Your Privacy Matters
We're committed to protecting your personal information and being transparent about how we use it.
Quick Summary
- •We collect minimal data needed to provide our services
- •KRA verification data is NOT stored on our servers
- •We use bank-level encryption for all data
- •We never sell your data to third parties
- •You can delete your account and data at any time
Contents
Information We Collect
Account Information
When you create an account, we collect your email address, phone number, and password (encrypted). This information is necessary to provide our services and communicate with you.
Payment Information
We use M-Pesa for payments. We store transaction IDs and payment confirmations but do not store your M-Pesa PIN or full phone number in association with payment details.
Service Usage Data
We log which services you use (e.g., PIN verification, TCC checks) to provide transaction history and maintain service quality. KRA data you query is NOT stored on our servers.
Technical Data
We automatically collect IP addresses, browser type, and device information for security purposes and to improve our services.
How We Use Your Information
Service Delivery
To process your verification requests, manage your account, and deliver the services you request.
Communication
To send you important updates about your account, transactions, and service changes. We may also send promotional content which you can opt out of.
Security & Fraud Prevention
To detect and prevent fraudulent activity, unauthorized access, and other security threats.
Service Improvement
To analyze usage patterns and improve our platform, features, and user experience.
Data Security
Encryption
All data transmitted to and from our servers is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
No KRA Data Storage
We do NOT store any KRA data returned from verification queries. This data is transmitted directly to you and not retained on our servers.
Access Controls
Access to user data is strictly limited to authorized personnel who need it to provide support or maintain our services.
Infrastructure
Our servers are hosted on secure, SOC 2 compliant infrastructure with regular security audits and updates.
Data Sharing
Third-Party Services
We share necessary data with GavaConnect (our KRA API provider) to process your verification requests. They are bound by their own privacy policies.
Payment Processors
Payment data is shared with Safaricom M-Pesa to process transactions. We do not share unnecessary personal information.
Legal Requirements
We may disclose information if required by law, court order, or government regulation, or to protect our rights and safety.
No Selling of Data
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
Your Rights
Access
You can access your account data through your dashboard at any time.
Correction
You can update your account information through your profile settings.
Deletion
You can request deletion of your account and associated data by contacting support@taxhubke.com.
Export
You can request a copy of your data in a portable format.
Questions About Privacy?
If you have any questions about this privacy policy or how we handle your data, please contact us.
privacy@taxhubke.com