How We Handle Your Data

Last updated: March 29, 2025

At Kerro.ai, we take data security, privacy, and transparency seriously. Whether we’re building a multilingual AI voice bot or integrating your product inventory with third-party data sources, your data — and your customers’ data — is treated with the highest standards of care.

This page outlines how we handle client data during onboarding, development, deployment, and continuous operation of your AI agents.

1. Types of Data We Handle

Depending on the project, we may process the following data categories:

a) Client Business Data

  • Product catalog (including detailed attributes, pricing, categories)

  • Inventory availability across warehouses or stores

  • CRM or ERP integration data (when applicable)

b) Third-Party Data (fetched on your behalf)

  • Reviews and articles from public sources (e.g. wine journals, blogs)

  • Stock availability from public or partner APIs (e.g. Alko)

  • Geolocation-based data for store-level matching

c) End-User Interaction Data

  • Anonymized chat/voice conversations (for training or quality improvements)

  • Usage analytics (e.g. interactions, searches, click-throughs)

We do not store sensitive personal data unless explicitly agreed.

2. How We Use Client Data

We use your data exclusively to:

  • Build and train AI agents for your specific use case

  • Enable real-time responses to customer queries

  • Fetch and match external content (e.g. product reviews)

  • Provide availability by store or location

  • Improve relevance and conversion of responses

  • Troubleshoot, maintain, and optimize bot performance

All usage is defined in the scope of our agreement with you.

3. Data Access & Control

  • Your data is accessible only to authorized Kerro.ai engineers and infrastructure services required to deliver the agreed solution.

  • We apply role-based access control, regular audits, and secure coding practices to protect all data.

  • You retain full ownership of your data at all times.

4. Hosting & Storage Options

We offer flexible deployment options depending on your preferences and compliance requirements:

  • Fully Managed (by Kerro) – hosted securely in trusted EU cloud infrastructure.

  • Cloud Deployment (your environment) – we deploy into your AWS/Azure/GCP setup.

  • Private/Hybrid Cloud – for sensitive data or custom control setups.

  • On-Premise – available for enterprise clients needing complete data sovereignty.

We use EU-based data centers by default, unless otherwise specified.

5. Data Retention & Deletion

  • We retain only the data needed for active projects and system performance.

  • On project completion or termination, we delete data upon request or within 60 days.

  • You can request data exports or deletions at any time.

6. Third-Party Integrations

If your project requires integration with third-party systems or data sources (e.g. Alko’s API, wine review databases), we handle this on your behalf — and ensure:

  • Compliance with source terms and data licenses

  • Secure API access

  • No unnecessary data storage

7. Compliance & Commitments

We comply with the General Data Protection Regulation (GDPR) and follow best practices in AI safety and data privacy.

  • Data Processing Agreements (DPAs) are available upon request.

  • AI responses are fully explainable and traceable to underlying data sources.

  • You remain the controller of your customer data.

8. Questions or Concerns?

We’re happy to discuss your specific compliance needs. Contact us:

Kerro.ai
tell@kerro.ai
Tallinn, Estonia

9. Company

Kerro.ai is a brand of

Webseller OÜ, Lahepea 9, 10617 Tallinn, Estonia. 
Registration: 14135910 VAT: EE101999366