Who we are
Biz OS ("we", "us") provides business finance software for small and medium businesses in Kenya, through this website and the Biz OS app. We are the data controller for the information described here. Contact us at hello@bizos.co.ke.
What we collect
On this website
- When you write to us: your name, business name, phone number, email address and the message you send, so we can reply.
- Technical logs: our servers keep ordinary request logs (for example the page requested and the time) to keep the site running and secure. We do not use advertising or tracking cookies on this website.
In the Biz OS app
- Your account: your name, phone number, optional email address and a securely stored password.
- Your business records: the business details, products, sales, expenses, customers, suppliers and payments that you or your team enter. This belongs to you.
- Your customers' details: names, phone numbers and balances that you choose to record. You decide what to enter and are responsible for having a good reason to hold it.
- Payments to us: the M-Pesa number you pay from and the payment reference. We never see your M-Pesa PIN.
- Security records: sign-in activity and the devices signed in, so you can spot and end anything unusual.
Why we use it
- To provide the service you asked for, and to take and confirm your subscription payments.
- To send codes and notices you need, such as sign-in or password-reset codes, payment confirmations and renewal reminders.
- To keep the service secure, prevent abuse and fix problems.
- To reply to your enquiries.
We do not sell your data, and we do not use your business records for advertising.
Who we share it with
Only with the providers we need to run the service: for example the payment provider that processes M-Pesa subscription payments, and the services that deliver SMS and email messages. They may only use the data to provide their service to us. We may also disclose information when the law requires it.
Customer reminders by SMS are sent only if the business owner turns them on and the customer has agreed to receive them.
How we protect it
- Each business's data is kept separate from every other business's, enforced in the database itself.
- Passwords are stored in a hashed form, and sign-in sessions can be ended from any device.
- Financial records cannot be silently altered: corrections are recorded as dated entries, and there is an activity trail.
- Connections to the app and this website are encrypted.
No system is perfectly secure. If something affects your data, we will tell you and the relevant authority as the law requires.
How long we keep it
We keep your business records while your account is open, so you always have your history. If you ask us to delete your account, we do so after a short cooling-off period in case you change your mind, apart from records we must keep by law. Enquiries sent through this website are kept only as long as needed to deal with them.
Your rights
Under the Kenya Data Protection Act, 2019, you can ask to see the personal data we hold about you, correct it, have it deleted, object to or limit how we use it, and receive a copy of it. You can export your business data from the app at any time. To use any of these rights, email hello@bizos.co.ke. If you are not happy with our answer, you may complain to the Office of the Data Protection Commissioner.
Changes
If we change this notice in a way that matters, we will say so here and, where appropriate, in the app. The date at the top shows when it was last updated.