Privacy Policy

Khaya Corp., doing business as LINEMIND ("LINEMIND," "we," "us," or "our"), is committed to protecting the privacy of our customers and users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the LINEMIND platform and related services (the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect information in the following categories:

1.1 Account and Registration Information

When you create a LINEMIND account, we collect information such as your name, email address, business name, phone number, and billing information.

1.2 Business Operational Data

When you connect third-party integrations such as Toast POS or 7shifts, we access and process data from those platforms on your behalf. This includes:

• Point-of-sale transaction data (sales volume, item-level data, revenue figures, timestamps)
• Labor and scheduling data (shift information, labor cost data, staffing patterns)
• Other operational metrics made available through your authorized integrations

This data is accessed only to the extent necessary to provide the Service and is processed under your authorization.

1.3 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, browser and device type, IP address, and referring URLs.

1.4 Communications

If you contact us for support or other inquiries, we retain records of that correspondence.

1.5 Cookies and Tracking Technologies

We use cookies and similar technologies to maintain session state, analyze usage patterns, and improve the Service. You may control cookie preferences through your browser settings, though some features may be affected.

1.6 Personal Information Collected in the Last 12 Months

In the preceding twelve months, LINEMIND may have collected the following categories of personal information: identifiers and contact information, including name, email address, phone number, business name, account login information, and similar account details; commercial and billing information; internet, device, and usage information, including IP address, browser type, device type, pages visited, features used, session duration, referring URLs, log data, diagnostic data, cookies, and similar tracking information; communications information, including emails, support requests, messages, call notes, and other correspondence with LINEMIND; business operational information made available through customer-authorized integrations, including point-of-sale transaction data, item-level sales data, revenue figures, timestamps, labor and scheduling data, labor cost data, staffing patterns, and other operational metrics; and sensitive personal information, but only where necessary to provide and secure the Service, such as account login credentials, payment-related information processed through payment providers, or sensitive information that a customer makes available through connected third-party systems.

Categories of Sources

LINEMIND collects personal information from the following categories of sources: directly from customers, authorized users, and website visitors; from customer-authorized third-party integrations, including point-of-sale, labor scheduling, accounting, inventory, and other connected business systems; from cookies, log files, analytics tools, and similar technologies used on the website and Service; from payment processors and other service providers that support billing, hosting, security, analytics, customer support, and Service operations; and from communications with customers, users, prospects, and other individuals who contact LINEMIND.

Purposes for Collection and Use

LINEMIND collects and uses personal information to create and manage accounts; provide, operate, maintain, secure, and improve the Service; authenticate users; process subscriptions and payments; provide customer support; communicate about the Service; connect to customer-authorized third-party integrations; generate analytics, performance scores, forecasts, dashboards, reports, operational insights, and other Service outputs; troubleshoot issues; monitor usage and performance; detect, prevent, and address fraud, abuse, security incidents, and technical problems; comply with legal obligations; enforce LINEMIND's agreements; and develop new features, products, and services.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate analytics, performance scores, forecasts, and insights on your behalf
• Process transactions and manage your subscription
• Communicate with you about the Service, including updates, support, and notices
• Improve and develop new features and products
• Comply with legal obligations and enforce our Terms of Use
• Detect, prevent, and address fraud, security issues, or technical problems

LINEMIND does not use your operational business data to train general-purpose AI models or sell your data to third parties.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party vendors who assist in operating the Service (e.g., cloud hosting, payment processing, analytics infrastructure). These vendors are contractually bound to process data only as directed by LINEMIND and to maintain appropriate security standards.

3.2 Institutional Reporting (where applicable)

If you use or authorize the LINEMIND institutional reporting product, data from your account may be included in due diligence reports delivered to authorized institutional buyers. Such use requires your explicit consent and is governed by a separate data authorization agreement.

3.3 Legal Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of LINEMIND, its users, or the public.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy commitments set forth in this Policy.

3.5 Disclosure, Sale, and Sharing of Personal Information in the Last 12 Months

In the preceding twelve months, LINEMIND may have disclosed the following categories of personal information for business purposes: identifiers and contact information; commercial and billing information; internet, device, and usage information; communications information; business operational information made available through customer-authorized integrations; and limited sensitive personal information where necessary to provide and secure the Service.

LINEMIND may disclose these categories of personal information to service providers and contractors, including cloud hosting providers, payment processors, analytics providers, customer support providers, security providers, communications vendors, and professional advisors, for the purposes of providing, operating, securing, maintaining, billing for, supporting, analyzing, and improving the Service; complying with legal obligations; enforcing agreements; and detecting and preventing fraud or security incidents. Where a customer expressly authorizes LINEMIND's institutional reporting product, LINEMIND may disclose authorized account or operational information to approved institutional recipients for the specific purpose of preparing and delivering due diligence, reporting, or business intelligence materials, subject to the applicable consent and authorization terms. LINEMIND does not sell personal information and does not share personal information for cross-context behavioral advertising. In the preceding twelve months, LINEMIND has not sold or shared personal information as those terms are defined under California law. LINEMIND does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.

3.6 Data Processing Agreements

LINEMIND acts as a data processor with respect to operational business data accessed through your authorized third-party integrations. You, as the account holder, retain the role of data controller for that data. If your organization requires a Data Processing Agreement, please contact us at privacy@linemind.ai. We will execute a DPA upon request.

4. Data Retention

We retain your account and operational data for as long as your account remains active and for a reasonable period thereafter to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Upon account deletion, we will delete or anonymize your personal data within 90 days, unless retention is required by law.

5. Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, loss, misuse, or disclosure. These include encrypted data transmission (TLS), access controls, and role-based permissions.

No method of electronic transmission or storage is 100% secure. While we work diligently to protect your data, we cannot guarantee absolute security.

Data Breach Notification

In the event of a security incident involving unauthorized access to or disclosure of your personal data, we will notify affected users without undue delay and within the timeframe of 72 hours. Notification will be delivered via email to the address associated with your account and, where required, to relevant regulatory authorities. Notice will include a description of the incident, the data involved, and steps we are taking to address it.

6. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal obligations
• Portability: Request a machine-readable export of your data
• Restriction: Request that we limit our processing of your data in certain circumstances
• Withdrawal of Consent: Revoke consent for third-party data integrations at any time

To exercise any of these rights, please contact us at privacy@linemind.ai. We will respond within the timeframe required by applicable law (typically 30 days).

Verification of Requests

To protect personal information, LINEMIND may need to verify your identity before processing certain privacy requests, including requests to know, access, delete, or correct personal information. We may verify your request by matching information you provide with information we already maintain, such as your name, email address, business account information, login credentials, account identifiers, or other information associated with your account or prior communications with us. For sensitive, high-risk, or legally significant requests, we may request additional information or documentation reasonably necessary to verify your identity, confirm your authority to make the request, or protect against fraud, unauthorized access, or improper deletion. We will use information provided for verification only for the purpose of verifying and processing the request, unless otherwise permitted by law.

Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. An authorized agent may submit a request by contacting us at privacy@linemind.ai and clearly identifying the request as being made on behalf of another individual. We may require the authorized agent to provide proof of authorization, such as a written authorization signed by you, a valid power of attorney, or other documentation reasonably sufficient to confirm the agent's authority to act on your behalf. We may also require you to verify your identity directly with us or confirm directly that you authorized the agent to submit the request, unless the agent provides a valid power of attorney or other proof that applicable law does not require direct verification from you. We may deny a request from an authorized agent if we cannot reasonably verify the agent's authority or your identity.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. LINEMIND does not sell or share personal information as defined under California law.

To submit a request or designate an authorized agent, contact us at privacy@linemind.ai. We will not discriminate against you for exercising your privacy rights.

8. Children's Privacy

The Service is intended for use by business operators and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will promptly delete it.

9. Third-Party Links and Integrations

The Service connects to third-party platforms (e.g., Toast POS, 7shifts) and may contain links to external websites. This Privacy Policy applies only to information processed by LINEMIND. We are not responsible for the privacy practices of third-party platforms and encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above and notify you via email or in-app notice for material changes. Your continued use of the Service following such notice constitutes your acceptance of the revised Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact: