Last updated: 1 June 2026
Privacy Policy
Veira AI ("Veira", "we", "us") provides point-of-sale and business management software for merchants in Kenya. This policy explains what data we collect, how we use it, and your rights under the Kenya Data Protection Act, 2019.
What data we collect
- Account data: name, email, phone, business name, and credentials (or OAuth identifiers from Google or Apple).
- Transaction data: sales, amounts, payment methods, timestamps, and receipt metadata.
- Business data: products, inventory, staff, customers, expenses, and settings you enter in the app.
- Device data: device type, operating system, app version, and diagnostic logs when needed for support.
- Usage data: features used and session activity to improve reliability and security.
- Location: we do not collect precise GPS location for core POS features.
- Payment card data: not stored on Veira servers; card and M-Pesa flows are handled by Paystack, Tuma, or your configured processor.
How we use your data
- To provide the Veira POS service, including offline sync and multi-branch operations.
- To generate KRA eTIMS fiscal receipts where you have enabled compliance (legal requirement when configured).
- To send business summaries via WhatsApp or email when you opt in.
- To improve product performance, security, and support.
We do not sell your personal or business data to advertisers or data brokers.
Data sharing
- KRA (Kenya Revenue Authority): fiscal data required for eTIMS when you connect your credentials.
- Payment partners: Paystack, Tuma, M-Pesa (Safaricom), PesaPal, or Stripe as configured for your account.
- Microsoft Azure: application hosting and database (South Africa North region unless otherwise agreed).
- Apple / Google: only when you choose Sign in with Apple or Google (authentication tokens, not ongoing access to your shop data).
Data retention
- Account profile data: while your account is active, plus up to 90 days after deletion request.
- Transaction and fiscal records: up to 7 years where required for tax and audit purposes.
- Customer records you store: until you delete them or close your account (subject to export window).
To request export or deletion, email [email protected].
Your rights
Under Kenyan law you may request access, correction, deletion, or portability of your personal data. We will respond within a reasonable period.
Security
- TLS encryption in transit for all production API traffic.
- Encrypted storage for sensitive credentials and payment configuration.
- Role-based access inside your business account.
Cookies
We use essential cookies for authentication and session security. We do not use advertising cookies on the merchant app.
Contact
Data controller: Veira AI
Email: [email protected]
Address: Westlands, Nairobi, Kenya