1. Who this policy covers
Market Spark provides point-of-sale and business record tools for independent shops, agrovets and other local businesses. This policy applies to account holders and people invited to work in a business workspace.
Your business decides why it records information about its customers, suppliers and staff. Your business is responsible for explaining that use to them and for entering information lawfully. Market Spark processes those records to provide the workspace and its features.
2. Information we handle
- Account and business setup: your name, email address, phone number, business name and type, country, currency and language preferences.
- Business records: the products, stock, sales, purchases, expenses, customer and supplier details, staff details and credit entries you choose to keep.
- Account security: authentication and password-reset information, staff profiles and permission settings entered by a business owner, and technical request details needed to operate and protect the service. Hosting systems may record details such as IP address, browser and request time for security and troubleshooting.
- Offline work: supported records and changes may be kept in your browser while they wait to sync with the server.
- AI Adviser: if you use it, your prompts and conversation, together with relevant business summaries such as sales totals and product stock, are used to prepare an answer.
3. How we use information
We use information to create and secure accounts, show the records for the right workspace, support sales and stock workflows, sync queued offline changes, deliver password-reset emails, answer support requests, and maintain the service. We do not sell your personal information or use your customers’ contact details to market to them.
4. When information is shared
We share information only as needed to operate the service: with infrastructure and database providers that host it, and email providers that deliver password-reset messages. Staff profiles do not currently send invitation emails or create login accounts. If the AI Adviser is enabled, prompts, conversation history and relevant business summaries are sent to the OpenAI API to generate its response. The AI provider may process information using infrastructure outside Kenya; we will use appropriate safeguards required by applicable data-protection law.
We may disclose information when a valid legal requirement applies or when necessary to protect the service and its users. We do not share information for advertising.
5. Security and access
Passwords are stored as salted, one-way password verifiers protected with a server-only secret; we do not store your plain-text password. Workspace access is authenticated, and staff permissions limit which business records a staff role can use. Use the secure HTTPS address when accessing Market Spark. No online service or device can be guaranteed completely secure, so protect your password and sign out on shared devices.
6. Browser storage
Market Spark uses essential browser storage for sign-in, preferences, offline records and changes waiting to sync. The app may also use a necessary security cookie to protect requests. We do not use advertising cookies. Offline records remain on the device until they sync or local browser data is cleared. To protect your business on shared devices, signing out clears the app’s local business cache. Check that pending changes have synced before you sign out or clear browser data.
7. How long we keep information
We keep account and business information while the workspace is active. An account holder can permanently delete their account from Settings after confirming their password. This removes the account, its owner workspace and that workspace’s records from the active service. If the account also has staff access to another business, that access is removed and the staff entry is anonymised; the other business remains under its owner’s control. Information may be retained where the law requires it. Clearing browser data does not delete records already synced to the server.
8. Your choices and data rights
You can export available CSV reports and download a business-data backup from Settings. You can delete your account permanently from Settings after entering your password and confirming the action. You can also ask us to explain how we use your account information, provide access to it, correct inaccurate details, or consider an objection under applicable law. For information you entered about a business’s customers or suppliers, contact that business first; we will assist it where appropriate. You may also raise a complaint with the Office of the Data Protection Commissioner of Kenya. These rights are set out in Kenya’s Data Protection Act, 2019.
9. Changes and contact
We may update this policy as Market Spark changes. We will update the date above and give account holders notice of material changes where appropriate. For privacy requests, email tonnyblank700@gmail.com or WhatsApp +254 793 900 080.