AshPine is the WhatsApp ordering service of one neighbourhood grocery shop in Karnataka, India. When you message the shop on WhatsApp, AshPine's assistant reads what you need, builds your bill from the shop's catalog and passes it to the shop, whose staff check every bill before anything is delivered. AshPine is built and run for the shop by FPT Solutions Private Limited. This page says what we keep, why, who else sees it, and how to have it deleted.
What we keep
- Who you are on WhatsApp. The ID WhatsApp gives you for this business (a business-scoped user ID), your WhatsApp profile name, and your phone number and username when WhatsApp includes them. Also the language you chose for replies.
- Your messages. Every message you send the shop and every reply, with when it was sent and whether WhatsApp delivered it and you read it. If you send a photo or a voice note, the assistant downloads it from WhatsApp to read it. We keep its caption, the text of a voice note, and WhatsApp's reference to it, but not the photo or recording itself. WhatsApp keeps those for 30 days, and until then the shop's staff can open them from the chat.
- Your delivery details. The name, phone number, address and PIN code you give for delivery, and a location pin if you share one.
- Your orders. What you asked for, in your own words, the bill, any changes the shop made to it, and whether you paid in cash or by UPI. Payment happens at your door; we never see card or bank details.
- Records of the assistant's work. For each message it answered: which AI model it used, how long it took, and the steps it took, such as searching the catalog or saving your address. The shop uses these to check the assistant and fix its mistakes.
Why we keep it
- To take your order, check it, deliver it and answer your questions about it.
- So that "same as last time" and your saved address work when you order again.
- So a person at the shop can read the chat and reply when you ask for one, or when the assistant can't help.
- To check that the assistant is doing its job, and to fix it when it isn't.
We don't show you ads, we don't sell or rent your data, and we don't use it to train AI models. We only message you in reply to you, or about an order you placed.
Who else sees it
- The shop's staff, on AshPine's dashboard, which needs a login. The person who delivers your order gets your name, address and phone number.
- WhatsApp (Meta) carries every message between you and the shop. What Meta does with them is covered by WhatsApp's Privacy Policy.
- Uberspace, our hosting provider. Our server and database, and so everything listed above, are in Germany.
- Cloudflare Workers AI, which runs the AI model. Your messages, any photo you send, and the recent chat, with your cart, your saved address and the shop's rules, are sent to it to work out each reply. When the assistant hands your chat to the shop, the chat is also sent to it to draft a reply, which a person reads and edits before anything is sent. Cloudflare doesn't use this to train its models. Button taps and the address form are handled by our own code. If we change model provider, we will choose only one that doesn't train on your messages, and update this page.
- Groq, which turns voice notes into text. Your recording is sent to it, and only the text comes back to the assistant. Groq doesn't use it to train its models.
- Google, which reads the assistant's reply aloud when you sent a voice note. Only the reply's text is sent to it, not your messages or recording. Google doesn't use it to train its models or improve its products, and keeps it only for a short time to check for misuse.
Nobody else gets your data, unless the law requires us to give it.
How long we keep it
We keep your details, messages and orders while you order from the shop, so your history and saved address are there when you come back. Nothing is deleted automatically. You can have it deleted at any time: see Deleting your data.
How we protect it
The server is reached only over HTTPS. Every message that reaches us from WhatsApp is checked for Meta's signature. The dashboard needs a password for each member of staff, and passwords are kept only as hashes.
Your choices
- Ask what we hold about you, or ask us to correct it: message the shop, or write to ping@knhash.in.
- Ask us to delete it: see Deleting your data.
- Talk to a person at the shop at any time: tap Talk to shop, or say so in the chat.
- Change the language of replies: send language.
The menu page
The menu page the assistant links to sets no cookies and has no analytics or trackers.
Changes
If we change this policy, we will update this page and the date at the top.
Contact
Write to ping@knhash.in.