LEGAL
Privacy Policy
Last updated: March 2026
1. Introduction
Imani AS ("Imani," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our escrow platform for freight transactions.
By using Imani, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Personal Information
- Name, email address, and phone number
- Business registration details and KRA PIN (for organizations)
- National ID or passport information (for KYC verification)
- Bank account or M-Pesa details (for payments)
- Physical address and location data
Transaction Information
- Job details (origin, destination, cargo description)
- Payment amounts and transaction history
- Contracts and digital signatures
- Dispute records and resolutions
Technical Information
- IP address and device information
- Browser type and version
- Login timestamps and session data
- Platform usage analytics
3. How We Use Your Information
We use the collected information for:
- Processing escrow transactions and payments
- Verifying your identity (KYC) and preventing fraud (AML)
- Generating digital contracts and maintaining records
- Communicating with you about your transactions
- Resolving disputes between parties
- Complying with legal and regulatory requirements
- Improving our platform and services
4. Information Sharing
We may share your information with:
- Other Platform Users: Parties involved in your transactions (freight forwarders, truck owners, consignees) will see relevant job and contact details.
- Banking Partners: Our licensed Kenyan bank partner for escrow operations and payment processing.
- Payment Providers: Safaricom (M-Pesa) for mobile money transactions.
- Regulatory Authorities: When required by law or to comply with anti-money laundering regulations.
- Service Providers: Cloud hosting, SMS services, and other technical providers under strict data protection agreements.
We do not sell your personal information to third parties.
5. Data Security
We implement industry-standard security measures:
- Encryption of data in transit (TLS) and at rest
- Secure password hashing (bcrypt)
- Two-factor authentication (SMS OTP)
- Regular security audits and penetration testing
- Access controls and audit logging
- PII masking in logs and monitoring systems
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 7 years to comply with financial regulations.
You may request deletion of your account, but we may retain certain information as required by law.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data (subject to legal requirements)
- Export your data in a portable format
- Withdraw consent for marketing communications
- Lodge a complaint with a data protection authority
To exercise these rights, contact us at privacy@imani.ke.
8. International Transfers
Your data may be processed in Kenya (our operations base) and by cloud service providers in other jurisdictions. We ensure appropriate safeguards are in place for all transfers.
9. Cookies and Tracking
We use essential cookies to maintain your login session and preferences. We do not use third-party advertising or tracking cookies.
10. Children's Privacy
Imani is not intended for users under 18 years of age. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Your continued use of Imani after changes constitutes acceptance of the updated policy.
12. Contact Us
For questions about this Privacy Policy or our data practices, contact: