Privacy Policy

1. Who we are

Mauzo Link is a cloud point-of-sale and business management service for shops and related businesses in Tanzania and the wider region.

Controller contact: EmCa Technologies LTD. Support email: emca@emca.tech. Phone: +255 749 719 998. Address: Moshi, Kilimanjaro — Tanzania.

2. Information we collect

We collect information you provide and information generated when you use the service, including:

• Account details — name, email, phone number, password (stored hashed), and role within a business.
• Business profile — business name, type, branches, address, tax identifiers you choose to enter, and subscription or billing contacts.
• Operational data you enter while using the product — products, stock, sales, customers, suppliers, debts, invoices, shifts, expenses, employees, and related records.
• Demo and support requests — name, contact details, and message content you send through our website or support channels.
• Device and usage data — IP address, browser or app version, device identifiers used for notifications or security, approximate location derived from IP where relevant, and logs needed to operate and secure the service.
• Payment and subscription records — plan, invoices, payment status, and bank or mobile-money references you share when paying for the service. We do not store full card PAN data on our servers.

3. How we use information

We use the information above to:

• Provide, maintain, and improve the Mauzo Link web and mobile apps.
• Authenticate users, manage multi-branch access, and enforce subscription status.
• Process sales, inventory, reporting, invoicing, and other features you enable.
• Send service notices, billing reminders, security alerts, and (where you opt in) product updates.
• Detect abuse, prevent fraud, troubleshoot errors, and protect the integrity of the platform.
• Comply with applicable law and respond to lawful requests.

4. Legal bases and your responsibilities

We process personal data to perform our contract with you, to pursue legitimate interests in running a secure SaaS product, and where required by law.

Business owners and administrators are responsible for the lawfulness of customer, employee, and supplier data they enter into Mauzo Link, and for informing those individuals as required by applicable privacy rules.

5. Sharing of information

We do not sell your personal information. We may share information with:

• Service providers who host infrastructure, send email or SMS, process payments, or help us operate the product — under instructions that protect your data.
• Your own organisation’s authorised users, according to roles and branch access you configure.
• Authorities or advisers when required by law, court order, or to protect rights, safety, or security.
• A successor entity if we transfer or reorganise the business, subject to equivalent privacy protections.

6. Public business sites

If you enable a public site for your business (for example products or contact pages under /site/…), content you publish there is visible to visitors. Do not publish sensitive personal data on those pages.

7. Cookies and similar technologies

Our website and apps use cookies and similar storage for sign-in sessions, language preference, security, and basic analytics needed to run the service. You can control cookies through your browser settings; disabling essential cookies may prevent login or core features from working.

8. Retention

We retain account and operational data for as long as your business subscription is active and for a reasonable period afterward to meet legal, accounting, dispute, and backup needs. You may request deletion of a business account subject to outstanding billing and legal retention obligations.

Security and access logs are kept for a limited period needed for monitoring and investigation.

9. Security

We use industry-standard measures such as encrypted transport (HTTPS), hashed passwords, access controls, and monitoring. No method of transmission or storage is completely secure; please use strong passwords and limit admin access within your organisation.

10. International transfers

Servers or subprocessors may be located in Tanzania or other countries. Where data is transferred internationally, we take steps appropriate to the nature of the transfer and applicable law.

11. Your rights

Depending on applicable law, you may request access to, correction of, or deletion of personal data we hold about you, or object to certain processing. Business users can often update profile details inside the app; for broader requests, contact us using the details below.

We may need to verify your identity and, for business data, confirm you are authorised by the business owner before acting on a request.

12. Children

Mauzo Link is intended for business use by adults. We do not knowingly collect personal information from children for consumer marketing purposes.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the service after an update means you accept the revised policy, except where applicable law requires additional consent.

14. Contact

Questions about privacy or data requests: email emca@emca.tech, call +255 749 719 998, or write to EmCa Technologies LTD, Moshi, Kilimanjaro — Tanzania.