Privacy policy

Effective 10 September 2026

AllShops provides point-of-sale and business-management services to merchants. This policy explains the information processed through our website, mobile application, and supporting services.

Information we process

• Account and workplace information such as names, email addresses, roles, branches, and authentication records.
• Merchant business records such as products, stock, sales, local payment method labels, customers, suppliers, staff, appointments, expenses, and reports.
• Subscription billing records and Paystack transaction references. AllShops does not store full payment-card numbers.
• Device, synchronization, security, diagnostic, and audit information needed to operate and protect the service.

How information is used

We use information to provide the service, synchronize authorized devices, secure accounts, enforce merchant permissions and plan limits, process AllShops subscriptions, provide support, prevent misuse, and meet applicable contractual or legal obligations.

Sharing and processors

Information may be processed by infrastructure, security, monitoring, communication, and payment providers acting for AllShops. Paystack receives subscription-payment information when an authorized merchant starts a card payment. Merchant POS cash and local-terminal transactions remain merchant records and are separate from AllShops subscription billing.

Control, retention, and deletion

Merchant administrators control access to their workspace. Information is retained only as required to provide the service, preserve financial and security records, resolve disputes, and satisfy applicable obligations. Account holders can request access, correction, export, or deletion. Some transaction and audit records may need to be retained or de-identified instead of immediately erased.

Security and international processing

We use access controls, encrypted transport, restricted production networks, audit records, and backups. No system is completely risk-free. Service providers may process information in countries other than the user's location subject to appropriate contractual and technical safeguards.

Contact

For privacy questions or requests, email admin@ekazi.co.ke. For deletion instructions, visit Delete an account.