Privacy Policy
Last updated July 2025
1. Data Collection
We collect information to provide better services to our users. This includes:
- Account information (name, email, company details).
- Transaction data necessary for processing payments.
- Device and log information for security and analytics.
2. How Data is Used
Your data is used strictly for the following purposes:
- Processing M-Pesa payments and maintaining infrastructure.
- Fraud prevention and security monitoring.
- Regulatory compliance and financial reporting.
3. Data Sharing
We do not sell your personal data. We may share necessary information with:
- Safaricom M-Pesa to facilitate transactions.
- Regulators such as the Central Bank of Kenya (CBK) when required by law.
4. Data Retention
We retain transaction data for a minimum of 7 years in compliance with Kenya Revenue Authority (KRA) requirements. Other personal data is kept as long as your account is active or as needed to provide services.
5. User Rights
You have the right to access, correct, or request deletion of your personal data. For requests regarding your data rights, please contact our privacy team.
6. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@cyzora.co.ke.