Privacy Policy

Who we are

Bonyeza is a platform that lets Tanzanian businesses share a digital storefront their customers reach by scanning a QR code. Orders are sent to the business over WhatsApp. In this policy, "we" means Bonyeza. This notice covers both sides of the storefront: the people who order through it, and the businesses that run it.

Data we process about customers

When you place an order or leave a review, the business you are ordering from collects:

• Your name (if you provide it)
• Your phone number
• Your delivery address (only for delivery orders that include one)
• The items you order, selected options, and any notes you add
• Your order type (dine-in, pickup, delivery, or booking)
• Your review rating and comment (if you leave one)
• If a business runs loyalty or polling features, the points balance or poll choices linked to your phone number

These details are stored by Bonyeza so the business can view, manage, print, and act on their orders — including sending you status updates on WhatsApp. They are not sold, shared with other businesses, or used for advertising. Your payment method captures only what you enter into the WhatsApp message or the stated pay-to number; Bonyeza does not process card or mobile-money payments itself.

Data we process about businesses

• Your business name, contact details, and WhatsApp number
• Your login email, which we use to send sign-in codes and account-related messages
• Menu, listings, prices, and settings you publish on the storefront
• Order, review, and analytics data generated by your storefront
• Optional push-notification subscriptions for new-order alerts on your device

How it is used

The business uses the customer data it collects solely to fulfil orders, reply on WhatsApp, and (for reviews and loyalty) operate its storefront features. Bonyeza stores that data on behalf of the business in a standard database. We use order and page-view data to show the business its analytics dashboard and to improve the platform — always in aggregate or for the business's own storefront.

Why we are allowed to process it

Order, booking and account data is processed because it is needed to provide the service you asked for — taking and fulfilling an order, or running a storefront. Analytics is processed on the basis of legitimate interest: we need to understand how the platform is used in order to keep it running, fix problems, and show each business its own dashboard. That interest is balanced against your privacy — analytics never profiles you, never links your browsing to your orders, is deleted automatically after 12 months, and you can object at any time (see Your rights below), after which we stop collecting it for you. Push-notification subscriptions are only ever created when you explicitly opt in on your device.

Storage, who we share with, and retention

Data is stored by our database and hosting providers and served through a global edge network. We use the following providers to run the platform, and each receives only the data needed for its function:

• Supabase — database, authentication, and file storage for your listings
• Our website-analytics provider — cookieless, aggregate visit statistics that do not identify you personally
• Resend — delivery of sign-in and account emails
• WhatsApp (Meta) — messages you or your customers send through WhatsApp are governed by WhatsApp's own privacy policy

Customer and business data is kept for as long as your storefront is active. After you cancel, your menu, orders, and settings are preserved for 60 days and then deleted or anonymised from our systems. Analytics records (page views and usage events) are deleted automatically after 12 months by a scheduled job. We delete or anonymise data when it is no longer needed for the purposes described above.

Cookies and local storage

We show a privacy notice on the website and store small amounts of data in your browser — for example your theme preference, cart contents, an order token that lets you re-order, a country code used for aggregate visit statistics, and a marker so a review prompt or poll is shown once. Cart and preference storage is strictly necessary for the storefront to work and needs no permission. This data stays on your device. Website visit statistics are collected without cookies and do not identify you personally.

Your rights

Under the Tanzania Data Protection Act, 2022, you may request access to, correction of, or deletion of your personal data held by Bonyeza or a business using our platform. Because our analytics runs on legitimate interest, you additionally have the right to object to it: tell us or the business and we will stop collecting analytics for you. Customer order data belongs to the business you ordered from, so contact the business directly first; you can also reach Bonyeza at privacy@bonyeza.app and we will help locate or remove it. We respond to requests within 30 days.

Contact

Questions about this policy can be sent to privacy@bonyeza.app. Our terms of service are at /terms.