1. Introduction

Welcome to RankSavanna ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and its services, including:

SEO Intelligence Suite — website auditing, crawl analysis, and technical SEO tools
Enterprise POS Suite — retail terminal, inventory management, and sales processing
ERP Suite — financial management, human capital management, CRM, and inventory operations

By using any of these services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you provide directly to us and information generated through your use of our services.

2.1 Account Information

Name, email address, and password when you register
Organization name and role when you create or join an ERP tenant
Staff profiles created by organization administrators

2.2 Service-Specific Data

SEO Suite: URLs you submit for analysis, crawl results, and generated audit reports
POS Suite: Product catalogs, sales transactions, customer records, inventory levels, employee shift data, and financial ledger entries
ERP Suite: General ledger data, accounts receivable/payable, employee records, payroll information, tax filings, CRM contacts and leads, and stock movement data

2.3 Payment Information

M-Pesa phone numbers and transaction references
PayPal account identifiers
Binance Pay wallet references

We do not store full payment credentials. All payment processing is handled by third-party providers (Safaricom M-Pesa, PayPal, Binance) under their respective privacy policies.

2.4 Technical Data

IP addresses, browser type, and device information
Usage data, page interactions, and session timestamps
Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

Provide, operate, and maintain our SEO, POS, and ERP services
Process transactions and send related payment confirmations
Generate audit reports, analytics dashboards, and business intelligence
Manage multi-tenant data isolation for ERP organizations
Facilitate staff access through role-based access control (RBAC)
Send service notifications, security alerts, and system updates
Provide customer support via live chat and email
Improve and optimize platform performance and user experience
Detect, prevent, and address technical issues or security threats

4. Multi-Tenant Data Isolation

Our ERP and POS services operate on a strict multi-tenant architecture. Each organization's data is logically isolated using tenant-scoped queries. This means:

Your organization's financial, employee, and operational data is never accessible to other tenants
Staff members can only access data within their assigned organization and role
Organization administrators control user access, permissions, and data visibility

5. Offline Data & Local Storage

Our POS terminal supports offline-first operation. When operating offline:

Sales transactions, inventory changes, and customer records are temporarily stored on your device using browser local storage
Data is automatically synced to our cloud servers when connectivity is restored
We recommend securing devices with screen locks and access restrictions, as locally stored data is subject to your device's security measures

6. Newsletter & Communications

If you opt-in during registration or via your profile settings, we may use your email address to send you newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

7. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share data with:

Payment processors: Safaricom (M-Pesa), PayPal, and Binance to process transactions
Hosting providers: Cloud infrastructure providers for data storage and delivery
Law enforcement: When required to comply with legal obligations or protect our rights

8. Data Security

We implement industry-standard security measures to protect your data:

All data in transit is encrypted using TLS/HTTPS
Passwords are hashed using bcrypt with per-user salts
API access is protected by token authentication and rate limiting
Administrative actions are logged in an immutable activity log
CSRF protection is enforced on all state-changing operations

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting our support team. Upon deletion:

Account credentials and profile data are permanently removed
SEO crawl results and audit data are purged
ERP organization data is retained only if other organization members remain active
Aggregated, anonymized analytics data may be retained for service improvement

10. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, update, or correct your personal information via your profile settings
Request a copy of the data we hold about you
Request deletion of your account and associated data
Withdraw consent for marketing communications at any time
Lodge a complaint with a relevant data protection authority

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "last updated" date. We encourage you to review this page periodically for any changes.

Privacy Policy