Privacy Policy

This policy covers businesses and their staff who use TabSly to manage their own clients, leads, tasks, quotes, invoices, and related business records ("Customers"), and:where relevant:the individuals whose contact details a Customer stores in the Service (their clients, leads, and suppliers).

Simertech Solutions acts as a data processor on behalf of each Customer for the business records they enter into the Service; the Customer is the data controller for that data and is responsible for having a lawful basis to collect and store it.

• Account information: name, email address, and password (stored as a secure hash, never in plain text) for each user a Customer creates.
• Device information: a device identifier/label (e.g. phone model and app version) recorded when you log in from the mobile app, so a specific device's access token can be identified and revoked if a device is lost.
• Business data you enter: clients, leads, tasks, quotes, invoices, payments, expenses, suppliers, and related notes that a Customer or their staff record in the Service.
• Communications data: when a Customer sends a reminder or receipt through the Service (by email or WhatsApp), we process the recipient's email address or phone number solely to deliver that message on the Customer's behalf.

We do not collect data for advertising purposes, use third-party analytics or tracking SDKs, or sell any data to third parties.

The mobile app offers an optional demo mode that does not require an account. Data entered while using demo mode is stored only on your device and is never transmitted to our servers. If you later choose to "go live" and log into a real account, everything you created in demo mode syncs to that account once you log in.

• To provide, operate, and keep your account synced across the web app and mobile app.
• To authenticate logins and secure access to your account.
• To send reminders, receipts, and notifications that a Customer has configured or requested (via email and, where enabled, WhatsApp).
• To provide customer support when requested.

Business data is stored on servers operated by or on behalf of Simertech Solutions. The mobile app additionally keeps a local, offline copy of your data on your device (so the app keeps working without a connection) and stores your login token in your device's secure credential storage, not in plain text.

We use the following categories of third-party service to operate the Service, each processing only what's needed to perform its function:

• Email delivery (to send reminders/receipts a Customer triggers).
• WhatsApp Business messaging, where a Customer has enabled it, to send message templates a Customer has approved.

We do not share business data with any other third party except as needed to provide the Service or as required by law.

Depending on your location and applicable law:including, for users in Kenya, the Data Protection Act, 2019:you may have the right to access, correct, export, or request deletion of your personal data. Where Simertech Solutions acts as a data processor for a Customer's business records, requests about that data should first be directed to the relevant Customer (business); Simertech Solutions will assist that Customer in fulfilling such requests.

To make a request directly to Simertech Solutions (for your own account information), contact us at info@simertechsolutions.co.ke.

We retain account and business data for as long as an account remains active, and for a reasonable period afterward to allow account recovery, unless a Customer requests earlier deletion or retention is required by law.

The Service is a business tool not directed at children, and we do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.