Legal

Privacy Policy

Your privacy matters to us. This Privacy Policy explains how Tovuno POS collects, uses, stores and protects information when you use our website, point-of-sale platform and related services.

Last updated: 17 September 2026

Built around security

We use reasonable technical and organisational safeguards designed to protect information handled through Tovuno.

Your business data

Businesses remain responsible for the information they enter into Tovuno and how that information is used within their operations.

Transparent control

We aim to explain clearly what information is collected, why it is required and how you can exercise applicable data rights.

About this Privacy Policy

Tovuno POS is a point-of-sale and business management platform designed for businesses. This policy applies to information processed through our public website and Tovuno services.

1. Information We Collect

We may collect information you provide when creating or managing a Tovuno account, including your name, business name, email address, telephone number, business details, branch information and account credentials.

When you use Tovuno, the platform may also process information necessary to provide its business management functionality, including products, inventory, sales, customers, suppliers, employees, expenses, payment records and related operational information.

We may also collect technical information such as browser type, device information, IP address, login activity, system events and security logs where necessary to operate, secure and improve the service.

2. How We Use Your Information

We may use information processed through Tovuno to:

  • Provide, operate and maintain Tovuno services.
  • Create and manage user and business accounts.
  • Process transactions and business workflows.
  • Provide customer support and service communications.
  • Protect accounts and investigate security incidents.
  • Maintain audit and operational records.
  • Improve the reliability, performance and functionality of Tovuno.
  • Meet applicable legal, regulatory and compliance requirements.

3. Business and Transaction Data

Businesses using Tovuno may enter information relating to their own operations, employees, customers, suppliers, products, transactions and financial activities.

Each business is responsible for ensuring that it has an appropriate legal basis or authority to collect and use the information it enters into Tovuno.

Access to business information should be limited according to the roles and permissions configured by the business account owner or authorised administrators.

4. How We Share Information

We do not sell personal information. Information may be shared with service providers where reasonably necessary to operate Tovuno, such as infrastructure, email, payment, security or other technology providers.

We may also disclose information where required by applicable law, a lawful request, court order or regulatory obligation, or where reasonably necessary to protect the security, rights or integrity of Tovuno, its users or others.

5. Data Security

We use reasonable administrative, organisational and technical safeguards intended to protect information against unauthorised access, alteration, disclosure or loss.

Users are responsible for protecting their login credentials, restricting access to authorised personnel and notifying us promptly if they suspect unauthorised access to their account.

No online system can guarantee absolute security. Businesses should also maintain appropriate internal access, device and account security practices.

6. Data Retention

We retain information for as long as reasonably necessary to provide Tovuno services, maintain legitimate business and security records, resolve disputes and satisfy applicable legal or regulatory obligations.

Retention periods may vary depending on the type of information and the purpose for which it is processed.

7. Your Rights

Subject to applicable law, individuals may have rights relating to their personal information, including rights to request access, correction, deletion, restriction or objection to certain processing.

Requests concerning information held directly by a business using Tovuno may need to be addressed to that business first, depending on the circumstances and its relationship with the individual.

8. Cookies and Similar Technologies

Tovuno may use cookies or similar technologies where necessary for authentication, security, session management, preferences and the reliable operation of our website and platform.

Where legally required, additional cookies or technologies will be handled according to applicable consent requirements.

9. Third-Party Services

Tovuno may integrate with third-party services such as payment, communications, tax, infrastructure or other business systems. Information processed by those services may also be subject to their own terms and privacy policies.

10. Children's Privacy

Tovuno is a business management service and is not designed for use by children. Business account owners are responsible for ensuring that authorised platform users meet any applicable age and legal requirements.

11. Changes to This Policy

We may update this Privacy Policy when our services, legal obligations or data practices change. The updated version will be published on this page with a revised effective date.

12. Contact Us

Tovuno POS

A product of AFRETEF

support@tovuno.co.ke
Privacy Policy | Tovuno POS