Privacy Policy

This Privacy Policy explains how Kalsoni ("we", "us", "our") collects, uses, and protects information when you use our business management platform ("Service").

1. Information We Collect

When you register and use Kalsoni, we collect:

• Account information: your name, business name, email address, phone number, and login credentials.
• Business data you enter: customer records, inventory, sales orders, invoices, expenses, and related business records you create within the platform.
• Payment information: if you connect M-Pesa, we store your Daraja API credentials (encrypted) and transaction records processed through Safaricom's systems. We do not store M-Pesa PINs or full payment card numbers.
• Usage data: log-in times, device/browser information, and general usage patterns, used to maintain and improve the Service.

2. How We Use Your Information

• To provide, operate, and maintain the Service.
• To process transactions you initiate, including M-Pesa payments.
• To send you service-related emails (verification, receipts, trial reminders, support responses).
• To improve platform reliability, performance, and features.
• To detect and prevent fraud, abuse, or security incidents.

3. Data Belonging to Your Customers

As a business using Kalsoni, you may enter data about your own customers (names, contact details, transaction history). You are responsible for having a lawful basis to store and process that data, and for honoring any data requests your customers make directly to you. Kalsoni acts as a data processor for this business data — you remain the data controller.

4. Third-Party Services

We use trusted third-party providers to operate Kalsoni, including:

• Resend — for transactional email delivery.
• Safaricom Daraja API — for M-Pesa STK Push payment processing, when you enable this feature.

These providers process data only as needed to perform their function and are bound by their own privacy and security obligations.

5. Data Retention

We retain your account and business data for as long as your account is active. If you close your account, we retain data for a limited period as required for legal, tax, or dispute-resolution purposes, after which it is deleted or anonymized.

6. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at hello@kalsoni.io.

7. Security

We use encryption for sensitive credentials (such as M-Pesa API keys), secure server infrastructure, and access controls to protect your data. See our Security page for more detail.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice.

9. Contact Us

Questions about this policy? Email us at hello@kalsoni.io.