2. Privacy Policy
We wrote this to be read. It follows the Personal Data Protection Act, 2022 of Tanzania.
2.1 Who does what. Daftari.live is operated by Daftari OS Technologies, a Wideangle Holdings Limited company (Wideangle Holdings Limited, registration number 205949305). We handle personal data in two different roles.
- For our clients and security: we decide how to use the information we hold about you as our client (the owner who signs up and pays, and the people the owner adds), our billing records, and our security and audit records. Here we are the data controller.
- For your operations: you decide what customer and booking information to record, and Daftari stores and processes it on your instructions. Here you are the data controller and Daftari is the processor. You control your business records, but the people those records describe keep their rights over their own personal information (section 2.11).
Our registration number with the Personal Data Protection Commission will be shown here once it is issued.
2.2 What we hold.
- About the owner and the people the client adds: name, phone number, role, sign-in details, sign-in times and devices, and the actions taken in the app.
- About the business: its name, address, services or rooms, prices, plan, status and dates.
- About payments to Daftari: amount, date, transaction ID, who paid, and any proof uploaded, such as a screenshot. Proof images can show phone numbers or names.
- About your customers, entered by you: what you choose to record, which may include name, phone, ID or passport details, nationality, dates of visit or stay, charges, payments and notes.
- Technical: basic logs needed to run and secure the service, such as time, page and error records.
We do not collect card numbers or mobile money PINs.
2.3 Why we use it. To run the service you asked for; to confirm payments and manage plans; to keep accounts secure and prevent fraud; to support you; to keep a record of money received and important actions (an audit log); and to meet legal duties.
2.4 What we do not do. We do not sell personal data. We do not use your customers' data for advertising. Daftari staff do not open your customer records unless you ask us to fix a problem, security requires it, or the law requires it.
2.5 Who sees it. Your people see your data, according to the roles you give them. Daftari staff see what they need for their job, and their actions are logged. We share data only with providers who help us run the service (such as hosting and backup), who must protect it; with a payment provider if you choose to pay through one; where a law, court or regulator requires it; or to protect people from serious harm or fraud.
2.6 Agents. If an agent introduced you to Daftari, the agent can see your business name and type, the date you signed up, whether your account is active, and the commission they earn from your payments. The agent cannot see your customer records.
2.7 Security. We protect data with access controls, sign-in PINs stored in protected (one-way hashed) form, regular backups, and logs of important actions. No system is perfectly safe. If we become aware of a security breach that affects your data, we will tell you without undue delay, and in any case within 72 hours, with what we know and what we are doing about it, so you can meet your own duties. Where the law requires us to tell the Commission, we will.
2.8 Where data is kept. Our servers are hosted by a third-party cloud provider in Frankfurt, Germany. This means your data is processed outside Tanzania. We transfer and protect it as the Personal Data Protection Act and the Commission's rules require. Your own devices and any copies you make are your responsibility.
2.9 For clients: your customers. Show your customers a short notice (section 5). Collect only what you need. You decide what customer details you ask for under your own rules and the law.
2.10 How long we keep it.
- Your business records (bookings, customers, services, receipts): kept while your account exists, including after a plan ends, so you can come back. If you ask us in writing to delete them, we delete them from the live system within 30 days (download a copy first if you want one). Backup copies replace themselves on a rolling cycle of up to 30 days, so deleted records leave the backups within that time.
- Payment records and the audit log of money and access changes: kept for five years from the date of the payment or action, for accounting, tax and dispute reasons.
- Payment-proof images: kept with the payment record. Once 12 months have passed since the payment was confirmed, you can ask us to delete a proof image, unless an open dispute needs it.
- Sign-in and technical logs: kept for up to 12 months.
2.11 Your rights. You may ask to see, correct or delete personal data we hold about you, to object to some uses, and to withdraw consent where consent is the basis. We reply within 14 days. If your information was recorded by one of our clients (for example as their customer), ask that client first; we will help them respond. You may complain to the Personal Data Protection Commission of Tanzania.
2.12 Cookies. The app uses only what it needs to keep you signed in. No advertising or tracking cookies.
2.13 Children. Daftari is for businesses and institutions. We do not knowingly collect data from children, except where a client records a child as part of a customer's visit or stay.
2.14 Changes. We will post changes here and tell clients in the app.
2.15 Contact. support@daftari.live · 0743 500 267 · Mwanga Towers, 3rd Floor, P.O. Box 33350, Dar es Salaam, Tanzania.
5. Short notices for you to use
Notice for your customers (for the desk, form or booking page). "[Business name] records your details in a booking system called Daftari, to manage your visit or stay, issue receipts and meet legal duties. We ask only for the details we need. We keep records for [period set by the business]. The system is hosted outside Tanzania, in Frankfurt, Germany. To see, correct or ask us to delete your information, ask at the desk or contact [business phone or email]."
Notice for your staff. "Your actions in Daftari are recorded with your name, to keep money and customer records safe."