Privacy Policy

1. Introduction

Welcome to LipaflowTech ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing and eTIMS compliance software platform (the "Service").

By using LipaflowTech, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Sign up for our early access list
• Contact our customer support
• Use our invoicing and eTIMS features

This information may include:

• Name and contact information (email address, phone number)
• Business information (company name, KRA PIN, business registration details)
• Billing and payment information
• Account credentials

2.2 Usage Data

We automatically collect certain information when you visit, use, or navigate the platform. This usage data may include:

• IP address and browser type
• Device information and operating system
• Pages visited and features used
• Time spent on the platform
• Referring website addresses

2.3 Financial and Transaction Data

As an invoicing platform, we process:

• Invoice data and transaction records
• Customer information (names, contacts, tax details)
• VAT and tax calculation data
• Payment status and history
• eTIMS transaction records for KRA compliance

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, and maintain our Service
• Process and manage invoices and eTIMS transactions
• Calculate and track VAT for KRA compliance
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations, including KRA and tax regulations

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure cloud infrastructure with industry-standard protections
• Regular security assessments and monitoring
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Sharing and Disclosure

We may share your information in the following situations:

5.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf, such as:

• Cloud hosting providers
• Payment processing services
• Email and communication services
• Analytics providers

5.2 Legal Requirements

We may disclose your information where required to do so by law or in response to valid requests by public authorities, including:

• Kenya Revenue Authority (KRA) for tax compliance purposes
• Court orders or legal processes
• Regulatory requirements under Kenyan law

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

6. Your Data Protection Rights

Under the Data Protection Act, 2019 of Kenya, you have certain rights regarding your personal information:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request limitation of processing in certain circumstances
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to certain types of processing

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

7. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to:

• Comply with our legal obligations (including tax record-keeping requirements)
• Resolve disputes
• Enforce our policies
• Provide our services to you

Tax-related records will be retained for the period required by Kenyan tax law (typically 5 years).

8. Children's Privacy

Our Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of Kenya. We ensure that such transfers comply with applicable data protection laws and that your information remains protected.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.