Privacy Policy
Last updated: 21 March 2026
1. Who we are
Kitt is an analytics and reporting platform operated by Discovery Kitchen ("we", "us", "our"). We provide marketing analytics services that connect to advertising platforms and e-commerce stores on your behalf.
If you have questions about this policy, contact us at hello@discovery-kitchen.com.
2. What data we collect
Account data
When you create an account we collect your name, email address, and organisation name. Authentication is handled by Clerk; we do not store passwords directly.
Connected platform data
When you connect an advertising or e-commerce platform (Meta Ads, Google Ads, Shopify, Google Analytics 4, TikTok Ads, Shiprocket, Razorpay, etc.) we pull performance data on your behalf — spend, revenue, impressions, clicks, orders, shipment status, and related metrics — and store it in your account's database. We access only the data scopes you explicitly authorise.
Credentials and access tokens
OAuth tokens, API keys, and other credentials you provide are stored encrypted in our database. We use them solely to fetch your data as directed by you. We never sell or share your credentials with third parties.
Usage data
We collect standard server logs (IP addresses, pages visited, timestamps) for security and performance purposes. We do not use third-party analytics trackers on the dashboard application.
3. How we use your data
- To provide the Kitt service — display your metrics, generate reports, send alerts
- To sync your connected platform data on a daily automated schedule
- To generate AI-powered insights using the Anthropic Claude API (data sent to Claude is subject to Anthropic's data policies; no training on your data)
- To send transactional emails (sync alerts, invites) via Resend
- To process payments via Stripe (billing data is handled entirely by Stripe; we do not store card details)
- To diagnose errors and improve the service
We do not sell your data. We do not use your advertising or sales data for any purpose other than providing the Kitt service to you.
4. Third-party services we use
| Service | Purpose | Data shared |
|---|---|---|
| Supabase (PostgreSQL) | Database hosting | All stored data |
| Vercel | Application hosting | Request logs |
| Clerk | Authentication | Email, name |
| Stripe | Billing | Email, billing info |
| Resend | Transactional email | Email address |
| Anthropic (Claude) | AI insights generation | Aggregated metrics (no PII) |
5. Data retention
Your account data and platform metrics are retained for as long as your account is active. If you close your account, we will delete your data within 30 days upon request. Aggregated, anonymised data may be retained longer for service improvement purposes.
6. Data security
All data is encrypted at rest (Supabase AES-256) and in transit (TLS 1.2+). API credentials are stored encrypted. Access to production data is restricted to authorised personnel only. We follow industry-standard security practices.
7. Your rights
You have the right to:
- Access a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Disconnect any platform integration at any time (this removes stored credentials)
- Export your metrics data in CSV format from the dashboard
To exercise any of these rights, email hello@discovery-kitchen.com.
8. Cookies
Kitt uses cookies only for session management (Clerk authentication). We do not use advertising or tracking cookies. No third-party cookie consent banners are required for the current feature set.
9. Children
Kitt is not directed at children under 16. We do not knowingly collect personal data from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of Kitt after changes constitutes acceptance of the updated policy.