Privacy Policy

BarakaFlow respects the privacy of the people and businesses that use our website, applications, and related services (the “Service”). This Privacy Policy explains what information we collect, why we use it, when it may be shared, how long it may be kept, and the choices available to you.

BarakaFlow is designed for business use. A business using BarakaFlow may also enter personal information about its customers, suppliers, employees, or other contacts. In that context, the business decides why the information is used, and BarakaFlow processes it to provide the Service, subject to applicable law and our agreement with the business.

Account and business information. We may collect names, email addresses, phone numbers, authentication details, language preferences, business name, branch information, subscription details, billing status, and communications with support.

Customer business data. Users may submit products, inventory records, sales, orders, payments, expenses, suppliers, customers, purchase orders, staff details, reports, documents, and related operational information.

Technical and usage data. We may receive IP address, browser and device type, operating system, timestamps, requested pages, feature interactions, error and performance information, cookie identifiers, and security events. We collect only information reasonably relevant to operating, securing, supporting, and improving the Service.

We use information to:

• create and administer accounts, subscriptions, users, and branches;
• provide inventory, sales, purchasing, customer, supplier, reporting, and related features;
• authenticate users, prevent abuse, investigate incidents, and protect the Service;
• respond to support requests and communicate service or account information;
• monitor performance, understand feature use, diagnose errors, and improve BarakaFlow;
• process payments and maintain business and compliance records;
• meet legal obligations and enforce our Terms of Service.

Where applicable law requires a particular legal basis, that basis may include performing our contract, complying with law, protecting legitimate interests that do not override individual rights, or obtaining consent.

Customers retain ownership of their business data. BarakaFlow does not sell or claim ownership of the products, inventory, sales, suppliers, customers, orders, or other operational data a business submits.

We limit access to people and service providers who need it to operate, secure, maintain, or support the Service, or to follow the customer’s authorized instruction. Our personnel are expected to handle information confidentially and only for approved purposes.

Businesses remain responsible for deciding what information to enter, keeping it accurate, managing their users, and having an appropriate legal basis for personal information about their own customers, suppliers, and staff.

BarakaFlow does not sell personal information or Customer Data. We may share limited information with:

• hosting, storage, database, security, communications, analytics, support, and infrastructure providers needed to operate BarakaFlow;
• payment providers and financial partners involved in processing or confirming transactions;
• professional advisers under appropriate confidentiality obligations;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or security incidents, or respond to valid legal process;
• a successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice requirements.

Providers receive only the information reasonably necessary for their role and are expected to protect it under contract or applicable law.

BarakaFlow may use cookies and similar browser storage to keep users signed in, remember preferences such as language or branch, protect sessions, and understand whether the website and Service are working correctly.

We may use privacy-conscious analytics to understand aggregate traffic and feature usage. Where required, we will request consent before using optional analytics or similar technologies. Browser settings can block or remove cookies, but essential account and security features may then stop working correctly.

We use technical and organizational measures appropriate to the nature of the Service. These may include access controls, role and branch permissions, authentication controls, encryption in transit and where applicable at rest, backups, logging, service monitoring, provider reviews, and incident-response procedures.

No internet service can guarantee absolute security. Users also play an important role by protecting credentials, limiting staff access, maintaining secure devices, and reporting suspicious activity promptly to support@barakaflow.com.

Subject to applicable law and appropriate identity verification, you may request:

• information about how we process your personal information and a copy of information we hold about you;
• correction of inaccurate or incomplete personal information;
• restriction of or objection to certain processing;
• deletion of personal information when applicable;
• withdrawal of consent where processing is based on consent.

Some requests may be limited when information must be retained for legal obligations, security, dispute resolution, another person’s rights, or other grounds recognized by law. If information was entered by a business customer, we may direct the request to that business or assist it in responding.

Send requests to support@barakaflow.com. You may also have the right to contact Rwanda’s Data Protection and Privacy Office or another competent supervisory authority.

We keep account and Customer Data while an account is active and for a reasonable period afterward when needed for restoration, support, security, legal compliance, billing records, dispute resolution, or enforcement.

Retention periods depend on the type of information, why it was collected, contractual commitments, backup cycles, and legal obligations. When information is no longer reasonably needed, we delete it or de-identify it using appropriate processes. Residual copies may remain temporarily in protected backups until normal deletion cycles complete.

Businesses should export information they must retain before closing an account where export tools are available.

BarakaFlow relies on providers for functions such as cloud hosting, databases, storage, security monitoring, email delivery, payment processing, support, and analytics. Their handling of information is governed by their agreements with us and applicable law.

Some providers may process information in another country. Where required, we use appropriate contractual, organizational, or legal safeguards for cross-border processing. Links to third-party websites or services are governed by those parties’ own privacy practices.

BarakaFlow is a business service intended for organizations and adult users. It is not directed to children, and children should not create accounts or submit personal information.

If you believe a child has provided personal information directly to BarakaFlow without appropriate authorization, contact us so we can investigate and take appropriate action.

We may update this Privacy Policy as the Service, providers, security practices, or legal requirements change. We will update the effective date at the top of this page.

When a change materially affects how we use personal information, we will provide reasonable notice through the Service, email, or another appropriate channel before the change takes effect where required.

For privacy questions, requests, or concerns, contact support@barakaflow.com.

Before public launch, BarakaFlow should add the registered legal entity name, physical or registered address, and a dedicated privacy or data-protection contact if required.