Privacy Policy

1. Who We Are

Kweezi ("we," "our," or "us") is an AI-powered bookkeeping service that helps small businesses track expenses, manage invoices, and generate financial reports through WhatsApp and our web application.

Contact Information:

• Email: privacy@kweezi.com
• Website: https://kweezi.com
• WhatsApp: +357 97 440 114

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information from Third Parties

If you connect third-party services (like Zoho Books, bank accounts, or email), we receive data from those services as authorized by you.

3. How We Use Your Information

We use your information to:

• Provide Services: Process transactions, categorize expenses, generate reports, create invoices
• Improve AI: Train and improve our AI assistant to better understand your requests
• Communicate: Send service updates, respond to inquiries, provide support
• Security: Detect fraud, prevent abuse, protect your account
• Legal Compliance: Meet regulatory requirements and respond to legal requests

4. Third-Party Services

We use trusted third-party services to operate Kweezi:

5. Data Sharing

We do not sell your personal data. We only share data in these limited circumstances:

• Service Providers: With trusted partners who help operate our service (listed above)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing (e.g., with your accountant)
• Safety: To protect the rights, safety, and property of Kweezi and our users

6. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted using TLS/SSL encryption (HTTPS)
• Storage: Data stored on secure, encrypted cloud servers
• Access Control: Strict access controls and authentication
• Monitoring: Continuous security monitoring and logging
• Backups: Regular encrypted backups for disaster recovery

7. International Data Transfers

Your data may be processed in countries outside your residence, including the United States and European Union. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all service providers
• Compliance with applicable data protection laws

8. Data Retention

We retain your data for as long as your account is active. Specific retention periods:

• Account Data: Until you delete your account
• Transaction Data: 7 years (for tax and legal compliance)
• Communication Logs: 2 years
• Usage Analytics: 1 year (anonymized after)

When you delete your account, we remove all personal data within 30 days, except where legally required to retain it.

9. Your Privacy Rights

9.1 Rights for All Users

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Delete your account and all associated data
• Export: Download your data in a portable format (JSON)
• Opt-out: Unsubscribe from marketing communications

9.2 European Users (GDPR)

If you're in the EU/EEA/UK, you have additional rights under GDPR:

• Restriction: Request we limit processing of your data
• Objection: Object to processing based on legitimate interests
• Portability: Receive your data in a machine-readable format
• Withdraw Consent: Withdraw consent at any time
• Lodge Complaint: File a complaint with your local data protection authority

Legal Basis for Processing: We process your data based on: (a) contract performance, (b) legitimate interests, (c) legal obligations, and (d) your consent where required.

9.3 California Users (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-out: Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination: Equal service regardless of privacy choices
• Correct: Request correction of inaccurate personal information
• Limit: Limit use of sensitive personal information

To exercise your California privacy rights, email privacy@kweezi.com or call our WhatsApp line.

10. Cookies and Tracking

We use minimal cookies essential for service operation:

• Session Cookies: Keep you logged in during your session
• Preference Cookies: Remember your settings and preferences
• Security Cookies: Protect against fraud and unauthorized access

We do not use advertising cookies, tracking pixels, or third-party analytics that track you across websites.

11. Children's Privacy

Kweezi is a business service not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12. App Permissions

Our mobile and web applications may request the following permissions:

You can manage these permissions in your device settings at any time.

13. AI and Automated Decision-Making

Kweezi uses artificial intelligence to:

• Categorize transactions automatically
• Extract data from receipts and documents
• Generate financial reports and summaries
• Provide personalized bookkeeping assistance

You can always review, correct, or override any AI-generated categorizations or decisions. Our AI does not make fully automated decisions that significantly affect you without human review.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page with an updated date
• Sending a notification via WhatsApp or email
• Displaying a notice in our application

We encourage you to review this policy periodically.

15. Contact Us

For privacy-related questions, concerns, or to exercise your rights:

• Email: privacy@kweezi.com
• WhatsApp: +357 97 440 114
• Website: kweezi.com/contact

We aim to respond to all privacy requests within 30 days.