastructure runs on AWS ECS Fargate. Application logs are collected by Amazon CloudWatch. See aws.amazon.com/privacy.

Business profile data is retained while your account remains active. If you delete a business profile, its data is removed from the database. Agent event logs associated with a deleted business are set to null but may remain in the database for operational purposes.

We do not currently have an automated process for account deletion. To request deletion of your account and associated data, contact us through the project repository.

Kiosk uses reasonable technical measures to protect stored information, including encrypted connections and secure credential management through AWS Secrets Manager.

No system is completely secure. We cannot guarantee that information stored on the platform will never be accessed without authorisation.

You can edit or delete your business profile at any time through your dashboard. You can request deletion of your account and associated data by contacting us through the project repository.

This platform does not make specific claims about compliance with any regional privacy regulations. If you have concerns about how your data is handled, please contact us.

For privacy-related questions, open an issue on the project repository.