Last updated: 27 August 2026
This explains what information Kerchiff collects about you, why, how long it is kept, and what you can ask us to do with it. It is written to be readable. If anything here is unclear, ask and we will explain it.
Kerchiff is a service run by Shishir Pande, one person based in Canada. There is no company behind it. Shishir Pande is the person accountable for your information and acts as the privacy officer.
To ask a question, or to make any of the requests below:
We collect different things depending on how you interact with us.
When you comment on one of our Instagram posts
We use this to reply to you, and to understand which posts bring people to us. Knowing which post someone came from is the main thing this system is for.
When you join our email list
When you buy something
We do not collect or store your card number. Our payment processor handles that; we never see it.
What we work out from the above
We keep a history of what happened and when, so we can see the path from someone finding a post to buying something. We also record which country we think you are in, because different countries have different rules about contacting people. If we are only guessing at your country, we mark it as a guess.
| What | How long |
|---|---|
| The original message from Instagram, Stripe, or our email tool | 60 days, then deleted automatically |
| Your record and the history of what happened | For as long as you are a contact, or until you ask us to delete it |
| Proof that you agreed to be contacted | At least 3 years after we last did business, because the law requires us to be able to show it |
| A record that you asked us to stop | Kept indefinitely — see below |
| A backup copy, in case something goes wrong | Up to 30 days, then deleted automatically |
Why we keep opt-outs forever. If you tell us to stop contacting you, we keep a permanent note of that. It sounds backwards, but it is the only way to honour it. If we deleted the record, and you contacted us again a year later, nothing would tell us you had said stop — and we would message you again. The note is what protects you.
The only thing that removes it is if you ask us to delete everything about you. That is your choice, not our policy.
You can ask for any of these at any time, free, by emailing privacy@kerchiff.com. We will respond within 30 days.
See everything we have about you. We will send you a complete copy — your record, every event in your history, and the identifiers we have linked to you.
Get it in a portable format. The copy above is machine-readable, so you can take it elsewhere.
Correct something wrong. How we do this depends on what it is:
Delete everything. We remove your record, your history, and the identifiers linked to you from our live system straight away. This is permanent and cannot be undone.
Two honest details about that:
Stop being contacted. You can opt out at any time, in any message we send, or by replying STOP. This takes effect everywhere, permanently. We do not need a reason. Once you have opted out, the only way to start again is for you to sign up again — we cannot undo it on our own, and neither can anyone else.
Object to how we use your information. If you are in a place whose laws give you this right, you can object to us using your information to work out what to show or send you. If you object to it being used for marketing, we will stop.
We share only what is needed to run the service:
We do not sell your information. We do not share it for anyone else's advertising.
Your information is stored in Canada.
If you are in the European Economic Area or the United Kingdom, Canada is recognised as providing an adequate level of data protection, so your information can be transferred here without extra safeguards.
We use plain calculations — not artificial intelligence — to work out which of our posts led to sales, and to sort contacts into simple groups. These decisions affect what we show or send you. They do not have legal effects and are not used to deny you anything.
If your information is ever exposed in a way that puts you at real risk, we will tell you and the relevant authority, as quickly as we can. We keep a record of every incident, whether or not it reaches that threshold.
This service is not intended for children. We do not knowingly collect information about anyone under 13. If you believe we have, contact us and we will delete it.
If we change how we handle your information, we will update this page and change the date at the top. If the change is significant, we will tell you directly where we can.
If you are unhappy with how we have handled your information, please email privacy@kerchiff.com first — we would rather fix it.
You can also complain to a regulator: