Privacy Policy

Intubase (operated under parent holding Roam Systems) is committed to protecting your privacy in compliance with the Kenya Data Protection Act 2019 (ODPC).

1. Information We Collect

We collect merchant business details, KRA PIN numbers, M-Pesa phone numbers, and transaction ledgers strictly for providing payment reconciliation and eTIMS tax invoicing services.

2. Data Retention & Encryption

All merchant credentials and API passkeys are encrypted using AES-256 in GCP Secret Manager. Transaction audit logs are preserved for 24 months as mandated by ODPC regulations.