Privacy Policy

How we collect, manage, and safeguard merchant and customer transaction details.

RiverPen Technologies is committed to protecting your personal data in accordance with the Data Protection Act, 2019 of Kenya.

1. Data Controller Details

RiverPen Technologies, operating from Nyeri, Kenya. Contacts: privacy@mail.riverpen.com.

2. Data We Collect

We collect your business name, KRA PIN (where required for compliance), phone number, email, billing statements, and transactional logs (e.g. M-Pesa receipt confirmations).

3. How We Use and Share Data

Data is utilized to process payments, complete payouts, verify account authenticity, prevent fraud, and comply with tax, KRA, and regulatory reporting obligations. We do not sell your personal data.

4. Retention & Safeguards

Records are retained for the duration required by financial regulatory guidelines. We employ secure authentication and data access controls to prevent breach.