Privacy Policy

1. Information We Collect

We collect different types of information depending on how you interact with the Service:

1.1 Information You Provide

• Account information (name, email address, company name, password)
• ISP and business details
• Customer data uploaded or managed by ISPs (e.g. customer names, contact details, billing information)
• Support requests and communications
• Payment and billing-related information (processed via third-party providers)
• Phone numbers and contact details used for SMS or messaging notifications

1.2 Information Collected Automatically

• IP address and device information
• Browser type and operating system
• Usage data (pages visited, actions taken in the app, timestamps)
• Log and diagnostic data for security and performance

2. How We Use Your Information

We use information to:

• Provide, operate, and maintain the Jasiyo platform
• Create and manage user accounts
• Process billing, subscriptions, and transactions
• Send transactional emails and SMS notifications (e.g. account verification, password reset, billing alerts)
• Enable ISPs to send communications to their end customers via integrated messaging services
• Provide customer support
• Improve performance, reliability, and security of the Service
• Detect, prevent, and respond to fraud, abuse, or security issues
• Comply with legal obligations

3. Multi-Tenant & ISP Data Responsibility

• Jasiyo is a multi-tenant platform used by ISPs to manage their own customers.
• Each ISP is the data controller for their end customers' data.
• Jasiyo acts as a data processor for that data.
• We implement technical and organisational measures (including access controls and Row Level Security) to ensure each ISP can only access their own data.
• ISPs are responsible for ensuring they have the legal right to collect and process their customers' data.
• ISPs are responsible for ensuring their end customers have consented to receiving SMS or other communications initiated through the platform.

4. Data Sharing and Third Parties

We do not sell your personal data. We may share data with trusted third-party service providers only as necessary to operate the Service, such as:

• Hosting and infrastructure providers (e.g. database, cloud services)
• Email delivery services (for transactional emails)
• Payment and billing providers (e.g. Paystack, Safaricom M-Pesa/Daraja)
• SMS and messaging delivery providers (for customer notifications sent on behalf of ISPs)
• Security and monitoring services

These providers are only allowed to process data on our behalf and under appropriate confidentiality and security obligations. We may also disclose information if required by law, regulation, or legal process.

5. Payment Data

Jasiyo integrates with third-party payment processors to facilitate billing between ISPs and their customers. Payment card details and sensitive financial data are handled directly by the payment provider and are not stored on Jasiyo's systems. ISPs connecting their own payment accounts (e.g. Paystack, M-Pesa/Daraja) remain solely responsible for the data processed through those accounts in accordance with the payment provider's own terms and applicable financial regulations, including Central Bank of Kenya (CBK) guidelines where applicable.

6. Data Security

We take security seriously and implement appropriate technical and organisational measures, including:

• Encrypted connections (HTTPS/TLS)
• Access controls and authentication
• Role-based and row-level access restrictions
• Secure infrastructure and managed cloud services
• Monitoring and logging for abuse and security incidents

However, no system is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain personal data only for as long as necessary to:

• Provide the Service
• Comply with legal, accounting, or regulatory obligations
• Resolve disputes and enforce agreements

ISPs can export or delete their data according to the features available in the platform or by contacting support.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal data
• Correct or update inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a copy of your data (data portability)

To exercise these rights, please contact us using the details below.

If you are an end customer of an ISP using Jasiyo, you should contact your ISP directly, as they control your data.

9. Cookies and Tracking

We may use cookies or similar technologies to:

• Keep you logged in
• Improve performance and user experience
• Analyse usage and improve the Service

You can control cookies through your browser settings, but some features may not work properly without them.

10. International Data Transfers

Your data may be processed and stored in data centres located in different countries. We take steps to ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last updated" date
• Significant changes will be communicated through the Service or via email
• Your continued use of the Service after changes means you accept the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle data, contact us at: