Privacy Policy

1. Introduction

Growth Logic LTD (“we,” “our,” or “us”) operates Growth ERP, a cloud-based Enterprise Resource Planning (ERP) and Point of Sale platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account data: name, email address, phone number, and password when you register or manage your account.
• Organization data: business name, KRA PIN, postal address, contact person, and eTIMS credentials required for Kenya Revenue Authority compliance.
• Transaction data: sales records, invoices, credit notes, inventory movements, and purchase orders processed through the Service.
• Customer data: names, email addresses, phone numbers, and tax numbers of your customers that you enter into the system.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, timestamps, and session duration.
• Device data: browser type, operating system, IP address, and device identifiers.
• Log data: error reports, API call records, and performance metrics.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process transactions and generate reports within your account.
• Facilitate compliance with Kenya Revenue Authority eTIMS requirements on your behalf.
• Send transactional notifications such as account confirmations, password resets, and system alerts.
• Improve the Service through analytics, feature development, and bug fixes.
• Respond to support requests and communicate with you about your account.
• Enforce our Terms of Service and comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We may share information only in the following circumstances:

• Service providers: trusted third-party suppliers (e.g., cloud hosting, email delivery) who assist us in operating the Service and are bound by confidentiality agreements.
• Kenya Revenue Authority (KRA): transaction and inventory data transmitted to KRA systems via eTIMS as required by Kenyan tax law.
• Legal requirements: when disclosure is required by applicable law, court order, or governmental authority.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Financial and transactional records are retained for a minimum of seven (7) years to comply with Kenyan tax and accounting regulations. You may request deletion of your account data at any time; however, records required for legal or regulatory compliance will be retained for the applicable statutory period.

6. Security

We implement industry-standard safeguards including encrypted data transmission (TLS), hashed credential storage, JWT-based authentication, and role-based access controls. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. In the event of a data breach that materially affects your rights, we will notify you as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data (subject to legal retention obligations).
• Object to or restrict certain processing of your data.
• Receive a portable copy of data you have provided to us.

To exercise any of these rights, contact us at info@growthlogic.co.ke.

8. Cookies and Local Storage

The Service uses browser localStorage to store your authentication token, user profile, and preferences (such as default payment method and paper size) for session continuity. We do not use third-party advertising cookies. You can clear stored data at any time through your browser settings, which will sign you out of the Service.

9. Children's Privacy

The Service is intended for use by businesses and their authorized personnel. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to remove that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date and, where appropriate, by sending an email notification. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: