Privacy Policy
Last updated: [DATE — replace before launch]
[PLACEHOLDER — This page is not yet legal-reviewed. Replace with a real Privacy Policy before accepting production signups. Given this form actually collects the data listed below, the policy needs to be accurate, not generic boilerplate.]
1. Information We Collect
During ISP account signup, we collect:
- Account details: username, email, phone number, password (stored hashed, never in plain text)
- Business details: ISP name, shortcode, organisation name
- Location details: country, county/region, physical address, and — if you grant permission — approximate GPS coordinates
- Technical details: browser type, device platform, screen size, timezone, and IP address, collected automatically for security and fraud-prevention purposes
2. How We Use This Information
We use this data to create and secure your account, process payments via M-Pesa, detect fraudulent signups, and provide support.
3. Location Data
GPS location is requested via your browser and is entirely optional — declining it does not prevent you from creating an account. [Add specifics: how long it's retained, whether it's used for anything beyond fraud prevention.]
4. Data Sharing
[Add your actual policy: do you share data with M-Pesa/Safaricom beyond what's required to process payments? Any other third parties?]
5. Data Retention
[Add your actual retention policy — how long is account and device data kept after account closure?]
6. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting [support email].
7. Contact
Questions about this policy can be sent to [support email].