01Who We Are

SMART SALE POINTS is a business management platform combining point of sale, inventory, customers, suppliers, purchasing, expenses, and reporting. Our offices are located at BBS Mall, General Waruinge Street, Nairobi, Kenya. For the purposes of data protection law, we act as a data controller for the account information we collect from you, and as a data processor for the business data you store in the Service.

02Information We Collect

We collect the following categories of information:

• Account information — name, email address, phone number, business name, and role, provided when you register or manage your account.
• Business data — sales transactions, inventory records, customer and supplier details, purchases, expenses, and reports that you and your team enter into the Service.
• Usage information — activity logs, device and browser type, IP address, and how you interact with the Service, used to keep accounts secure and improve the product.
• Support communications — messages you send us by email, phone, or WhatsApp when you contact support.

03How We Use Your Information

We use personal data to:

• Provide, operate, and maintain the Service, including processing transactions and syncing inventory in real time.
• Secure accounts, enforce role-based permissions, and maintain activity logs for accountability.
• Respond to support requests and communicate important service updates.
• Improve the Service, develop new features, and fix problems.
• Send billing notices, renewal reminders, and — where you have not opted out — information about new features.
• Comply with legal obligations.

We do not sell personal data to third parties.

04Data You Store About Your Customers

When you record customer or supplier information in the Service, you are the data controller of that information and we process it on your behalf, solely to provide the Service. You are responsible for ensuring you have a lawful basis to collect and store that information, and for responding to requests from your customers about their data. We will assist you with reasonable requests, such as exporting or deleting records.

05Sharing of Information

We share personal data only in the following circumstances:

• Service providers — trusted vendors who help us run the Service (such as cloud hosting and payment processing), bound by confidentiality and data protection obligations.
• Legal requirements — where disclosure is required by law, court order, or a competent authority.
• Business transfers — if we are involved in a merger, acquisition, or asset sale, in which case we will notify you before your data becomes subject to a different policy.

06Data Security

We apply technical and organizational measures designed to protect personal data, including encrypted connections, access controls, role-based permissions, activity tracking, and regular backups. No system is completely secure, so we also encourage you to use strong passwords and limit staff permissions to what each role requires.

07Data Retention

We keep account information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Business data you store in the Service is retained while your subscription is active. After account closure, we make your data available for export for a reasonable period (at least 30 days) before it is deleted from our active systems.

08Your Rights

Subject to applicable law, including the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you and request a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Request portability of data you have provided to us.
• Lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

To exercise any of these rights, contact us using the details below. We will respond within the timelines required by law.

09Cookies & Analytics

Our website and Service use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used so we can improve it. You can control cookies through your browser settings, though disabling some cookies may affect how the Service works.

11Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect. The "Last updated" date at the top of this page shows when this Policy was last revised.

11Contact Us