This policy explains what personal data VunaTech collects through VunaBook, why, and your rights. We follow the Personal Data Protection Act, 2022 of Tanzania.
1. Two kinds of data
- Account data: the details of the company and its users (names, phone numbers, emails, sign-in records, billing and payments to VunaBook). For this data VunaTech is the data controller.
- Business data: what the company records about its customers, suppliers, employees and sales. The company is the controller of this data; VunaTech only keeps and processes it on the company's instructions, to run VunaBook.
2. What we collect
- Details you give: business name, phone, email, address, TIN/VRN, user names and contacts, passwords (stored scrambled, never readable).
- Use of the system: sign-ins (date, IP address, device), actions in the activity log, settings.
- Payments to VunaBook: invoices, amounts, transaction numbers.
- Messages to Support and feedback.
- The business data the company enters.
3. Why we use it
- To provide VunaBook: sign-in, security, the features you use, backups.
- To bill for the plan and send reminders (in the app, by SMS or email).
- To give support, answer requests and improve VunaBook.
- To keep the system safe (for example blocking repeated wrong passwords) and to meet legal duties.
- If a marketing agent brought your company, the agent sees your company name, contact, plan and whether it is paid, to earn their commission and help you.
We do not sell personal data and do not use your business data for advertising.
4. Who we share it with
Only with those who help run VunaBook, and only what they need: hosting and backup providers, SMS, email and mobile-money providers, and authorities when the law requires it. They must keep it safe and confidential.
5. Where it is kept and how it is protected
Data is kept on secured servers with backups. Access is limited by passwords, permissions per user, single sign-in and optional two-step login. If data is stored outside Tanzania, we make sure it is protected as the law requires.
6. How long we keep it
As long as the account is open, and after it is closed only as long as needed for legal, tax or accounting duties, then it is deleted or made anonymous. Backups are replaced after a few days.
7. Your rights
You may ask to see the personal data we hold about you, to correct it, to have it deleted when it is no longer needed, or to object to its use. Users can update their own details on My Profile; the company can download all its data. For a customer or employee of a company, ask that company first, since it controls that data.
8. Cookies
VunaBook uses only the cookies it needs to work: keeping you signed in, security and remembering your language and theme. The invitation link of an agent is remembered for 30 days to know who invited you.
9. Children
VunaBook is for businesses and is not meant for children.
10. Changes and contact
We may update this policy; the new version is shown here with its date. Questions or requests about your data: VunaTech · 0726660062 / 0726669111 · support@vunabook.co.tz. You may also complain to the Personal Data Protection Commission of Tanzania.