Privacy Policy

We collect the following types of information:

• Account information — name, email address, and phone number
• Business information — business name, type, and M-Pesa till or paybill numbers
• Financial data — M-Pesa statements and sales records you upload for reconciliation
• Usage data — how you interact with the app, including pages visited and features used

We use your information to:

• Provide the reconciliation service and match transactions to sales
• Generate reports and summaries for your business
• Send email notifications about reconciliation results (if enabled)
• Process subscription payments and manage your plan
• Improve and maintain the PesaRecon platform

Your data is stored securely on Supabase (PostgreSQL) with encryption at rest and in transit. The application is hosted on Vercel. Access to your data is restricted to your authenticated account.

We process your M-Pesa statement data exclusively for reconciliation purposes within your account. We do not share your M-Pesa or sales data with third parties for marketing or advertising.

If you upload encrypted PDF statements, the password you provide is used only to unlock the file for parsing. PDF passwords are never stored on our servers.

PesaRecon uses the following third-party services:

• Supabase — database and authentication
• Vercel — application hosting
• Paystack — subscription payments
• Resend — email notifications

Each provider has its own privacy policy governing how they handle data passed to their systems.

We do not sell your personal or financial data. We do not share your M-Pesa statements or sales records with third parties except as necessary to operate the service (e.g., storing data in Supabase or processing payments through Paystack).

We retain your data for as long as your account is active. If you request account deletion, we will delete your data within 30 days, except where we are required by law to retain certain records.

You have the right to:

• Access the data stored in your account
• Export your transactions, sales, and reconciliation reports
• Request correction or deletion of your data

To exercise these rights, contact us at johnson@pesarecon.com.

We use essential cookies for authentication and session management only. We do not use advertising or third-party tracking cookies.

We protect your data using SSL/TLS encryption, secure authentication through Supabase, and row-level access controls so each business can only access its own records.

PesaRecon is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account.

For privacy-related questions, contact us at johnson@pesarecon.com.

This Privacy Policy is governed by the laws of Kenya. Any disputes arising from this policy shall be subject to the jurisdiction of the courts of Kenya.