01
Personal data operator
- Operator: AREVIAN TECHNOLOGIES LLC.
- Tax ID (INN): 03037538 — entry in the Republic of Armenia state register of legal entities.
- Registration jurisdiction: Republic of Armenia.
- Email for personal-data requests and general contact: [email protected].
- Contact phone: +374 95 048 579.
02
Account and sign-in
- Customers, partners (restaurants, their staff, and couriers), and the KERI team have separate accounts. A person in two roles has two independent accounts.
- You can sign in with email and password, or with Google, Apple, or Telegram — the options depend on where you sign in (ordering site, CRM, Telegram Mini App, apps). Passwords are stored only as a one-way hash.
- An account holds your name, phone, email, interface language, and city — and, if you sign in with Google, Apple, or Telegram, your account identifier in that service.
- An email address counts as confirmed after a code from an email or a sign-in with Google or Apple. A phone number can be changed only with a code sent via Telegram.
- To keep sign-in safe, we keep session details: device and browser, IP address, sign-in time, and devices you allowed to sign in without a code.
- From the IP address of the last sign-in we work out an approximate country and city, and if you chose a city on the ordering site or in the Mini App, we keep it on the account. This shows us in which regions the service is used.
03
Orders and delivery
- Order items and total, address and map point, recipient name and phone, comments, how you receive the order (delivery or pickup), and how you pay.
- Where the order was placed (website, Telegram, or app), the delivery time promised at checkout, and the actual time of each stage — to show the status and improve delivery times.
- Loyalty points, promo codes, and promotions you used; reviews and ratings.
- To find the address and plan the route, the address text and coordinates are sent to Google Maps, or — if it is unavailable — to LocationIQ or OpenStreetMap Nominatim.
04
Payments
- Card payments are made on the secure AmeriaBank (vPOS) page. The card number, expiry date, and CVV are entered at the bank — KERI never receives or stores them.
- Payment is two-stage: the bank first holds the amount and charges it when the restaurant accepts the order. If the order is canceled earlier, the hold is released.
- You can save a card for future payments. The bank keeps the card binding; we keep only the masked number (last 4 digits), type, expiry, and the binding identifier. When you add a card in your profile, the bank checks it with a small amount and returns it. You can remove a card in your profile — the binding is switched off at the bank too.
- For payments we keep the amount, status, time, and bank transaction numbers — for the order, refunds, and reconciliation.
- Restaurants pay for the subscription and Keri AI tokens the same way. Payouts to restaurants and couriers go through AmeriaBank to the bank details they provided.
05
Support and attachments
- We keep your support conversations and attached files: photos (JPEG, PNG, WebP), PDF, DOCX, XLSX, TXT, and CSV — up to 10 MB per file and up to 5 files per message.
- Photos are re-saved: metadata, including location (GPS), is removed.
- Files are kept in private storage. Only the participants of the conversation and KERI support staff can open them, through a temporary link.
06
Keri AI
- Keri AI is a set of CRM features for restaurants: filling a dish card, importing a menu from photos and files, and creating a cover and a logo. They run only when restaurant staff start them, and cost Keri AI tokens.
- Only what the task needs is sent: dish names, ingredients, and descriptions; menu photos and files; the cover or logo description and restaurant details (name, cuisine).
- Keri AI uses artificial intelligence models from third-party providers: only the data the chosen task needs is sent to them. Customers’ personal data is not sent to Keri AI.
- The CRM asks for separate confirmation before sending menu files. Photos are stripped of metadata and downsized before sending. KERI does not store the original menu import files on disk.
- Results (texts, the menu draft, covers, and logos) and token history are kept so the team can come back to them. Do not attach personal documents or customer data.
07
Partners and couriers
- Restaurants: venue and legal entity details, moderation documents (kept private), payout details, staff accounts, and their roles.
- Couriers: location during a shift, so the restaurant and the customer can follow the delivery. The last point is kept for no more than a few hours and erased when the shift ends.
- KERI Job: a courier’s résumé (name, city, transport, languages, phone) and test result are visible to restaurants with an open vacancy. The résumé can be hidden.
08
Notifications
- The Telegram bot sends order status updates if you use it or signed in with Telegram.
- Emails cover important events: details of a delivered order, cancellation and refunds, password or email changes. Partners also get emails about applications, moderation, payments, the subscription, and changes to payout details. Customers get emails only at a confirmed address.
- We do not send marketing emails at this time.
09
Who we share data with
- The restaurant — order items, name, phone, address, and comments, to fulfill the order. The courier — address, map point, and the recipient’s name and phone.
- Contractors that process data on our behalf: AmeriaBank — payments, refunds, and payouts; Telegram — bots, sign-in, and confirmation codes; Google and Apple — sign-in; Google Maps, LocationIQ, and OpenStreetMap Nominatim — address search and routing; Resend — sending emails; AI model providers — Keri AI; Sentry — error reports; Cloudflare — website delivery and protection; OVH — servers.
- Public authorities — only when the law requires it.
- We do not sell data or use it for advertising outside the platform.
10
Storage and protection
- Data travels only over a secure connection (HTTPS). Your sign-in is kept in a protected cookie that page scripts cannot read.
- KERI staff access is limited by role-based permissions; actions with data are logged.
- Database backups are made daily and kept for 30 days.
- We keep data as long as it is needed to run the service, settle payments, and meet legal requirements. When an account is deleted, it is closed; order and payment history is kept for settlements and reporting.
11
Your rights
- Request a copy of the data we hold about you.
- Correct inaccurate data — most of it can be changed in your profile.
- Delete your account: write to us and we will close it. Data the law requires us to keep will be retained.
- Remove a saved card and adjust notifications — in your profile.
- To exercise these rights, email [email protected]
12
Cookies and similar technologies
- **Necessary** (always on): `NEXT_LOCALE` — your chosen language, shared by keri.am and the ordering site; `keri-consent` — your cookie decision, 1 year; the sign-in cookie on the ordering site, the CRM, and the admin panel — to keep you signed in.
- Your browser also keeps settings (language, theme) and drafts, such as an unsent support reply.
- **Where you came from**: `keri_src`, 90 days — the referral tag: the link's UTM tags, the domain of the site you came from (not the page address), the bot or Mini App start parameter. After you sign in on the ordering site, in the Mini App or the CRM, the tag is saved on your account once — this is how we learn which channels bring people. On keri.am the tag is recorded only with your consent to analytics.
- **Error reports**: on keri.am, Sentry is turned on only with your consent to analytics. On the ordering site, in the CRM, and in the Mini App, a crash report (error, page, browser) is sent to Sentry so we can fix it.
- **Marketing**: not used. There are no third-party advertising trackers.
- You can change your decision on keri.am at the bottom of any page — the “Cookie settings” button.
13
Policy changes
- A new revision is published on this page with its number and date. We will announce material changes in advance — on the website and, where possible, by email or in Telegram.
- Continued use of the service after changes take effect means you accept the new revision.
Privacy questions
If you have questions about how we process data, or want to exercise your rights, write to us.
[email protected]