Legal

Privacy Policy

Last updated: June 2, 2026

1. Who We Are

Luxe AI is a product of Kintari Technologies Limited (trading as “Anasatech”), a company registered in the Republic of Ghana. We provide cloud-based point-of-sale, inventory management, and AI-powered business intelligence software for businesses across Africa.

Registered Name: Kintari Technologies Limited

Trading As: Anasatech

Location: Accra, Ghana

Contact: info@anasatech.com

2. Scope

This Privacy Policy applies to all users of:

  • Luxe AI Web Application — luxeai.anasatech.com
  • Customer Ordering App — customer.anasatech.com
  • Luxe AI Website — www.anasatech.com
  • Mobile applications (current and future)

It covers data collected from business account owners, their employees (authorized users), and end customers who interact with businesses through our platform.

3. Data We Collect

Account Information

When you create a Luxe AI account:

  • • Full name, email address, phone number
  • • Business name, address, and branch information
  • • Profile photo (optional)
  • • Password (stored in encrypted form)

Business & Operational Data

In the course of using our platform:

  • • Product catalogs, pricing, and inventory levels
  • • Sales transactions and order history
  • • Purchase orders and supplier information
  • • Stock transfer records between branches
  • • Financial data (expenses, revenue, payment records)
  • • Customer and employee records created by businesses

Payment Information

We facilitate payments through Paystack. We do not store full credit card numbers or mobile money PINs. Payment processors handle card data in compliance with PCI-DSS standards.

AI Interaction Data

When you use our AI Chat feature, we collect your queries and the responses generated. AI queries are processed by third-party language model providers (Google, OpenRouter) — only business-context data relevant to your query is shared, never raw credentials or payment data.

Technical & Usage Data

  • • IP address, browser type, device information
  • • Pages visited, features used, session duration
  • • Error logs and performance data

Cookies & Analytics

Our application uses a session cookie solely to maintain your authenticated session. We do not use tracking cookies. We use Google Analytics on our marketing website to understand traffic patterns — this collects anonymized usage data subject to Google's privacy policy.

4. How We Use Your Data

1Provide, maintain, and improve our services
2Process transactions and send transaction notifications
3Generate business reports and AI-powered insights
4Provide customer support
5Send service-related communications (not marketing)
6Detect and prevent fraud or unauthorized access
7Comply with legal obligations
8Aggregate anonymized data for product improvement

We do not sell your personal data to third parties. We do not use your business data for advertising purposes.

6. Data Sharing & Third Parties

We share data only with the following service providers:

ProviderPurpose
PaystackPayment processing (cards, Mobile Money)
Google Cloud / OpenRouterAI language model inference
RailwayCloud infrastructure hosting
Google AnalyticsWebsite traffic analytics (anonymized)

All third-party providers are bound by data processing agreements. We do not share data with third parties for their own marketing purposes.

7. International Data Transfers

Our services are hosted on cloud infrastructure that may process data outside your country of residence. Where data is transferred internationally, we ensure appropriate safeguards:

  • • Standard contractual clauses with service providers
  • • Compliance with applicable data transfer frameworks
  • Encryption of data in transit and at rest

8. Data Retention

We retain your data for as long as your account is active. When you request account deletion:

1
Your account is deactivated immediately
2
All personal and business data is permanently deleted within 90 days
3
This grace period allows for backup cleanup and fraud prevention review
4
Anonymized, aggregated data (which cannot identify you) may be retained for analytics

Exception: Financial records may be retained longer where required by law (e.g., tax compliance — typically 5-7 years depending on jurisdiction).

9. Data Security

We implement industry-standard security measures:

Encryption in transit (TLS 1.2+) and at rest
Secure password hashing (bcrypt)
Role-based access controls
Regular security audits
Encrypted database backups
Secure HTTP-only session cookies

We will notify affected users promptly in the event of a data breach.

10. Your Rights

Under applicable law — including Ghana's Data Protection Act 2012, Kenya's Data Protection Act 2019, Uganda's Data Protection and Privacy Act 2019, Botswana's Data Protection Act 2018, Zambia's Data Protection Act 2021, and Mauritius' Data Protection Act 2017 — you have the right to:

AccessRequest a copy of your personal data
RectificationCorrect inaccurate or incomplete data
DeletionRequest deletion of your data ("right to be forgotten")
Data portabilityReceive your data in a machine-readable format
RestrictionLimit how we process your data
ObjectionObject to processing based on legitimate interest
Withdraw consentWhere processing is based on consent

To exercise any of these rights, contact us at info@anasatech.com. We will respond within 30 days.

11. Age Requirements

18+

Account owners (business owners who register and accept terms)

16+

Authorized users (employees added by the account owner)

We do not knowingly collect personal data from individuals under 16. If we become aware that a user is under 16, we will delete their data promptly.

12. Business Customer Data

Businesses using Luxe AI may collect data about their own customers through our platform. In this case:

The business is the data controller for their customer data
Kintari Technologies Limited acts as a data processor
Businesses are responsible for obtaining appropriate consent from their customers

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notification at least 14 days before the changes take effect. Continued use of the service after changes constitutes acceptance.

14. Governing Law

This Privacy Policy is governed by the laws of the Republic of Ghana, including the Data Protection Act 2012 (Act 843). For users in other jurisdictions, additional local data protection rights may apply as referenced in Section 10.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

Kintari Technologies Limited

Trading as Anasatech

📧 info@anasatech.com

📍 Accra, Ghana