Privacy Policy
This policy explains what personal data Inventoman Solutions (“we”, “us”) collects through Inventoman AIOS, the inventory command center at inventomansolutions.com, why we collect it, who sees it, and the choices you have. We follow the Kenya Data Protection Act, 2019.
1. Who is responsible for your data
For your account and billing details (who you are, how you pay), we are the data controller. For the business records you put into the app (products, stock, sales, suppliers, staff lists), your business is the data controller and we act as its data processor: we store and process those records only to run the service for you.
2. What we collect
| What | Details |
|---|---|
| Account | Owner name, email address, phone number, business name, type of business, town and approximate number of products. |
| Staff | Staff names, usernames, roles and login activity that the business owner sets up for its team. |
| Business records | Products, barcodes, prices, stock levels, batches and expiry dates, sales and receipts, stock counts and adjustments, suppliers and purchase orders. |
| Billing | Plan, amount paid, date, how you paid, and the M-PESA code, bank reference or card reference that identifies the payment, plus the payer’s phone number for M-PESA payments. |
| Alerts | Your Telegram chat ID, if you connect Telegram alerts. |
| Technical | Records that an AI insight was requested (time, type of request, result), and information your browser stores on your device (see section 7). |
We never see or store your M-PESA PIN. If you pay by card, the card details are entered on the payment provider’s page and are not stored by us.
3. Why we use it
- To provide the service: stock tracking, till and receipts, alerts, reports and insights.
- To sign you in and keep your business’s data separate from every other business.
- To bill you, activate your plan and send payment reminders.
- To send you sign-in codes, welcome messages and service notices.
- To give support, keep the service secure, and fix faults.
We do not sell personal data and we do not show advertising.
4. AI insights
When you ask for an AI insight, we send inventory facts (product names, stock quantities, reorder levels, sales rates and expiry dates) to Google’s Gemini service so it can write a short explanation. We do not send your name, phone number, email or payment details for this. The figures and rankings themselves are calculated by our own rules in the database, and the AI only explains them.
5. Who we share data with
We use these service providers to run the app. They process data only to provide their service to us.
- Supabase: database, sign-in and server functions. Our database is hosted in Ireland (EU).
- Netlify: hosts the website.
- Resend: sends sign-in and welcome emails.
- Google (Gemini): writes AI insights, as described above.
- Telegram: delivers alerts, only if you connect it.
- Safaricom M-PESA and Paystack: process payments when you pay by M-PESA or by card.
Some of these providers operate outside Kenya, so your data may be processed in other countries. We take reasonable steps to make sure providers protect it. We may also disclose data where the law requires it.
6. How long we keep it
We keep your data while your account is open. If you close your account, we delete or anonymise your business records within 90 days of your request, unless the law requires us to keep something longer. Payment records are kept for the period Kenyan tax and accounting law requires. You can export your data from the app at any time, including when your account is read-only.
7. Browser storage and offline use
We do not use advertising or tracking cookies. The app uses your browser’s storage to keep you signed in, to remember small preferences, and to keep sales you ring up while offline until they are sent to our servers. The app also saves a copy of itself so it can open without internet. Clearing your browser data before offline sales have synced can lose those sales, so please sync before clearing, and sign out on shared devices.
8. Security
Traffic between your device and our servers is encrypted. Every business can see only its own data, sign-in uses a one-time emailed code, owners control what each staff role can do, and sensitive staff actions are logged. No system is perfectly secure, so please keep your login private and tell us at once if you think someone else has access.
9. Your rights
Under the Kenya Data Protection Act you may ask us to tell you what personal data we hold about you, correct it, delete it, give you a copy, or stop using it for a particular purpose. Contact us using the details below and we will respond within the time the law allows. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
10. Children
Inventoman AIOS is for businesses and is not meant for anyone under 18.
11. Changes
If we change this policy in a way that matters, we will tell you in the app or by message before it takes effect. The date at the top shows when it was last updated.
12. Contact
Inventoman Solutions, Nairobi, Kenya. Phone or WhatsApp: 0717140481.