Privacy policy

This privacy policy explains how Soko Sensei ("we", "us", or "the platform") collects, uses, and protects information when a business uses our platform to run its store, and when that business's customers shop or book appointments through a storefront powered by us. By using Soko Sensei, you agree to the practices described here.

Who we are

Soko Sensei is a multi-store commerce and appointment-booking platform operated by Harold Kerry. If you have any questions about this policy or your data, contact us at volchaenterprises@gmail.com.

Information we collect

We collect information needed to operate stores and process orders and bookings:

• Account information — names, email addresses, and login details for business owners and staff who use the admin panel.
• Store and catalogue data — products, services, prices, inventory, branding, and store settings that a business enters.
• Order and booking data — details a customer provides when placing an order or booking an appointment, such as name, contact details, and the appointment details they supply.
• Payment information — transaction records processed through M-Pesa and Pesapal. We store records needed for tracking and reconciliation; we do not store full card details.
• Technical data — basic logs and request information used to keep the platform secure and working.

How we use information

We use the information we collect to:

• Provide and operate the admin panel and storefront API.
• Process orders, manage inventory, and handle appointment bookings.
• Take and reconcile payments.
• Keep stores separated so one store can never access another store's data.
• Secure the platform and diagnose problems.

Google user data

Where a business chooses to connect its Google account, Soko Sensei requests access to Google Calendar so it can manage appointment events on the business's behalf. Specifically, we use the https://www.googleapis.com/auth/calendar.events scope to create, update, and remove calendar events for appointments booked through the platform — for example, adding a confirmed booking to the business's calendar with a Google Meet link.

We request only the narrowest scope needed to provide this feature. We access a business's Google Calendar only to manage events related to bookings made through Soko Sensei, and only while the business keeps its Google account connected. The business can disconnect its Google account at any time, which revokes our access.

Soko Sensei's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In line with that policy, we confirm that we:

• Use Google user data only to provide and improve the appointment features described above.
• Do not transfer or sell Google user data to third parties for advertising, marketing, or any other purpose.
• Do not use Google user data for serving advertisements.
• Do not allow humans to read Google user data unless we have the business's explicit consent, it is necessary for security or to comply with the law, or the data has been aggregated and anonymised.

How we share information

We do not sell your information. We share it only with the service providers needed to run the platform — such as payment processors (M-Pesa, Pesapal) and Google, for the calendar feature above — and only to the extent needed to provide the service, or where required by law.

Data retention

We keep information for as long as a store is active and as needed to provide the service, meet legal and accounting obligations, and resolve disputes. When data is no longer needed, we delete or anonymise it.

Security

We take reasonable technical and organisational measures to protect your information, including isolating each store's data at the query layer and exposing only opaque public identifiers through our API. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access.

Your choices

Businesses can disconnect a connected Google account at any time to revoke calendar access. You may also request access to, correction of, or deletion of your personal information by contacting us at volchaenterprises@gmail.com. You can review the apps connected to your Google account and revoke access at your Google account permissions page.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "last updated" date above. Significant changes will be communicated through the platform.

Contact

Questions about this privacy policy or your data? Email volchaenterprises@gmail.com.