Privacy policy

Effective 2026-06-01 · KE Data Protection Act 2019 compliant

Who we are

Mojaedge is operated by Xcobean Systems Ltd, 11th Floor, Britam Towers, Hospital Road, Upper Hill, Nairobi, Kenya. Our Data Protection Officer is reachable at dpo@mojaedge.com. Xcobean Systems is registered as a data controller with the Office of the Data Protection Commissioner (ODPC).

What we collect

You (the tenant administrator): name, email, phone, company, plan choice. Held for billing + support.
Your end customers' data: as you load it into your ERPNext tenant. You are the controller; we are a processor under the standard data-processing agreement (DPA) signed at onboarding.
Usage telemetry: request counts, error rates, latency. Anonymous-aggregate only; never tied to an individual end user.
Lead form data: what you enter on /demo, /contact or /signup. Used only to follow up with you.

What we don't do

We do not sell, rent, or share your data with third parties.
We do not train AI models on your tenant data. (The AI assistant uses BYO API keys; prompts go to your provider, not us.)
We do not run third-party analytics scripts on the marketing site. Our funnel telemetry is server-side.

Storage + retention

Data lives on encrypted volumes in our Nairobi data centres (Africa Data Centres + Kenya Internet Exchange). Daily encrypted backups land on off-host storage with 30-day default retention. Tenant data is logically isolated per Frappe site.

Your rights under KE-DPA

You have the right to access, correct, or delete personal data we hold about you. To exercise these rights, email dpo@mojaedge.com. We respond within 7 working days. If you're an end customer of a tenant (e.g. a Salute iWorld buyer), each tenant exposes a self-service /api/dpa/export and/api/dpa/delete endpoint that uses an OTP to your phone.

Cookies

We use cookies for session, cart, and CSRF protection — strictly functional. We do not deploy advertising or cross-site tracking cookies. You'll see a one-time consent banner.

Changes

We may revise this policy. Material changes will be emailed to all tenant administrators at least 14 days in advance.

Complaints can be lodged with the Office of the Data Protection Commissioner at odpc.go.ke.