Privacy Policy

Last updated: 14 October 2026

Biashara AI is a WhatsApp bookkeeping assistant for small businesses in Kenya. It is operated by Zenvora Technology Solutions Limited ("we", "us"). This policy explains what information we collect when you use Biashara AI, why we collect it, who we share it with, and the choices you have. We handle personal data in line with Kenya's Data Protection Act, 2019.

1. Information we collect

• Your WhatsApp number and profile name, which WhatsApp shares with us when you message Biashara AI. Your number is how we identify your account.
• Your business name, which you give us when you sign up.
• Messages you send us, including text, voice notes, and documents or files you forward (for example invoices, receipts or M-Pesa confirmation messages).
• Business records created from your messages, such as sales, expenses, budgets, and any figures you tell us about stock, equipment, money owed to you, money you owe, or loans.
• Subscription and payment details: the plan you choose, the amount, and the M-Pesa transaction code for payments you make to us. We do not receive or store your M-Pesa PIN.
• Usage information, such as how many messages you have sent this month, so we can apply your plan's limits.
• Your shop's location, only if you joined through one of our field agents and choose to share your location pin, so we can confirm the agent really visited you.
• Your feedback, if you answer our short questions about the service (for example a rating and a suggestion).
• Website visit statistics: when you visit our website we count visits, the pages viewed, the country and the type of device, without cookies and without identifying you.
• The agent who helped you sign up, if any, so we can pay agents only for real sign-ups.

2. How we use your information

• To run the service: record your transactions, answer your questions, and generate the reports and files you ask for.
• To send you scheduled messages you can expect from the service, such as a weekly business summary.
• To process your subscription payments and send you quotations and receipts.
• To keep the service secure, prevent misuse, and fix problems.
• To check that sign-ups made by our field agents are genuine, and to improve the service using your feedback.

We do not sell your information, and we do not use your business records for advertising.

3. Who we share information with

We share your information only as needed to run Biashara AI, and only with:

• Service providers who help us deliver the service, such as our messaging platform, our artificial intelligence and speech-to-text providers that help read and reply to your messages, our cloud hosting and data storage providers, and our mobile money payment provider. They may only use your information to provide their services to us, under confidentiality and data protection obligations.
• Payment service providers, to process subscription payments you make to us through mobile money.
• Professional advisers, such as our accountants, auditors and lawyers, where needed.
• Government and regulatory authorities, where the law requires us to share information.

When you ask about market prices or similar information, our service may search the public web. Your question is used for that search, but your business records are not.

4. Where your information is stored

Some of our service providers store or process information outside Kenya. Where we send your information outside Kenya, we make sure it is properly protected in accordance with the Data Protection Act, 2019.

5. How long we keep information

We keep your account and business records for as long as your account is active, so your history is available to you. Your plan may limit how far back you can view your history, but this does not delete older records. If you ask us to delete your account, we delete your data as described on our Data Deletion page. We may keep payment records where the law requires us to keep them for tax or accounting purposes.

To protect your records against loss or error, we keep encrypted backups: a daily copy for 30 days and a monthly copy for up to 5 years. If you delete your account, your data is removed from the live service straight away and from all backups within 30 days.

6. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be told how your data is used (this policy);
• access the personal data we hold about you;
• ask us to correct data that is wrong;
• ask us to delete your data;
• object to certain uses of your data.

Chama accounts. When a treasurer or other official uses Biashara AI for a chama, we store the members' names, optional phone numbers, contributions, loans and fines that the official records. The chama decides what is recorded, and is responsible for making sure its members agree to it. We also store each official's name, role and WhatsApp number. Officials' PINs are stored only in a scrambled form that cannot be read back by anyone, including us. Records in a chama's book are changed or removed only by the chama, through its officials. If you are a member and want your information corrected or removed, please ask your chama's officials. If you contact us directly, we will refer your request to your chama.

To use any of these rights, contact us using the details below. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).

7. Security

We protect your information with access controls, encrypted connections, encrypted storage and encrypted backups, and we limit access to people and providers who need it to run the service. No system is completely secure, but we work to protect your data, and if a breach may affect you we will notify you and the Office of the Data Protection Commissioner as the law requires.

8. Children

Biashara AI is a business tool and is not intended for anyone under 18.

9. Changes to this policy

We may update this policy. When we make important changes, we will update the date at the top and, where appropriate, let you know through WhatsApp.

10. Contact us