Privacy Notice

Last updated: 7/31/2026

1. Who we are

Stratus Business Systems (trading as StratusPOS) is the data controller for personal data processed through this service.

2. Data we collect

• Account data: name, email, password (hashed), business name, role.
• Business operational data: products, customers, suppliers, sales, purchases, and other records you create in the platform.
• Support communications: messages you send us.
• Usage and device data: IP address, browser/device identifiers, telemetry, log events.
• Payment metadata: plan, status, transaction references. Card details are collected and stored by our payment provider, not by us.

3. Why we use it (purposes & legal basis)

• Create and operate your account, deliver the service — contract performance.
• Security, fraud prevention, abuse detection — legitimate interests.
• Customer support — contract performance / legitimate interests.
• Product improvement and analytics — legitimate interests.
• Legal and tax compliance — legal obligation.
• Marketing emails — consent (you can opt out anytime).

4. Sharing

• Subprocessors: hosting, database, email delivery, error monitoring, analytics.
• Payment processor: Paystack handles payments, subscriptions, invoicing, and tax compliance for purchases.
• Professional advisers: legal, accounting, where strictly necessary.
• Authorities: where required by law.

5. Retention

We keep account and business data for the life of your account plus a reasonable period required to satisfy legal, tax, and audit obligations. After that, data is deleted or anonymised. You may request earlier deletion (subject to legal retention requirements).

6. Your rights

You have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. To exercise rights, email privacy@stratus.africa. You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

7. Security

We use industry-standard technical and organisational measures including encryption in transit, access controls, role-based permissions, and audit logging.

8. Cookies

We use essential cookies to keep you signed in and remember preferences. We may use analytics cookies to understand product usage. You can manage cookies through your browser settings.

9. International transfers

Some subprocessors may store or process data outside Kenya. Where that occurs we use appropriate safeguards (such as contractual protections and adequacy assessments).

10. Contact

Privacy questions: privacy@stratus.africa