POSBOP Privacy Policy

1. Overview & Data Ownership

POSBOP ("we," "our," or "us"), operated by Ondiegi Solutions in Nairobi, Kenya, respects the privacy of retail merchants, shop owners, and cashiers. All business sales ledgers, customer records, and inventory matrices uploaded or processed through POSBOP remain the exclusive property of the subscribing merchant.

2. Data We Collect

• Merchant Account Information: Business name, director phone numbers, contact email addresses, physical shop location, and Safaricom Till/Paybill numbers.
• Transaction & Ledger Data: Sales items, gross revenue, Cost of Goods Sold (COGS), cashier shift logs, and M-Pesa transaction reference webhooks (e.g., Safaricom receipt IDs).
• Device & Offline Caching Logs: Technical telemetry required to synchronize offline counter registers with your centralized HQ ledger.

3. How We Use Your Data

We process data strictly to provide point-of-sale services, including:

• Instant auto-reconciliation of M-Pesa Till payments at your counter.
• Generating automated weekly director financial digests and shift reports.
• Syncing inventory stock levels across multi-branch shop networks.

We NEVER sell, monetize, or rent your sales data, inventory catalogs, or customer lists to third-party advertisers or competitors.

4. Security & Encryption

POSBOP employs industry-standard encryption for data in transit (TLS 1.3) and at rest (AES-256). M-Pesa webhook endpoints are authenticated via secure API keys to prevent unauthorized tampering.

5. Contact Privacy Office

For inquiries regarding data export, deletion, or privacy compliance, contact our privacy officer at: