SAISA Business Privacy Policy
Policy version: 6 September 2026. Operator: SAISA. Contact: saisabusiness.app@gmail.com.
This policy covers SAISA Business on the web and Android, including its use of the shared SAISA account for sign-in. SAISA Business helps businesses keep records. Its recorded money balances are not live bank-confirmed balances, and recording a payment does not itself move money.
Information processed
- Account details such as name, email, user ID, authentication information and your business memberships. Shared SAISA Accounts handles sign-in.
- Information you or authorized business members enter: products, quantities, expiry dates, sales, invoices, purchases, expenses, customer and supplier details, debts, money-account records, staff details, compensation and business activity.
- Optional files you choose to upload, such as product photos, expense receipts and inventory spreadsheets. These may contain personal or financial information. Upload only information you have permission to use.
- Technical request and security information processed by our hosting and authentication services, such as IP addresses, browser information, timestamps and error logs; and support correspondence you send.
Why we use it
To authenticate users, apply business permissions, store and calculate business records, generate reports, send requested staff invitations and account messages, provide support, and maintain security and reliability. Essential session cookies keep you signed in; a language preference remembers English or Somali.
Who can access it
Your business’s authorized members can access records according to their roles. Be careful when inviting staff or exporting and sharing reports. SAISA’s authorized operators may process data to provide support, operate the service and investigate security issues.
Infrastructure providers process data to supply the service: Supabase for database, authentication and file storage; Vercel for website hosting; and Resend where configured for invitation emails. These services may process data in countries other than yours. Android opens the service using a compatible browser; that browser also has its own privacy settings and policy.
Security and storage
The production service uses HTTPS. Access controls separate business records and limit staff permissions. No system can guarantee absolute security. Do not enter bank passwords, mobile-money PINs or full card credentials into business-record fields. Downloaded reports and files are under your control after export.
Retention and deletion
Records are kept while needed to provide your account and business workspace. You can request deletion of your account and associated personal data through the link below. We verify requests and explain shared business ownership and shared SAISA account effects before completing deletion. If particular data must be retained for legitimate legal, fraud-prevention or security reasons, we explain the reason and applicable retention period. Routine backups and infrastructure logs may follow the providers’ retention schedules; support can explain the applicable schedule when handling your request.
Request account and data deletion
Your choices
You can choose not to upload optional photos or files, control who joins your business, and use available record-editing and export tools. Contact us to request access, correction or deletion of your personal information. This service is intended for business users and is not directed at children.
Changes
We update this policy when the service or our practices change, and update the version date. Contact us if you need an explanation or assistance.