Privacy Policy

1. Account & business data

Kapish AI / KapishAi (“we”, “us”), operated by SaasPoint Technologies, respects your privacy. This policy covers kapishai.com, Kapish Marketing (KapishAi), Kapish ERP, and related products.

When you create an account we store contact details, business profile, sales, bookings, invoices, stock, staff roles, channel integrations, and related operational records so the product can function. Your data stays yours. You can request export or deletion by emailing hello@kapishai.com. We do not sell customer or business data to third parties.

2. Google Business Profile — access we request

If you choose Connect Google Business, Kapish asks Google for OAuth permission using these scopes only:

• https://www.googleapis.com/auth/business.manage — manage Google Business Profile accounts and locations you select
• https://www.googleapis.com/auth/userinfo.email — the Google account email used for the connection (so we can show who connected)

Connecting GBP does not ask for Gmail, Google Ads (adwords), Drive, or unrestricted Google account access. Ads is a separate product path (see section 3).

With your authorization, Kapish may read and/or update:

• Business Profile accounts and locations you link (name, address, phone, website, categories, hours, description, attributes, services/menus where available)
• Photos and media on the linked listing
• Reviews and review replies (including drafting reply suggestions you approve)
• Local posts and post scheduling/cadence you configure
• Questions & answers on the listing
• Performance insights (for example Maps/Search impressions, calls, website taps, direction requests) and search-keyword impression summaries Google exposes for the location
• Public Places / Maps lookup results used for competitor comparison near your listing (API key–based public data — not your private Gmail)

How we use GBP data: solely to provide Kapish Marketing / SEO features you enable — health scores and audits, competitor insights, review workflows, posts, profile edits you confirm, dashboards, and related AI suggestions. We do not sell Google user data, do not use it to build advertising profiles unrelated to your Kapish service, and do not post fake reviews.

OAuth refresh tokens and listing identifiers are stored securely and associated with your Kapish business. You can disconnect in Kapish or revoke access in your Google Account permissions.

3. Google Ads — how Kapish uses Ads data

Kapish may offer Google Ads drafting, policy checks, keyword research, and (when enabled) managed campaign assistance that promotes your linked Google Business listing.

• Merchant GBP connect does not grant Kapish Ads OAuth on your personal Google account.
• Managed Ads operations may run through Kapish-controlled Google Ads API credentials (for example a Kapish manager / customer account configured by our operators), not by scraping your Gmail.
• To draft or research ads we may use information already linked to your Kapish business (business name, category, location, website, country, and keywords you enter or that we derive for local search).
• Keyword Planner / Ads API responses (volumes, suggested keywords, draft campaign structures) are used only to show you options and to create or manage campaigns you approve under Kapish’s Ads product rules and Google Ads policies.

We do not sell Ads-related data. Campaign spend, billing for managed ads, and Google Ads account verification follow Google’s and Kapish’s then-current product terms. You remain responsible for ad creative accuracy and compliance with Google Ads policies.

4. Meta — Facebook Page and Instagram

If you connect a Facebook Page, Kapish uses Facebook Login for that Page and the Instagram professional account linked to it. Connect Instagram uses Instagram Login (instagram_business_basic, instagram_business_manage_comments, instagram_business_manage_messages) so messages, comments, and inbox replies work on their own. Kapish asks only for the permissions needed to run the desk you see in the product:

• pages_show_list, pages_read_engagement, pages_read_user_content — list your Pages and read posts, comments, and engagement
• pages_manage_posts, instagram_content_publish, instagram_basic — publish a Facebook text, photo, or video, or an Instagram photo or Reel, when you send it from Kapish
• pages_manage_engagement, instagram_manage_comments — show comments and send the replies you write
• pages_messaging, pages_manage_metadata, instagram_manage_messages — show Facebook and Instagram inbox conversations so you can reply
• read_insights, instagram_manage_insights — Page reach and Instagram insights Meta returns for the connected account
• instagram_basic — read the Instagram professional account linked to your Page, including username, profile, and media
• ads_read and ads_management — read ad account and campaign fields, and create or pause campaigns you confirm in Kapish. A new campaign is created paused, so it does not spend until you turn it on
• leads_retrieval — read lead forms on your Page and the leads those forms collected, so the Ads desk can show them to you
• Instagram Public Content Access — search one public hashtag related to your business category and show recent public posts on the competitor desk

Kapish does not request pages_manage_ads or WhatsApp Business management. A draft saved only in Kapish does not create a Meta campaign and does not spend your ad budget. Charges for a campaign you turn on are billed by Meta to your ad account.

Page and user tokens are stored encrypted with your Kapish business. We use them only to provide the Meta features you turn on. We do not sell Meta user data and we do not use it to build advertising profiles unrelated to your Kapish service. You can disconnect the Page in Kapish or remove the app in Facebook settings.

5. Other Google services

• Google Drive — only if you enable Drive backup/import; limited to files Kapish creates or you select under the granted Drive scope.
• Google Places — public place lookup when you search or compare local competitors.

6. Delays, sync lag & platform processing time

• Google OAuth consent, token refresh, or API enablement on Google Cloud projects
• Listing selection, profile updates, photos, posts, or review replies taking time to appear in Maps / Search
• Performance insights arriving late (Google often exposes metrics with a multi-day lag)
• Competitor research, Places lookups, and keyword volume tools rate-limiting or queuing
• Google Ads account verification, billing setup, policy review, campaign review, or keyword research latency
• Meta token review, Page publish, Instagram container processing, comment or inbox sync, insights lag, or an empty campaign list when the ad account token does not yet include ads_read
• Temporary Google or Meta API outages, quota limits, or regional delays

7. Payments

Subscription and customer payments may be processed by payment gateways (for example Razorpay, Cashfree, or PayU). Gateways receive payment credentials directly; Kapish typically stores payment status, order references, and limited billing metadata — not full card PANs. Gateway privacy policies apply to data they process.

8. Analytics & cookies

We may use privacy-conscious analytics to improve the product. The marketing site may use standard cookies or similar technologies for session and measurement. You can control cookies via your browser settings.

9. Retention & security

We retain data while your account is active and as needed for legal, tax, or dispute purposes. Google tokens are retained until you disconnect or delete your business / account, unless earlier revocation is required. Meta Page tokens are kept the same way until you disconnect. We use industry-standard safeguards (encryption in transit, access controls). No method of transmission is 100% secure.

10. Contact

Privacy requests: hello@kapishai.com. See also our Terms of Service.