Privacy Policy for Biashara ERP

Biashara ERP (“we”, “us”, “the platform”) provides multi-tenant business software to organisations in Kenya and neighbouring markets. This policy describes how we handle personal data when you use our website, register a workspace, or sign in with third-party providers such as Google.

Data we collect

• Account data: name, email, phone, business name, and credentials you provide at registration.
• Workspace data: transactions, inventory, HR, CRM, and other records you enter into your tenant.
• Payment data: M-Pesa references and billing metadata. We do not store full mobile money PINs or card PANs.
• Technical data: IP address, browser type, logs, and cookies required for security and session management.
• OAuth data: if you use Google sign-in, we receive profile information permitted by Google (e.g. name, email) to authenticate your account.

How we use data

• Provision and secure your workspace
• Process subscriptions and support requests
• Send service emails (invoices, password reset, verification)
• Improve platform reliability and prevent fraud
• Comply with lawful requests and accounting obligations

Sharing

We do not sell personal data. We share data only with infrastructure providers (hosting, email), payment processors (Safaricom M-Pesa via Daraja where enabled), and when required by law. Each tenant’s operational data is isolated to that organisation’s workspace.

Retention & security

We retain account and billing records as long as your subscription is active and for a reasonable period thereafter. We apply access controls, encryption in transit, and tenant isolation appropriate to a SaaS ERP platform.

Your rights

You may request access, correction, or deletion of personal data associated with your account by contacting [email protected]. Workspace owners control their organisation’s business records.

Contact

Questions about this policy: [email protected] · Contact page