Privacy Policy - Mara by SDVEN

1. Introduction

Mara by SDVEN ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Mara by SDVEN, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

Account Information: Name, email address, phone number, date of birth, username, and password
Security Information: Two-factor authentication (2FA) device registrations and backup codes
Student Information: School enrollment details, admission number, grade level, parent/guardian contact information
School Information: School name, registration number, address, county/town, contact details, logo
Payment Information: Bank account details, M-Pesa number (processed securely through Paystack)
Product Information: Product titles, descriptions, images, prices, and categories
Order Information: Shipping addresses, delivery preferences, order history

2.2 Automatically Collected Information

When you use our platform, we automatically collect:

Device information (IP address, browser type, operating system)
Usage data (pages visited, time spent, features used)
Cookies and similar tracking technologies
Transaction logs and payment references

2.3 Information from Third Parties

We receive payment transaction data from Paystack, our payment processor, including:

Payment status and confirmation
Transaction references
Payment method details (without full card numbers)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Platform Operations

Create and manage user accounts
Process transactions and facilitate payments
Calculate and distribute commission earnings (75.00% students, 15.00% schools, 10.00% platform)
Deliver digital products and coordinate physical deliveries
Generate monthly payout reports

3.2 Communication

Send order confirmations and delivery updates
Notify about account activities and payout schedules
Respond to customer support inquiries
Send important platform updates and policy changes

3.3 Security and Compliance

Prevent fraud and unauthorized transactions
Verify school registrations and student enrollments
Authenticate users through two-factor authentication (2FA)
Enforce our Terms of Service
Comply with legal obligations

3.4 Platform Improvement

Analyze usage patterns to improve features
Personalize user experience
Develop new services and functionality

4. Information Sharing and Disclosure

4.1 Within the Platform

Certain information is visible to facilitate marketplace operations:

Students: Name, school affiliation, and products are visible to customers
Schools: Name, location, logo, and student count are publicly displayed
Customers: Order information is shared with student sellers to fulfill orders

4.2 Service Providers

We share information with trusted third parties who assist our operations:

Paystack: Payment processing (credit card, M-Pesa transactions)
Hosting Providers: Data storage and platform infrastructure
Email Services: Transactional and notification emails

4.3 Legal Requirements

We may disclose information when required by law or to:

Comply with legal processes (subpoenas, court orders)
Enforce our Terms of Service
Protect the rights and safety of users
Prevent fraud or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity. We will notify users of any such change.

5. Data Security

We implement appropriate security measures to protect your information:

Encrypted data transmission (HTTPS/SSL)
Secure password hashing
Two-factor authentication (2FA) required for school administrators, optional for other users
Regular security audits and updates
Limited access to personal data by authorized personnel only
Payment data handled by PCI-compliant Paystack

While we strive to protect your data, no internet transmission is 100% secure. You are responsible for keeping your login credentials and 2FA devices confidential.

6. Data Retention

We retain your information for as long as necessary to:

Provide platform services
Comply with legal obligations (tax records, transaction history)
Resolve disputes and enforce agreements
Maintain financial records for payout accuracy

Transaction data is retained for a minimum of 7 years as required by Kenyan financial regulations. Account data is retained until you request deletion, subject to legal retention requirements.

7. Your Rights and Choices

7.1 Access and Correction

You can access and update your account information through your profile settings. Contact us at support@sdven.com to request corrections to other data.

7.2 Data Deletion

You may request account deletion by contacting us. Note that:

Transaction records will be retained for legal compliance
Public product listings and reviews may remain visible
Pending payouts must be processed before deletion

7.3 Communication Preferences

You can opt out of promotional emails but will continue to receive transactional messages (order confirmations, payout notifications).

7.4 Cookies

You can control cookies through your browser settings. Disabling cookies may limit platform functionality.

8. Children's Privacy

Our platform serves students under 18 years old with parental/school consent. We collect minimal necessary information from minors. Parents/guardians and school administrators have oversight of student accounts and can request data access or deletion.

Schools are responsible for obtaining appropriate parental consent before enrolling students on the platform.

9. International Data Transfers

Your information is primarily stored and processed in Kenya. If data is transferred internationally (e.g., cloud hosting providers), we ensure adequate safeguards are in place to protect your information in accordance with this policy.

10. Third-Party Links

Our platform may contain links to external websites (e.g., student portfolios, school websites). We are not responsible for the privacy practices of these third parties. Review their policies before sharing information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email or platform notification. The "Last updated" date at the top indicates the most recent revision.

12. Contact Us

For questions, concerns, or requests regarding your privacy or this policy, contact us at:

Email: support@sdven.com
Phone: +254 715 598 801
Address: Nairobi, Kenya

We will respond to privacy inquiries within 14 business days.