Privacy Policy

Effective date: 10 September 2026

1. Who we are

Soko is operated by Soko Technologies Ltd ("Soko", "we", "us"), part of Origami Tech. This policy explains how we collect, use, and protect information when you use soko.origamitech.co.ke and the Soko application.

2. Information we collect

We collect information in three ways:

  • Account information you provide directly: name, email, phone number, organization name, and currency at sign-up.
  • Business data you enter or generate while using Soko: products, inventory, sales, customers, suppliers, employees, and financial records within your organization.
  • Usage data collected automatically, such as pages visited and general analytics events, via Google Analytics.

3. How we use your information

  • To provide, maintain, and secure the Soko application
  • To process billing through our payment processor, Paystack
  • To send account, billing, and support emails via our email provider, Resend
  • To respond to support requests sent to hello@soko.origamitech.co.ke or sales@soko.origamitech.co.ke
  • To understand product usage and improve the service

4. Data isolation and security

Each organization's data is isolated using row-level security, meaning one organization cannot access another's records. Data is encrypted in transit and at rest. Our infrastructure is hosted on Supabase.

5. Third parties we share data with

We share data only with the service providers needed to run Soko:

  • Supabase — database hosting and authentication
  • Paystack — subscription billing and payment processing. Payment data may be transferred, processed, and stored outside Kenya as described in Paystack's privacy policy.
  • Resend — transactional and account email
  • Google Analytics — aggregate, anonymized usage analytics

We do not sell your data to third parties.

6. Data retention and export

If you cancel your subscription, your organization's data remains accessible for 30 days so you can export it (Excel/CSV) before it is deleted from active systems.

7. Your rights

You can request access to, correction of, or deletion of your personal data by emailing hello@soko.origamitech.co.ke. Organization administrators can export or delete business data directly within the application.

9. Kenya data protection

For data-protection requests under Kenyan law, contact hello@soko.origamitech.co.ke. We process personal and organization data to provide Soko, as described above.

10. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email or an in-app notice.

11. Contact

Questions about this policy: hello@soko.origamitech.co.ke