Privacy Policy

This Privacy Policy explains how Breeva Labs("iManage", "we", "us") collects, uses, and protects personal data when you use the iManage web application and website (the "Service"). We process personal data in line with the Data Protection Act, 2019 of Kenya. By using the Service, you agree to this Policy.

1. Who we are

Breeva Labs is the data controller for personal data processed through iManage. We are based in Nairobi, Kenya. You can reach us any time via WhatsApp.

2. Data we collect

• Account data — your name, email address, and password (stored encrypted) when you sign up.
• Business data you enter — businesses, products, stock, suppliers, transactions, shipments, ad campaigns, tasks, and team members you add.
• Payment data — your billing is handled by our payment processor; we receive confirmation of the pass you bought and a transaction reference. We do not store your full M-Pesa or card details.
• Technical data — basic logs such as IP address, browser type, and usage events, used to keep the Service secure and working.

3. How we use your data

• To provide and operate the Service and your account.
• To process payments and manage your access passes.
• To provide support, including over WhatsApp.
• To keep the Service secure, prevent abuse, and meet legal obligations.
• To improve the Service. We do not sell your personal data.

4. Service providers

We share data only with the processors needed to run iManage:

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Paystack — payment processing (M-Pesa and cards).
• Resend — transactional email (e.g. team invitations, password resets).

These providers process data on our instructions. Some may store data outside Kenya; where they do, we rely on appropriate safeguards as required by law.

5. How long we keep data

We keep your account and business data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep records to meet legal or accounting obligations.

6. Your rights

Under the Data Protection Act, 2019 you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal limits.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format — you can export your business data from the app at any time.

To exercise any of these rights, contact us on WhatsApp.

7. Security

We protect your data with encryption in transit, access controls, and row-level security so each account only sees its own data. No system is perfectly secure, but we take reasonable steps to safeguard your information and will notify you of a breach where the law requires.

8. Children

iManage is intended for businesses and is not directed at people under 18. We do not knowingly collect data from children.

9. Changes to this Policy

We may update this Policy from time to time. We will update the date above and, for material changes, notify you within the app or by email.

10. Contact

Questions about your privacy or this Policy? Reach us on WhatsApp and we'll help.