Privacy Policy

Effective Date: January 1, 2026

Introduction

Rahisisha Tech Ltd ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our suite of software products, including Revenue Guard, TrustBot, and other related services (collectively, the "Services").

We are a Data Controller as defined under the Data Protection Act, 2019 (Kenya).

Information We Collect

To provide our automated Telegram and M-Pesa services, we collect the following:

  • Identity Data: Telegram User ID, Username, and Full Name.
  • Contact Data: Phone numbers used for M-Pesa transactions.
  • Transaction Data: M-Pesa transaction reference codes, amounts, timestamps, and payment status.
  • Device Data: Information about the device used to access our bots (IP address, device type) for fraud detection.

How We Use Your Information

We use your data strictly to:

  • Facilitate Payments: Trigger M-Pesa STK Pushes and verify payments via Safaricom Daraja API.
  • Service Delivery: Automate access to Telegram channels (Revenue Guard) or facilitate escrow alerts (TrustBot).
  • Communication: Send transaction receipts, service downtime alerts, or security codes via SMS or Telegram.
  • Legal Compliance: Comply with KRA tax regulations and prevent money laundering.

Data Sharing and Disclosure

We do not sell your personal data. We only share data with:

  • Service Providers: Safaricom PLC (for M-Pesa processing) and Cloud Hosting Providers (e.g., DigitalOcean, AWS) who host our infrastructure.
  • Legal Authorities: If required by a Kenyan court order or the Data Protection Commissioner.
  • Group Admins (Limited): For Revenue Guard, the Telegram Group Administrator may see your Telegram Username and Payment Status (Paid/Unpaid), but we mask your full phone number where possible.

Data Retention

  • Financial Records: We are required by Kenyan law to retain transaction records for seven (7) years.
  • Chat Logs: Operational logs (commands sent to bots) are retained for 90 days for troubleshooting, then deleted.

Your Rights (Kenya)

Under the Data Protection Act, you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of false or misleading data.
  • Request deletion of data (subject to our legal obligations to keep tax records).

Contact Us

For privacy concerns, contact our Data Protection Officer at: privacy@rahisisha.co.ke