StockWise POS ("we", "us", or "our") operates the website https://www.stockwisepos.co.ke and the StockWise POS application (the "Service").

We are committed to protecting your privacy in compliance with Kenya's Data Protection Act, 2019 ("DPA"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service.

1. Information We Collect

We collect:

Account Information: Full name, business name, business type (e.g., hardware, grocery, salon), phone number, email, physical address, and password.
Business Data: Products, inventory levels, sales, purchases, customer names and phone numbers (for credit tracking), transaction records, and reports.
Payment Records: We record the payment method (Cash, M-Pesa) as entered by you. We do not process M-Pesa transactions directly or store financial credentials.
Usage Data: IP address, device type, browser information, login times, and pages accessed (collected automatically).

2. How We Use Your Information

We use your data to:

Provide and operate the POS and inventory management service.
Record sales and payment methods.
Generate daily/monthly reports and dashboards.
Communicate with you about your account, billing, and support.
Comply with legal requirements (e.g., eTIMS reporting to KRA if applicable).
Detect fraud, abuse, or technical issues.

3. Legal Basis for Processing

We process your data based on:

Performance of a contract: Your use of the paid Service.
Legitimate interests: Service security, improvement, and fraud prevention.
Legal obligations: e.g., tax and regulatory compliance.

4. Sharing Your Information

We share data only when necessary:

With cloud hosting providers (e.g., Vercel, MongoDB Atlas) for service delivery.

We do not sell your personal data or share it for marketing purposes.

5. International Transfers

Some data may be stored or processed outside Kenya (e.g., by cloud providers in the US or EU). We ensure adequate safeguards are in place (e.g., standard contractual clauses).

6. Your Rights Under the Data Protection Act

You have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Request deletion (subject to legal retention obligations).
Object to processing.
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise these rights, contact us at support@stockwisepos.co.ke.

7. Data Security

We use reasonable technical and organizational measures (encryption, access controls, regular security reviews) to protect your data. No system is completely secure, but we take your protection seriously.

8. Data Retention

We keep your data for as long as your account is active, plus up to 7 years after closure for accounting, tax, and legal purposes.

9. Children

The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified via email or in-app message. Continued use after changes means acceptance.

11. Contact Us

Email: support@stockwisepos.co.ke