Privacy Policy

1. Overview

This Privacy Policy describes how Sirfress Technologies ("we", "us", "our") collects, uses, and protects information when you use ElectroDesk ("the Service"). By using ElectroDesk, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy and handling your data with transparency and care.

2. What We Collect

Account information

• Your name and email address (provided during registration)
• Password (stored as a secure hash — we cannot read your password)
• Email verification status and timestamps

Business data you enter

• Business name, type, and shop details
• Products, stock levels, prices, and categories
• Sales records and transaction history
• Repair job tickets and device information
• Customer names, contact information, and purchase history
• Expense records and financial data
• Staff names and role assignments

Usage and technical data

• Login timestamps and last active date
• Browser type and device information (for compatibility)
• IP address (for security and fraud prevention)
• Pages visited within the platform

Payment data

We do not store your M-PESA PIN, card numbers, or sensitive payment credentials. Payment processing is handled by the respective payment providers (Safaricom, Airtel, PayPal). We store only transaction references and confirmation status.

3. How We Use Your Information

• To provide, operate, and maintain the ElectroDesk platform
• To process your subscription and confirm payment
• To send account-related emails (verification, plan expiry notices, receipts)
• To enforce plan limits and manage your subscription
• To respond to support requests and enquiries
• To detect and prevent fraudulent or abusive activity
• To improve the Service based on usage patterns

We do not use your data to serve advertisements. We do not share your data with advertising networks.

4. Data Storage & Security

Your data is stored on secure servers. We implement the following measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using HTTPS (TLS)
• Data at rest is encrypted in the database
• Daily automated backups to prevent data loss
• Strict account isolation — no user can access another account's data
• Passwords are hashed using bcrypt and are never stored in plain text
• Access to production systems is restricted to authorised personnel only

While we take every reasonable precaution, no system is completely immune to security risks. We will notify you promptly in the event of any breach that affects your data.

5. Data Sharing

We do not sell, rent, or trade your personal or business data. We may share limited information only in the following circumstances:

Service providers

We may share minimal data with trusted third-party providers who help us operate the Service — such as email delivery services, server hosting, and payment processors. These providers are contractually required to protect your data and may not use it for any other purpose.

Legal requirements

We may disclose information if required to do so by law, or in response to valid requests by public authorities (e.g. a court or government agency).

Business transfers

If Sirfress Technologies is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain your data for as long as your account is active. Specific retention rules:

• Active accounts: all data retained indefinitely while the account exists
• Deleted products: kept in audit log for 90 days (full details for 12 hours, then audit record only)
• Closed accounts: data retained for 30 days after closure, then permanently deleted
• You may request earlier deletion by contacting us

When a paid plan expires and your account falls back to Free, your data is preserved in full. Products exceeding plan limits are disabled but not deleted.

7. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the data we hold about you
• Correction: You can update your account information at any time from your profile settings
• Deletion: You can request deletion of your account and all associated data
• Portability: You can export your sales, expenses, and customer data from within the platform at any time
• Objection: You can object to how we process your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

ElectroDesk uses cookies and similar technologies to maintain your session and remember your preferences. We use:

• Session cookies: Required for you to stay logged in while using the platform
• Preference cookies: To remember your theme preference (light/dark mode)
• CSRF tokens: To protect against cross-site request forgery attacks

We do not use tracking cookies, advertising cookies, or third-party analytics that profile your behaviour across other websites.

9. Security

We take security seriously and continuously work to protect your data. Our measures include encryption at rest and in transit, daily backups, access controls, and regular security reviews.

You are responsible for maintaining the confidentiality of your password. Use a strong, unique password for your ElectroDesk account and do not share your login credentials with unauthorised individuals.

If you suspect unauthorised access to your account, contact us immediately at [email protected].

10. Children's Privacy

ElectroDesk is a business management platform intended for adults and business owners. We do not knowingly collect personal information from anyone under the age of 16. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice within the platform. The date at the top of this page always reflects when the policy was last updated.

Continued use of ElectroDesk after changes take effect constitutes your acceptance of the updated policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: [email protected]
• Website: sirfress.com
• Location: Nairobi, Kenya

We will respond to all privacy-related enquiries within 30 days.