Privacy Policy

We collect information you provide directly when you create an account, set up your garage profile, add team members, customers, vehicles, or transactions to the platform. This includes:

• Account information: name, email address, phone number, and password
• Garage information: business name, location, registration details, and branding assets
• Operational data: job cards, invoices, inventory records, customer records, vehicle records, and financial transactions you create within the platform
• Team data: employee profiles, roles, and attendance records you add to the platform
• Usage data: how you interact with the platform, features you use, and error logs
• Payment information: subscription billing details processed through our secure payment processor

We also collect data automatically when you use the platform, including IP addresses, device type, browser information, and session data for security and performance purposes.

We use the information we collect to:

• Provide, operate, and improve the Mech Connect platform
• Process your subscription and billing
• Send transactional emails and notifications about your account and platform updates
• Respond to your support requests and enquiries
• Enforce our Terms of Service and maintain platform security
• Comply with legal obligations applicable in our operating jurisdictions
• Generate aggregated, anonymized analytics to improve the platform (this data does not identify individual users or businesses)

We do not sell your personal information or your business data to third parties. We do not use your operational data (customer records, job cards, financial data) for any purpose other than delivering the service to you.

Your data is stored on enterprise-grade cloud infrastructure with:

• Encryption in transit using TLS 1.2 or higher for all data sent between your browser and our servers
• Encryption at rest for all database storage
• Automated backups with point-in-time recovery capability
• Access controls limiting which team members can access production systems
• Regular security audits and vulnerability assessments

No data transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. If you discover a security vulnerability, please report it immediately to info@mechconnect.africa.

We share your information only in the following limited circumstances:

• Service providers: We use third-party services to deliver the platform, including cloud hosting, SMS/WhatsApp delivery, email delivery, and payment processing. These providers have access only to the data necessary to perform their specific function and are contractually bound to protect it.
• Legal requirements: We may disclose information if required by law, court order, or government authority in any jurisdiction where we operate.
• Business transfers: If Mech Connect is acquired or merged with another company, your data may be transferred as part of the transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• With your consent: In any other circumstances, we will ask for your explicit consent before sharing your information.

We will never sell your data, rent your customer lists, or share your operational data with competitors.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of processing
• Withdrawal of consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@mechconnect.africa. We will respond within 30 days.

You can export your operational data (customers, vehicles, invoices, inventory) at any time from within the platform.

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Measure platform performance and identify errors
• Prevent fraud and protect platform security

We do not use tracking cookies for advertising purposes. We do not sell or share cookie data with advertising networks.

You can control cookie settings through your browser. Disabling certain cookies may affect platform functionality.

When you add customer records, vehicle history, job cards, and financial data to Mech Connect, you are the data controller for that information. We process it on your behalf as a data processor.

You are responsible for: - Having a lawful basis for collecting and storing your customers' personal data - Ensuring your customers are aware their information is stored in your management system - Complying with applicable data protection laws in your jurisdiction (e.g., Kenya Data Protection Act 2019, GDPR if serving EU customers)

We will process your customers' data only in accordance with your instructions (i.e., to deliver the platform functionality you use) and will not use it for our own purposes.

We retain your account data for as long as your account is active. After account closure:

• Operational data (job cards, invoices, inventory) is retained for 12 months after account closure to allow data export and comply with financial record-keeping requirements
• After 12 months, your data is permanently deleted unless legal retention requirements apply
• Anonymized, aggregated analytics data may be retained indefinitely

You can request earlier deletion of your data by contacting us at info@mechconnect.africa.

Mech Connect is based in Kenya and primarily serves businesses in Africa. Your data may be processed in countries where our cloud infrastructure partners operate, which may include countries outside Africa. When such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and display a notice within the platform. The date at the top of this policy indicates when it was last updated. Your continued use of the platform after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: info@mechconnect.africa Phone: +254 717 380 168 Website: https://mechconnect.africa

Mech Connect Nairobi, Kenya