Last updated: 1 April 2026
iPOS Africa Limited ("iPOS", "we", "us") is a software company registered in Kenya (PO Box 12345, Nairobi). We operate an Enterprise Resource Planning platform at ipos.co.ke and related subdomains. Our registered office is: Runda Shopping Center, First Floor, Suite #7 & #8, Northern Bypass, Nairobi, Kenya.
For privacy matters, contact our Data Protection Officer at privacy@ipos.co.ke.
We collect data in three ways:
Data you provide directly: name, email address, phone number, company name, and any other information you submit via our contact form, sign-up flow, or support channels.
Data your business enters into the platform: transaction records, employee records, customer contact information, financial data. This data belongs to your business. We process it on your behalf as a data processor.
Usage data: IP address, browser type, pages visited, session duration, and error logs. Collected automatically via server logs and analytics tools.
We use data to: provide and improve the iPOS platform; communicate with you about your subscription, onboarding, and support; send transactional emails (invoices, receipts, password resets); send marketing communications where you have given consent; comply with legal obligations in Kenya and other jurisdictions where we operate.
We do not sell your personal data to third parties.
Our processing is based on: performance of a contract (when you subscribe to iPOS); your consent (marketing communications); legitimate interests (security monitoring, fraud prevention); and compliance with legal obligations (tax records, statutory reporting).
Transactional and financial data is retained for 7 years from the date of the transaction, in line with Kenya's Tax Procedures Act. Employee records are retained for 5 years after termination. Web analytics data is retained for 24 months. When you close your account, we delete or anonymise personal data within 90 days, except where we are required to retain it by law.
We share data with the following sub-processors: AWS (cloud hosting, EU and Africa regions); Africa's Talking (SMS delivery); Meta (WhatsApp Business API); Mailgun (transactional email); Stripe and Pesapal (payment processing). All sub-processors are bound by data processing agreements that meet the requirements of the Kenya Data Protection Act.
Under the Kenya Data Protection Act 2019, you have the right to: access your personal data; correct inaccurate data; erasure of data (where legally permitted); restrict or object to processing; data portability; withdraw consent at any time. To exercise any of these rights, email privacy@ipos.co.ke. We will respond within 21 days.
We store data on AWS servers located in the EU (Frankfurt) and Africa (Cape Town). Where data is transferred outside Kenya, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Office of the Data Protection Commissioner.
Our website uses cookies for session management, analytics, and preferences. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the platform.
iPOS is a business platform not intended for use by persons under the age of 18. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We will notify you by email and post the updated policy on this page with a revised "Last updated" date. Continued use of the platform after the effective date constitutes acceptance of the revised policy.
Privacy queries: privacy@ipos.co.ke
Office of the Data Protection Commissioner (Kenya): odpc.go.ke