Privacy Policy

At Ropenix, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your information when you use our Marid POS.

1. Information We Collect

1.1 Information You Provide

When you register and use Ropenix POS, you provide us with:

• Account Information: Name, email address, phone number, business name
• Business Data: Products, sales, customers, suppliers, inventory, and transaction records
• Payment Information: M-Pesa transaction details (we do not store credit card numbers)
• User Content: Any data you input into the system

1.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: IP address, browser type, operating system
• Log Data: Access times, error logs, system activity
• Cookies: Session cookies for authentication and preferences

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your transactions and manage your subscription
• Send you important updates about your account and the Service
• Provide customer support and respond to your inquiries
• Improve and optimize the Service
• Detect and prevent fraud or security issues
• Comply with legal obligations
• Send you marketing communications (with your consent)

3. Data Storage and Security

3.1 Where We Store Data

Your data is stored on secure cloud servers. We use industry-standard hosting providers with robust security measures.

3.2 Security Measures

We implement multiple security measures to protect your data:

• SSL/TLS encryption for data transmission
• Encrypted database storage
• Regular security audits and updates
• Access controls and authentication
• Regular automated backups
• Firewall protection

3.3 Data Retention

We retain your data for as long as your account is active. After account termination, we retain data for 30 days to allow for data recovery, then permanently delete it unless required by law to retain it longer.

4. How We Share Your Information

4.1 We Do NOT Sell Your Data

We will never sell your personal information or business data to third parties.

4.2 When We May Share Data

We may share your information only in these limited circumstances:

• With Your Consent: When you explicitly authorize us to share data
• Service Providers: With trusted third-party services that help us operate (hosting, email, payment processing) - under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In the event of a merger, acquisition, or sale of assets (you will be notified)
• Protection: To protect our rights, property, or safety, or that of our users

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access: View all your personal data and business information
• Update: Correct or update your information at any time
• Export: Download a copy of your data in JSON format
• Delete: Request deletion of your account and data
• Restrict: Limit how we process your data
• Object: Object to certain types of data processing

5.2 Marketing Communications

You can opt out of marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in account settings
• Contacting us directly

Note: You cannot opt out of essential service communications (account notifications, security alerts, etc.)

5.3 Cookies

You can control cookies through your browser settings. However, disabling cookies may limit some functionality of the Service.

6. Data Protection for Your Customers

When you use Ropenix POS to manage your customers' information:

• You are the data controller for your customers' data
• You are responsible for obtaining necessary consents from your customers
• You must comply with applicable data protection laws
• We act as a data processor on your behalf
• We provide tools to help you manage customer data responsibly

7. Children's Privacy

Ropenix POS is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

8. International Data Transfers

Your data is primarily stored and processed in Kenya. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your information.

9. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

10. Business Transfers

If Ropenix is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending you an email notification
• Displaying a notice in the Service

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Your Kenyan Data Protection Rights

Under Kenyan data protection laws, you have specific rights regarding your personal data:

• Right to be informed about data collection and use
• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with the Data Protection Commissioner

13. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of becoming aware of the breach
• Describe the nature of the breach
• Explain the potential consequences
• Describe the measures we're taking to address the breach
• Provide recommendations to protect yourself

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

• Email: ropenixkenya@gmail.com
• Phone: +254 717 147 007
• WhatsApp: +254 717 147 007

15. Data Protection Officer

For data protection inquiries, you can contact our Data Protection Officer at the email address above.

---