Privacy Policy

1. Information We Collect

To operate our offline-first point of sale platform, we collect the following types of information:

• Merchant Profile Data: Contact information, store names, location settings, and branch profiles.
• Till Logs & Checkout Sales: Transaction registers, inventory adjustments, price tables, payment logs, and sales timestamps.
• Integrations Data: M-Pesa transaction reference numbers and KRA eTIMS invoice signatures. We never store raw Safaricom API passwords or KRA tax portal credentials.

2. How We Use Your Data

We use the information we collect to provide and improve the Faidi Nova services, including:

• Synchronizing transaction logs and stock counts between your offline cashier tills and your online cloud dashboard.
• Validating mobile cash checkouts in real-time to prevent M-Pesa verification fraud.
• Generating compliant eTIMS invoices for KRA tax reporting.
• Powering the Nova AI business analysis engine to give you low-stock alerts and sales forecasts.

3. Data Security & Resiliency

Because Faidi Nova is built for offline resilience, transactions are securely cached on your physical till devices.

• All local caches on the till devices are protected with role-based dashboard passwords.
• Data synced from cashiers to our main database is encrypted in transit using SSL/TLS protocol and stored on secure cloud database servers.
• Role-based access controls prevent checkout cashiers from deleting audit logs or exporting margins.

4. Third-Party Integrations

We integrate natively with third-party service systems (e.g. Safaricom M-Pesa C2B Ledger, KRA eTIMS invoices platform). These services handle data in accordance with their own respective privacy terms, and Faidi Nova coordinates transaction references solely for verification and compliance.

5. Data Retention & Deletion

We retain your operational records as long as your merchant profile account is active. If you request account closure, we will permanently delete or anonymize all historical data from our main servers within 30 business days, subject to regulatory or tax compliance archiving needs.