Privacy Policy

Blessedave Technologies ("we", "us", "our") provides quotation, invoicing and payment services to our clients in Kenya and beyond. This policy explains what information we collect through our website and client portal, why we collect it, and how we protect it.

1. Information we collect

We collect only the information needed to prepare quotations, issue invoices, process payments and communicate with you about them:

• Contact details — your name, company name, email address, phone number and WhatsApp number.
• Billing details — billing and physical address, city, country, and KRA PIN where provided for invoicing purposes.
• Project information — details you submit when requesting a quotation, including any file you choose to attach.
• Financial records — quotations, invoices, payment history and receipts, including M-PESA transaction references (receipt number, amount, date) processed through Safaricom's Daraja platform. We never see or store your M-PESA PIN.
• Account information — your client portal login email and a securely hashed password, if you have portal access.
• Technical information — IP address and browser user agent, recorded against key actions (such as accepting a quotation or completing a payment) for security and audit purposes.

2. How we use your information

• To prepare and send you quotations and invoices;
• To process payments and issue receipts;
• To send you service communications by email and WhatsApp — including invoice notifications, payment confirmations, and reminders about upcoming or overdue payments;
• To respond to quotation requests and support enquiries;
• To maintain accurate financial and audit records, including for tax and accounting purposes;
• To keep our systems secure and prevent fraud.

We do not use your information for unrelated marketing, and we do not sell your information to third parties.

3. WhatsApp and email communication

Where you provide a WhatsApp number and consent to be contacted, we send transactional messages (such as invoice notifications and payment reminders) through the official Meta WhatsApp Business Platform. Message content and delivery are subject to Meta's own terms and privacy practices in addition to this policy. You can ask us at any time to stop WhatsApp reminders for your account.

4. How we share your information

We share the minimum information necessary with the following parties strictly to deliver our services:

• Safaricom (M-PESA Daraja) — to initiate and confirm M-PESA payments;
• Meta (WhatsApp Business Platform) — to deliver WhatsApp notifications, if you have consented to WhatsApp communication;
• Our email delivery provider — to send transactional emails;
• Professional advisors (such as our accountants), where reasonably necessary for tax and financial reporting.

We do not share your information with any other third party except where required by law.

5. Data retention

We retain quotation, invoice, payment and receipt records for as long as required by Kenyan tax and accounting record-keeping obligations. Client contact details are retained while your account remains active, or as needed to meet the financial retention requirements above. You may ask us to deactivate your client record at any time; we will retain only what we are legally required to keep.

6. How we protect your information

Client documents and payment proofs are stored on access-controlled, private storage and are never publicly reachable by a guessable link. Quotations and invoices are shared through random, non-sequential secure links rather than exposing internal record numbers. Sensitive integration credentials (payment and messaging provider keys) are kept out of our application code and are never included in our logs or audit records.

7. Your rights

Under Kenya's Data Protection Act, 2019, you have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion or restriction of processing where applicable, and withdraw consent to WhatsApp communication at any time. To exercise any of these rights, contact us using the details below.

8. Cookies

Our client and staff portals use a session cookie strictly necessary to keep you logged in securely. We do not use third-party advertising or tracking cookies.

9. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will always reflect the latest revision.

10. Contact us

If you have any questions about this policy or how we handle your information, please contact Blessedave Technologies through your usual account representative or via the contact details provided on our invoices and quotations.