Privacy Policy

We collect information necessary to deliver, maintain, and optimize our sales tracking and POS services:

A · Business Owner & Account Data

• Full name, business name, phone number, email address, and physical/city location.
• Payment details (such as M-Pesa phone numbers and transaction reference IDs for subscription billing).

B · Shop & Agent Information

• Agent names, assigned identification codes (e.g., AGT-0001), shop locations, contact details, and commission structures set by the Business Owner.

C · Operational & Transactional Data

• Sales logs, product catalog/inventory descriptions, item pricing, transaction timestamps, payment methods (cash/M-Pesa/credit), cash handover records, and stock movement logs.

D · Technical & Device Data

• IP addresses, browser types, device information, local storage/cached data (used for offline transaction syncing), and system activity logs.

We use collected information for the following lawful purposes:

1. 1Service Delivery. Providing access to the Owner, Shop, and Agent Portals, processing POS transactions, and maintaining live sales dashboards.
2. 2Offline Data Syncing. Temporarily storing transaction records locally on user devices to ensure seamless operation when offline, and syncing data to secure servers once online.
3. 3Automated Reporting. Sending scheduled daily business summary emails (e.g., 10 PM daily digests) and low stock alerts to registered Business Owners.
4. 4Subscription Processing. Validating M-Pesa subscription payments and managing trial/account statuses.
5. 5Customer Support. Resolving technical queries, handling WhatsApp/phone support, and preventing platform abuse.

• Business Data. The Business Owner retains ownership of all customer, agent, sales, and inventory data entered into QASHUP.
• Data Processor Status.Under the Kenya Data Protection Act (2019), QASHUP acts as a Data Processor regarding customer and sales data logged by Business Owners, processing it strictly according to the owner's instructions to run the software platform.

We enforce robust administrative and technical safeguards to keep your financial and business data secure:

• Encryption. Data transmitted between your device and QASHUP servers is encrypted using standard SSL/TLS encryption.
• Access Control.Owner data is isolated. Agents and shop staff can only access information and workflows granted by the Business Owner's permissions.
• Server Security. Data is stored in secure, password-protected database environments with regular backup protocols.

We do not sell or rent your personal or business data to third-party advertisers. We only share necessary data under the following circumstances:

• Payment Service Providers. Sharing transaction phone numbers with authorized mobile money channels (e.g., M-Pesa APIs) strictly to process subscription billing.
• Legal Compliance. Disclosing information if mandated by Kenyan courts, law enforcement, or regulatory bodies under a lawful court order or statutory obligation.

Subject to verified account ownership, you have the following rights:

• Right to Access. Request a summary or copy of your personal data stored on QASHUP.
• Right to Rectification. Correct incomplete or inaccurate business, agent, or account information via your portal settings.
• Right to Erasure (Data Deletion). Request deletion of your personal or business account data upon winding up your subscription, subject to statutory record-keeping requirements.
• Right to Export. Export sales logs, inventory lists, and agent performance reports in standard formats (e.g., PDF/Excel).

QASHUP utilizes browser Local Storage and cookies to maintain authenticated user sessions, retain portal access preferences, and enable offline POS transaction logging. You can manage or disable cookies in your browser, though doing so may impact offline syncing capabilities.

We may update this Privacy Policy periodically to reflect technological updates or regulatory changes in Kenya. We will notify users of significant changes by posting the updated date on this page or via dashboard announcements.

For privacy queries, data requests, or compliance inquiries, reach out to our team at: