Privacy Policy🇰🇪

AI Mashinani Business Compass ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered business platform designed for Kenyan MSMEs.

By using our services, you consent to the data practices described in this policy, which complies with Kenya's Data Protection Act 2019.

Personal Information

• Name, email address, and phone number
• Business information (name, description, industry)
• Payment information (processed securely through third-party providers)
• Communication preferences
• Your photo or videos if you provide these in our site or when engaging with us in any format.

Activity and Usage Data

We collect information on all your activity when you visit or engage with our platforms, whether you have an account with us or not. This includes:

• Content that you provide through the camera or voice enable features, content you view, create, comment on or share.
• Messages you send and receive, including their content, subject to applicable laws and end to end encryption where applicable.
• Metadata about content and messages, subject to applicable laws.
• Interactions and related metadata from interaction with our own and other sources of artificial intelligence associated and used or associated with our apps and platforms.
• Types of content that you view, like and interact with, including how you interact with these.
• App features you use, and what actions you take with them.
• Purchases or other transactions that you make through our apps checkout experience and in line with applicable laws including credit or debit card information.
• The time, frequency and duration of your activities on our products.

Business Data

• Business profiles and descriptions
• Product and service information
• Target audience details
• Generated marketing materials and content

Use of Your Contact Information

When you provide us with your contacts or use our platforms and share contacts, we will access and upload names, phone numbers and emails addresses on a regular basis. We will also use this information to investigate and report suspicious activity on our platforms and related platforms and to keep our platform safe and secure. We also conduct business intelligence and analytics using contact information and other personal information and data you provide.

Technical Information

• IP address and location data
• Device information and browser type
• Usage analytics and platform interactions
• Cookies and similar tracking technologies

We use your information to:

• Provide and improve our AI-powered business services
• Generate customized marketing materials and business advice
• Process payments and manage your account
• Send service updates, newsletters, and promotional content
• Provide customer support and respond to inquiries
• Ensure platform security and prevent fraud
• Comply with legal obligations and regulatory requirements
• Conduct research to improve our services for Kenyan businesses

We may share your information with:

Service Providers

• Payment processors (M-Pesa, banks, card networks)
• Cloud hosting and data storage providers
• Email and communication service providers
• AI and machine learning service providers

Legal Requirements

We may disclose information when required by Kenyan law, court orders, or to protect our rights and the safety of our users.

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

We implement robust security measures to protect your data:

• SSL/TLS encryption for data transmission
• Encrypted data storage with industry-standard protocols
• Regular security audits and vulnerability assessments
• Access controls and employee training on data protection
• Compliance with international security frameworks

While we strive to protect your information, no method of transmission over the internet is 100% secure.

Under Kenyan law, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Transfer your data to another service
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us through the contact information provided on our platform.

We retain your information as long as it is needed and as long as you have an account and access our platforms until you delete your account and stop using our platforms. Specifically, we retain your data to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our AI models and services

In certain cases, we keep your information for longer even after you have asked us to delete it. This includes for legal and regulatory reasons, to prevent harm or for safety, security and integrity purposes.

Public Information

You will see the following information if you choose to share it publicly: Email, birthday, county, sub-county, town, phone number, employment, business type / category, interests.

**Note:** To protect your privacy, the following information is **default hidden** from the public: Email, date of birth, and phone number. You can change these settings to share them publicly through your profile controls.

Control Who Sees Your Content and What is Public Content

Learn more on how you can control who sees your content and what is public content. We provide a robust set of privacy settings in your account profile to manage the visibility of your posts, profile details, and interactions.

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze platform usage and performance
• Provide personalized content and recommendations
• Ensure platform security

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

AI Mashinani is designed for business use and is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

Your data may be processed in countries outside Kenya, including in the United States and European Union. We ensure appropriate safeguards are in place to protect your data in accordance with Kenyan and international data protection laws.

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through our platform. Your continued use of our services after changes constitutes acceptance of the updated policy.

For privacy-related questions or concerns, contact us:

• Email: privacy@aimashinani.co.ke
• Phone: +254 700 000 000
• Address: AI Mashinani, Nairobi, Kenya

Data Protection Officer

Email: dpo@aimashinani.co.ke

Complaints

You can file complaints with the Office of the Data Protection Commissioner, Kenya: odpc.go.ke