Privacy Policy
The short version. Teleeza POS is business software. Businesses use it to record their own sales, stock, staff and customers. We hold that data on their behalf, we do not sell it, and we do not use it for advertising. You can ask us to delete your account at any time from this page or inside the app.
1. Who we are
Teleeza POS is a point-of-sale and business management service for businesses in Kenya, operated by Paydesk Limited. In this policy "we" and "us" mean the operator of Teleeza POS, and "you" means anyone whose information we hold.
Contact us about anything in this policy:
- Email: hello@teleezapos.co.ke
- Phone or WhatsApp: 0783 883 883
2. Two kinds of people in this policy
It matters which one you are, because our role differs.
| Who | Our role | What it means |
|---|---|---|
| Account holders — business owners and their staff who sign in to Teleeza POS | We decide how this data is used (we are the data controller) | You deal with us directly, and this policy governs that relationship. |
| A business's own customers — people a shop records in its customer list | We only process it for that business (we are the data processor) | The business decides what to record and why. Ask them to correct or delete it; we act on their instruction, and on ours only where the law requires. |
3. What we collect
When a business signs up and uses the service
- Account details: business name, your name, email address, phone number, your role, and a password we store only as a one-way hash — we never see or store the password itself.
- Business records you enter: products and prices, stock, sales and receipts, expenses, suppliers, purchase orders, staff records including salary and commission rates, and attendance.
- Your customers, if you record them: name, phone, email, birthday, notes you write, loyalty points, wallet balance and credit limit. You choose what to enter here.
- Payments: the amount, method, M-Pesa receipt number, and the reference for each payment. We never see or store card numbers, M-Pesa PINs or bank passwords.
- Billing: your subscription payments to us, the M-Pesa receipt, and the phone number used.
Automatically, when you use the app or website
- Sign-in and device information: the device name, platform (Android, web, Windows, Linux), the app version, when you last signed in, and your IP address for each sign-in attempt.
- Security and audit records: who did what and when — sales, voids, refunds, stock adjustments, staff changes — so a business can investigate its own discrepancies.
- Diagnostic logs: errors and payment callbacks, kept so we can fix faults.
Permissions the Android app asks for
| Permission | Why | Leaves your device? |
|---|---|---|
| Camera | Scanning product barcodes and QR codes at the till | No. Frames are read on the device to decode the code; no image is uploaded or stored. |
| Fingerprint / face unlock | Optionally unlocking the app on your device | No. Your biometric never leaves the device and we never receive it; Android only tells the app whether the check passed. |
| Internet and network state | Talking to your Teleeza POS account, and knowing when the connection drops so cash sales can be saved offline | — |
The app does not ask for your contacts, location, photos, files, microphone or SMS.
4. Why we use it
| Purpose | Lawful basis |
|---|---|
| Running the service you signed up for — recording sales, stock, staff and customers | Performance of our contract with you |
| Taking payment for your subscription and sending receipts | Performance of our contract with you |
| Sending transactional messages — M-Pesa confirmations, receipts you choose to send, payment reminders, low-stock alerts | Performance of our contract, and your business's own instruction |
| Keeping the service secure — sign-in throttling, audit logs, fraud and abuse prevention | Our legitimate interest in a safe service |
| Support, and telling account holders about changes to the service, pricing or the app | Our legitimate interest in serving you, and our contract |
| Meeting tax, accounting and anti-fraud obligations | Legal obligation |
We do not use your data for advertising, we do not sell it, and we do not build profiles of your customers for anyone else.
5. Who else sees it
Only the people and services that make Teleeza POS work:
- Safaricom (M-Pesa / Daraja) — when a payment is made, so the money can move. Safaricom receives the phone number being charged and the amount.
- Our SMS provider — the recipient's phone number and the message text, only for messages you or your settings choose to send.
- Our email provider and hosting — email addresses and message content for emails we send on your instruction, and the servers that store the data.
- Advisers and authorities — only where the law requires it, or to establish or defend a legal claim.
Our servers are in Germany, in the European Union. Transferring your data outside Kenya is necessary to provide the service, and it is protected there by the contractual terms we hold with each provider and by EU data-protection law, as the Kenya Data Protection Act, 2019 requires.
6. How long we keep it
| What | Kept for |
|---|---|
| Your account and the business records in it | While the account is open |
| After an account is closed or deleted | Deleted or anonymised within 30 days, except the records below |
| The contact details of a closed business's own customers | Cleared when the business closes. A customer's name stays on the invoices that name them, because an invoice with no buyer on it is not a valid tax record |
| Financial records — sales, payments, invoices, subscription payments | Up to 7 years, because Kenyan tax law requires us and you to keep them |
| Sign-in, audit and payment-callback logs | Up to 12 months |
| Backups | Overwritten on a rolling basis, normally within 30 days |
7. Your rights
Under the Kenya Data Protection Act, 2019 you may ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything inaccurate;
- delete your account and personal data — see section 8;
- stop or restrict a particular use;
- object to a use we base on our legitimate interest.
Ask by emailing hello@teleezapos.co.ke. We reply within 30 days. If you are unhappy with our answer you may complain to the Office of the Data Protection Commissioner of Kenya.
If you are a customer of a business that uses Teleeza POS, ask that business first — the records are theirs. Tell us and we will pass your request to them and help them act on it.
8. Deleting your account
You can request deletion in two ways, neither of which needs you to call anyone:
- On the web: teleezapos.co.ke/delete-account — works without installing the app.
- In the app: Profile → Delete my account.
What happens next, and exactly what goes, is set out on the deletion page. In short: your sign-in, personal details, devices and staff record are removed; financial records we are legally required to keep are retained for up to 7 years and then deleted, and are no longer linked to a live account.
9. Security
- Everything travels over HTTPS.
- Passwords are stored as one-way hashes — we cannot read them, and nor can anyone who steals the database.
- Sign-in attempts are rate-limited and locked after repeated failures.
- Each business's data is isolated from every other business at the query level.
- Staff access inside a business is controlled by that business through roles and 24 individual permissions.
- You can see every device signed in to your account under Profile, and sign any of them out.
No system is perfectly secure. If we discover a breach affecting your personal data we will notify you and the Office of the Data Protection Commissioner as the law requires.
10. Children
Teleeza POS is for businesses. It is not directed at children and we do not knowingly create accounts for anyone under 18.
11. Cookies
The website uses one essential cookie to keep you signed in, and a security token to protect forms against cross-site request forgery. There are no advertising or third-party tracking cookies. The Android and computer apps use no cookies; they hold a sign-in token on the device, which is cleared when you log out.
12. Changes
If we change this policy we will update the date at the top, and tell account holders in the app and by email when the change is significant.
Last updated 13 October 2026.