Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect information you provide when registering your ISP, including your company name, email address, and contact details. We also collect operational data generated through use of the Platform, such as client records, invoices, and payment transactions.

2. How We Use Your Information

We use the information collected to provide and improve the Platform, process payments, send operational notifications, and provide customer support. We do not use your data for advertising purposes.

3. Data Storage & Security

Your data is stored on secure servers. We implement industry-standard security measures including encryption at rest and in transit. However, no method of transmission over the internet is 100% secure.

4. Data Sharing

We do not sell your data. We may share data with third-party service providers necessary to operate the Platform, including:

  • SMS providers (BlessedTexts) for sending notifications
  • Safaricom Daraja API for M-Pesa payment processing
  • Cloud infrastructure providers for hosting

5. Your Clients' Data

As an ISP using Billman, you are the data controller for your clients' personal information. You are responsible for obtaining appropriate consent from your clients for data processing activities conducted through the Platform.

6. Data Retention

We retain your data for the duration of your subscription and for 30 days after termination, after which it is permanently deleted upon request.

7. Your Rights

You have the right to access, correct, or delete your data at any time. To exercise these rights, contact us at dev@attic.ke.

8. Cookies

The Platform uses session cookies necessary for authentication and operation. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered ISPs of significant changes via email.

10. Contact

For privacy-related questions, contact us at dev@attic.ke.