Privacy Policy for M-Pesa Shikilia

1. Introduction

M-Pesa Shikilia ("we", "our", "us") is an escrow payment service for social commerce in Kenya. This privacy policy explains how we collect, use, and protect your personal information.

2. Information We Collect

We collect the following information:

• Phone Numbers: Your M-Pesa registered phone number for transactions and WhatsApp communication.
• Transaction Data: Payment amounts, dates, and status of escrow transactions.
• WhatsApp Messages: Commands you send (BALANCE, ORDERS, etc.) and our responses.
• Device Information: IP address and browser type for security purposes.

3. How We Use Your Information

• Process escrow payments between buyers and sellers
• Send transaction confirmations and QR codes via WhatsApp
• Detect and prevent fraud
• Comply with legal requirements
• Improve our services

4. Data Sharing

We share your information only with:

• Safaricom (M-Pesa): To process payments and refunds
• WhatsApp (Meta): To send you messages and QR codes
• Law Enforcement: When required by Kenyan law

We NEVER sell your personal information to third parties.

5. Data Security

We protect your data with:

• Encryption of all sensitive data
• Secure HTTPS connections
• Regular security audits
• Limited employee access

6. Data Retention

We retain transaction data for 7 years as required by Kenyan financial regulations. WhatsApp message history is retained for 30 days.

7. Your Rights

Under Kenyan law, you have the right to:

• Access your personal data
• Request data correction
• Request data deletion (subject to legal requirements)
• Withdraw consent at any time

8. Contact Us

9. Changes to This Policy

We will notify you of material changes via WhatsApp before they take effect.