Privacy Policy
Effective Date: 1 January 2025
1. Introduction
Mtaji Technologies Limited ("Mtaji", "we", "our", or "us") is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Ankara Platform ("Platform") and our related services.
2. Information We Collect
We collect information that you provide directly to us, including:
- Account Information: Name, email address, phone number, organisation name, role/title
- Business Information: Company registration details, financial statements, trade references, banking details for payment processing
- Transaction Data: Purchase orders, invoices, payment records, delivery confirmations
- Usage Data: Log data, device information, IP addresses, browser type, pages visited
- Communication Data: Messages, enquiries, and correspondence with our team
3. How We Use Your Information
We use the collected information to:
- Operate and maintain the Ankara Platform
- Process transactions and facilitate supply chain financing
- Generate M-Score credit assessments using proprietary algorithms
- Match financing requests with appropriate financial institutions
- Communicate with you about services, updates, and support
- Comply with legal obligations and regulatory requirements
- Improve our services through analytics and research
4. M-Score Credit Assessment
Our proprietary M-Score algorithm analyses transaction data, relationship quality, and business fundamentals to generate credit assessments. This process involves automated decision-making. You have the right to request human review of any automated credit decision that affects your access to financing.
5. Data Sharing
We share your information only in the following circumstances:
- Financial Institutions: Approved data shared with partner banks and NBFIs for financing decisions
- Corporate Anchors: Transaction data shared as necessary to facilitate supply chain operations
- Service Providers: Third-party providers who assist in operating the Platform (hosting, analytics, communications)
- Legal Requirements: When required by law, regulation, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, regular security audits, and secure data centres. However, no method of transmission over the internet is 100% secure.
7. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records are retained for a minimum of seven years in accordance with Kenyan financial regulations. You may request deletion of your account data, subject to legal retention requirements.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access and receive a copy of your personal data
- Rectify inaccurate or incomplete data
- Request deletion of your data (subject to legal obligations)
- Object to or restrict processing of your data
- Data portability — receive your data in a structured format
- Withdraw consent where processing is based on consent
9. International Data Transfers
Your data may be processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy assessments, to protect your data during international transfers.
10. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of the Platform after changes constitutes acceptance of the revised policy.