Privacy Policy

MAAMUL TECH COMPANY LIMITED is a technology company incorporated in Kenya (Reg. No. Company registration details are available upon request. We operate the Maamul business management platform, accessible at maamul.com and through our mobile applications. Our registered address is Nairobi, Kenya.

For questions about this policy, contact us at support@maamul.com.

We collect data you provide directly when you create an account, set up your business, add products, customers, staff, or suppliers, process transactions, and use our features.

This includes: business name, contact details, industry type, M-Pesa paybill or till numbers, product catalogue, customer records, transaction history, staff records, and payroll information.

We also collect usage data automatically: pages visited, features used, device type, browser, IP address, and session duration. This is used to improve the product and diagnose issues.

We use your data to:

— Provide and operate the Maamul platform — Process payments and reconcile M-Pesa transactions — Generate eTIMS-compliant invoices and tax filings — Calculate and process payroll including PAYE, NSSF, and NHIF — Provide customer support — Send product updates and important notices — Improve the platform based on usage patterns — Meet our legal obligations under Kenyan law

We do not sell your data to third parties. We do not use your data for advertising purposes.

We share data only in limited circumstances:

— With M-Pesa (Safaricom) to process payment transactions you initiate — With KRA, URA, or TRA to file eTIMS invoices and tax returns on your behalf, when you authorise this — With NHIF and NSSF for payroll deduction filings, when you use our payroll feature — With cloud infrastructure providers (AWS, Vercel) who process data under strict data processing agreements — With our support and operations team, who access data only to resolve issues you raise — When required by Kenyan law, court order, or regulatory request

Any third party we share data with is bound by a data processing agreement that restricts use to the specific purpose.

Your data is stored on servers located in data centres that comply with international security standards. We use encryption in transit (TLS 1.3) and at rest (AES-256).

Access to customer data within our organisation is role-based and logged. Our engineering and support teams access the minimum data necessary to perform their work.

We maintain daily backups with 30-day retention. In the event of a data breach that affects your data, we will notify you within 72 hours.

Under the Kenya Data Protection Act 2019, you have the right to:

— Access the personal data we hold about you — Correct inaccurate data — Request deletion of your data — Object to processing in certain circumstances — Data portability — receive your data in a machine-readable format — Withdraw consent where processing is based on consent

To exercise any of these rights, email support@maamul.com. We will respond within 30 days.

We retain your data for as long as your account is active. If you close your account, we retain data for 7 years to comply with Kenyan tax law (income tax records) and financial regulations.

You may request deletion of specific records that are not required for legal compliance. We will delete or anonymise data that falls outside retention requirements.

We use cookies to keep you logged in, remember your preferences, and understand how the product is used. We do not use advertising or tracking cookies. See our Cookie Policy for details.

Maamul is a business platform. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has created an account, contact us at support@maamul.com.

We will update this policy when our practices change. For material changes, we will notify you by email or in-app notice at least 30 days before they take effect. The date at the bottom of this page shows when it was last updated.

Data Controller: MAAMUL TECH COMPANY LIMITED Registered in Kenya · Registration details available upon request Registered address: Nairobi, Kenya Privacy queries: support@maamul.com Sales & compliance: sales@maamul.com