Privacy Policy

1. Overview and Legal Commitment

IMEANTECH ("we", "us", or "our") is a Kenyan technology enterprise headquartered in Nairobi and Thika, Kenya. We build custom websites, business management systems, educational portals (Mandela), agribusiness platforms (Wangari), workforce platforms (Workora), and managed IT services.

We treat data privacy with absolute seriousness and design our systems to comply strictly with the Kenya Data Protection Act, 2019, the General Data Protection Regulation (GDPR) for international partners, and relevant African digital economy regulations.

2. Information We Collect

We collect only the minimum information necessary to deliver, bill, and support software engineering projects:

• Contact and Project Inquiries: Name, work email address, phone/WhatsApp number, organization name, and technical project scope notes submitted through our forms or quotation room.
• Client Operations Portal Accounts: Login email, encrypted credentials, OTP verification logs, role assignments, and project collaboration notes.
• M-Pesa and Payment Transactions: When paying via Safaricom M-Pesa Daraja, we record the official transaction reference code, amount, timestamp, and telephone number. We never access, request, or store your M-Pesa PIN.
• Technical and Usage Metrics: Device IP, browser type, referral URLs, and interactions tracked via privacy-focused analytics to optimize mobile performance across Kenyan telecom networks.

3. How We Use Your Data

We process your data strictly for legitimate operational purposes:

• To prepare custom technical proposals, project milestones, and formal invoices.
• To provide access to the private Client Operations Portal for live milestone and sprint tracking.
• To automate Safaricom M-Pesa payment reconciliation and generate instant receipts.
• To provide 24/7 technical support and cloud server monitoring for managed IT clients.
• To notify clients about milestone completions, security advisories, and system updates.

We never sell, rent, or trade client personal or institutional data to advertising brokers or third-party lead generators under any circumstances.

4. Code and Institutional Data Ownership

A cornerstone of IMEANTECH is 100% full client code and data ownership. All databases, proprietary client records, customer lists, and codebases developed for your organization belong solely to you once project milestones are settled. We do not hold client data hostage, and we provide clean exports upon request.

5. Data Security and Storage Architecture

We implement industry-grade technical safeguards:

• Transport Layer Security: All web traffic is encrypted with TLS 1.3 / HTTPS.
• Storage Encryption: Databases and file vault assets are encrypted at rest with AES-256 standards.
• Multi-Factor and OTP Verification: Administrative and client access is guarded by time-sensitive one-time passcodes (OTP) and role-based permissions.
• Automated Backups: Daily encrypted offsite snapshots prevent data loss.

6. Your Statutory Rights

Under the Kenya Data Protection Act, 2019, you have the right to request access to the personal data we hold about you, request rectification of inaccurate records, request deletion of your information, or object to processing. To exercise any of these rights, contact our Data Protection Officer below.