Privacy Policy
Last updated: September 2026
1. What we collect
Account information
Name, email address, and password (stored encrypted) for anyone who registers or is added as staff.
Shop and business data
Everything you enter to run your shop: products, prices, stock levels, sales, purchases, suppliers, expenses, and customer records (names, phone numbers, and balances you record for your own customers). This data belongs to your shop and is never shared with or visible to other shops on the platform.
Payment information
Subscription payments are handled by IntaSend. We receive confirmation that a payment was made and its amount, but we do not receive or store your M-Pesa PIN, full card number, or other sensitive payment credentials — those are handled directly by IntaSend under their own privacy practices.
WhatsApp numbers
If you provide a WhatsApp number for automated reports, we use it only to send the reports you've configured (daily/weekly/monthly/yearly summaries), via Meta's WhatsApp Business API.
Technical information
Basic technical data such as IP address and browser type, collected automatically for security and troubleshooting purposes.
2. How we use it
- To provide and operate the Service you've signed up for
- To calculate and display your own reports, projections, and analytics — all computed from your own shop's data only
- To process subscription payments via IntaSend
- To send WhatsApp reports you've configured, via Meta's platform
- To respond to support requests
- To maintain security and prevent abuse of the Service
3. Who we share it with
We share data only with the third parties necessary to operate the Service:
- IntaSend — to process subscription payments
- Meta (WhatsApp Business API) — to deliver reports to the WhatsApp number you provide
- Our hosting provider — to store and run the application
We do not sell your data or your shop's business data to third parties, advertisers, or data brokers.
4. Data isolation between shops
Every shop's products, sales, customers, and suppliers are technically isolated from every other shop on the platform. Shop owners and staff can only ever see and manage their own shop's data.
5. Data retention
We retain your data for as long as your account is active. If an account is closed or a subscription lapses permanently, we retain data for a reasonable period afterward in case you wish to reactivate, after which it may be deleted.
6. Your rights
You can access, correct, or export most of your business data directly within the Service. You may request a copy of your account data or request deletion by contacting us at the address below, subject to any legal or legitimate business record-keeping requirements.
7. Security
Passwords are stored encrypted, not in plain text. Access to shop data requires authentication, and our application enforces isolation between shops at the database level. No system is perfectly secure, and we encourage using a strong, unique password for your account.
8. Children's privacy
The Service is intended for business use by adults and is not directed at children.
9. Changes to this policy
We may update this policy from time to time; material changes will be reflected in the "Last updated" date above.
10. Contact
Questions about this policy or requests regarding your data can be sent to hello@example.com.