Privacy Policy
Last updated 4 September 2026
PayoutFlow helps teams request, approve and send M-Pesa payments. This policy explains what information we hold, why we hold it, and the choices you have.
Information we collect
We collect the details you give us when you create an account: your name, email address, business or organisation name, and the phone numbers, till numbers and paybill numbers you save as payees. We also record the payments you initiate, approve or reject, the receipts and documents you upload, and basic technical information such as device type and sign-in times.
How we use your information
Your information is used to run the service: to move money through M-Pesa, to route payments to the right approver, to keep an accurate statement and audit trail for your account, to send transactional notifications such as team invitations and payment updates, and to keep the platform secure.
M-Pesa and payment processing
Payments are processed through Safaricom's M-Pesa Daraja service. To complete a payment we share the amount, recipient number and a short reference with Safaricom, and we store the confirmation details they return, including the M-Pesa receipt number and the registered name of the recipient. Safaricom handles that data under its own terms and privacy practices.
Sharing
We do not sell your information. It is visible to other members of your own account according to their role, and shared with the service providers that host our infrastructure, deliver our emails and process payments. We may disclose information where the law requires it.
Data retention
Payment records, statements and uploaded receipts are kept for as long as your account is active, and afterwards for as long as we are required to keep financial records. You can ask us to delete information that we are not legally required to retain.
Security
Access to your account data is controlled by role-based permissions and enforced at the database level. Payment credentials are stored encrypted and are never exposed in the app. No system is perfectly secure, so please use a strong password and keep your sign-in details private.
Your rights
You can access, correct or export your account information at any time from within the app, and you can ask us to delete your account. Team members can be removed by an administrator, which immediately revokes their access.
Changes and contact
We will update this policy as the service changes and will note the effective date above. For any question about privacy or your data, contact us at support@payoutflow.app.