Privacy policy

The data behind every Soko account is small and intentional:

• Your account — email, name, phone number, role, password hash (managed by Supabase Auth).
• Your tenant — business name, subdomain handle, owner reference.
• Your subscription — plan, status, billing history.
• Payment metadata — Marzpay transaction IDs, method, amount, status. We never see card numbers or mobile-money PINs.

We don't process card numbers, CVVs, or mobile-money PINs. Payments go through Marzpay's hosted gateway (cards) or STK push (MoMo) — those credentials never touch our servers.

For sellers we store shop details (handle, name, bio, location), product catalogue data, and any storefront customisations.

Buyer carts are stored in the buyer's own browser, not on our servers. When a buyer taps Order on WhatsApp we log the click — which shop, which item — so you can see whether your store is converting. The conversation itself happens in WhatsApp, outside our systems, and we do not read it.

We use what we collect to operate the platform: serve your store, prevent abuse, and provide support. Aggregated, non-personal metrics inform product decisions.

We do not sell your personal information. We do not share it with advertisers. The third parties we use are limited to what they need to run their service.

We use only the cookies required to keep you signed in and to remember your preferences. We do not run third-party advertising or analytics trackers that follow you across the web.

We use a small set of infrastructure providers:

• Supabase — auth, database, file storage.
• Marzpay — payment processing for plan upgrades.
• Vercel — hosting and CDN for the Soko applications.

None of these resells your data. Each is contractually a processor acting on our behalf.

You can export, edit, or delete your data from Account. Deleting your account cascades and removes everything we hold in a single transaction — the storefront and its listings included. We retain transactional metadata (order timestamps) for legitimate business purposes.

You can also request a copy, correction, or deletion at any time by messaging support at +256 778 087 986 on WhatsApp.

We keep data for as long as the account it belongs to is in use. Two situations end that automatically.

A shop whose subscription has lapsed. When a subscription payment is not made the storefront is paused and the data is held for 30 days. If the subscription is not resumed within that period, the shop's contents are permanently deleted: products and their photographs, storefront pages, discount codes, order history, customer records, wishlists and storefront visit statistics. The account itself, the business name and web address, and subscription and payment records are retained. The account holder is emailed on the day the shop is paused, on each day it remains paused, and once deletion has taken place; every message states the date. Where no notice can be delivered, deletion does not proceed automatically. This is set out in full in section 9 of the Terms of service.

Buyer data held by a seller. An order record contains the name and WhatsApp number a buyer gave to that seller. It is deleted on the same schedule as the rest of the shop's contents, so buyer details are not retained indefinitely inside an account that is no longer in use. Buyers may also ask us directly to remove their details from a seller's records using the contact below.

Products hidden by a plan change. A seller who moves to a plan with a smaller catalogue keeps their newest listings; the excess are hidden rather than removed, and are deleted after 30 days if the plan is not changed back. The seller is notified while they are hidden.

We update this policy as our data practices evolve. Material changes are announced via email to active accounts. Continued use after a change goes live constitutes acceptance of the revised policy.

Privacy questions or data requests? Reach us at +256 778 087 986 on WhatsApp.