Privacy

If you run an ISP or other network on Wakali, we are responsible for your account details. You are responsible for your own customers' information, and we handle it on your behalf to run the service you asked for.

If you are a customer of an ISP that uses Wakali, please contact that ISP first about your information.

• Your account: your name, your organisation's name, email address and phone number, and your password in a form that cannot be read back. If you sign up with Google, Google gives us your name and email address.
• Your customers: what you and they enter or generate by using your network, such as phone numbers, packages, payments and receipts, device addresses, IP addresses and data used.
• Payment details: the Paybill, Till or bank account your money goes to, and the keys needed to collect it. Card details are handled by Paystack and do not reach us.
• Messages to us: what you send through the support window, with your name, email address and the page you were on.
• Records of use: our servers and dashboards keep logs for security and for working out what went wrong, including sign-ins, actions taken and IP addresses.

We count visits ourselves. We do not use Google Analytics, advertising trackers or session recording, and no cookie is used to count you. We record:

• that the home page was visited, and roughly how far down it was read
• which buttons were pressed
• how far someone got through the demo tour and through signing up
• the site or campaign link they came from, the kind of device, and the country

To count one visit once, we briefly combine your IP address and browser details with a random value that is thrown away after the day. The result is all that is kept, not your IP address, so these records cannot be traced back to you or linked between days. If your browser sends a "do not track" or Global Privacy Control signal, your visit is not recorded at all. These records are kept for about 13 months.

The country comes from IP geolocation data by DB-IP, which we hold on our own server. Your address is not sent to anyone to look it up.

Signing in keeps your session in your browser's own storage, and one small cookie remembers which dashboard to open when you press Sign in. It holds only your dashboard's name and lasts about a month. None of this is used for advertising.

• to run the service: connecting customers, taking payments, and sending the SMS and email you have set up
• to bill you and to tell you about your account
• to answer you when you ask for help
• to keep the service secure and to find and fix problems
• to understand how the website and product are used, so that we can improve them

We do not sell personal information. We share it only as far as needed to run the service, with:

• payment services such as M-Pesa and Paystack
• the companies that deliver our SMS and email
• Google, if you choose to sign up with Google
• the company that hosts our servers, which may be outside Kenya
• authorities, when the law requires it

We keep account and customer records while your account is open, and afterwards for as long as we need them for the law, tax and resolving disputes. Records of website visits are kept for about 13 months.

Under Kenya's Data Protection Act, 2019, you can ask to see the information we hold about you, have it corrected or deleted, object to how we use it, and withdraw consent you have given. Write to hello@wakalibilling.com. You can also complain to the Office of the Data Protection Commissioner.

If we change this page in a way that matters, we will update the date above and tell account holders.