Hisani Technologies Ltd ("Hisani", "we", "us", or "our") operates the Hisani platform and this website. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.
This policy is compliant with Kenya's Data Protection Act, 2019 and applicable regulations.
1. Information we collect
Information you provide directly
- Account information: Name, email address, phone number, company name when you register or contact us.
- Business data: Transaction records, employee records, inventory data, and financial data processed through the platform on your behalf.
- Communications: Messages you send us via contact forms, email, or support channels.
Information collected automatically
- Usage data: Pages visited, features used, and actions taken within the platform.
- Device data: IP address, browser type, operating system, and device identifiers.
- Cookies: We use cookies to keep you logged in and remember your preferences. See our Cookie section below.
2. How we use your information
We use your information to:
- Provide, operate, and improve the Hisani platform
- Process your transactions and communicate about them
- Send product updates, security alerts, and support messages
- Respond to your enquiries and provide customer support
- Comply with legal obligations (including KRA reporting where applicable)
- Detect and prevent fraud and abuse
We do not sell your personal data to third parties. We do not use your business data to train AI models or for marketing to third parties.
3. Data sharing
We share your data only with:
- Service providers: Cloud hosting (Supabase / AWS), payment processors (Safaricom M-Pesa, card acquirers), and email services — strictly to operate the platform.
- Regulatory bodies: KRA and other Kenyan authorities where required by law.
- Business transfers: If Hisani is acquired or merges, your data may transfer as part of that transaction. You will be notified.
4. Data retention
We retain your data for as long as your account is active. If you close your account, we delete or anonymise your data within 90 days, except where we are legally required to retain it (e.g., financial records required under Kenyan law for 7 years).
5. Your rights (Kenya Data Protection Act)
Under the Data Protection Act 2019, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (where no legal retention applies)
- Object to or restrict certain uses of your data
- Data portability — receive your data in a machine-readable format
To exercise any of these rights, email privacy@hisani.app. We respond within 30 days.
6. Security
We use industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security reviews. No system is 100% secure — if you believe your account has been compromised, contact us immediately.
7. Cookies
We use essential cookies to keep you authenticated and remember your preferences. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent you from logging in to the platform.
8. Third-party links
Our website may link to third-party sites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.
9. Children
The Hisani platform is not directed to children under 18. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email or a notice in the platform. The updated policy will be effective immediately upon posting.
11. Contact
Hisani Technologies Ltd
Nairobi, Kenya
Email: privacy@hisani.app
Phone: +254 700 000 000