Privacy Policy · Michael Thuita

1. Who We Are

Michael Thuita Limited (“Thuita”, “we”, “us”, “our”) is a technology company registered in Kenya. Our primary product, Thuita Finance, helps licensed Kenyan SMEs manage receivables, payables, payment follow-up, and supporting invoice records inside WhatsApp. Our products are operated through thuita.com and its associated subdomains.

For any privacy-related enquiries, contact us at: admin@thuita.com

2. What We Collect

Depending on the product you use, we may collect the following categories of data:

Identity data — name, phone number, email address
Business data — business type, preferences and context you share during onboarding or within a product
AI at Work application data: your organization name, work role, number of people leaders, current adoption problem, workflow you want to improve, preferred start window, company website, and any additional context you choose to provide
Financial workflow data (Thuita Finance) — receivables, payables, invoice details, payment confirmations, reminder activity, and supporting business records that you enter into or send through the system. This data is provided entirely by you.
Conversation data — messages you send to our AI agents via WhatsApp or other interfaces, processed in real time to deliver the service
Payment data — subscription status, payment reference numbers. We do not store card numbers or payment credentials — these are handled directly by our payment processor.
Technical data — IP address, browser type, device type, usage logs, performance metrics, and consented campaign measurement events
Communications — emails, support messages, or other direct communications you send us

We collect only what is necessary to deliver, improve, and measure our services. On the AI at Work campaign page, Meta Pixel is optional and loads only after you allow advertising cookies.

3. How We Use Your Data

To deliver, maintain, and improve our products and services
To review a company application and contact the applicant about Lead Your Team With AI. We do not add applicants to unrelated marketing lists.
To process payments and manage your subscription
To send service-related communications (e.g. verification codes, OTP, billing notices, reminder delivery updates, product updates)
To analyse usage patterns and improve AI accuracy
With your consent, to measure visits to the AI at Work campaign page and successfully stored company applications
To detect, prevent, and address fraud or security issues
To comply with legal and regulatory obligations

We do not sell your data to third parties. Ever.

4. Third-Party Service Providers

We work with third-party infrastructure and service providers to operate our products. These providers process only the data necessary for their specific function, such as messaging delivery, payment processing, hosting, and consented campaign measurement.

Optional Meta measurement on AI at Work

If you allow advertising cookies on /ai-at-work, we load Meta Pixel and send a page-view event and a Lead event after a company application is stored successfully. We do not send your application form fields, name, email, phone number, or organization name to Meta. Automatic configuration and automatic advanced matching are disabled in our implementation.

You can continue without advertising cookies and still submit the application. You can change your choice through Privacy choices in the campaign footer. Withdrawal stops subsequent Meta events from this page and removes Meta first-party cookies where our site can do so. It does not recall an event already sent to Meta. Meta may process an event already received under its own terms and controls.

All providers we engage are contractually required to handle data securely and in accordance with applicable privacy laws. We review and update our provider relationships as our infrastructure evolves.

5. Data Retention

Account and profile data is retained while your account is active
Financial workflow records (obligations, payments, and supporting documents) are retained until you request deletion, subject to legal retention duties where applicable
Conversation history with AI agents uses a rolling active-memory window; we do not maintain indefinite logs of all messages
Session and cache data expires automatically (typically within 24 hours)
AI at Work application records are retained while we review, respond to, and administer the programme, then deleted or anonymized when they are no longer needed for those purposes or legal obligations
After account deletion, personal data is removed within 30 days. Some data may be retained longer where required by law (e.g. accounting records).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data — see our Data Deletion page
Restrict or object to certain processing
Withdraw consent at any time where processing is consent-based
Lodge a complaint with your relevant data protection authority

To exercise any of these rights, contact admin@thuita.com.

7. Security

We take security seriously, particularly given that our products handle financial data. Measures we apply include:

Encryption in transit (TLS) for all data
Cryptographically hashed one-time codes for sensitive page access where applicable
Role-based database access controls — only the minimum necessary access is granted
Short-lived session tokens that expire automatically
Verification controls for accessing sensitive financial support surfaces

No system is 100% secure. If you believe your account has been compromised, contact us immediately at admin@thuita.com.

8. Children

Our services are not directed to anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has provided data to us, please contact us and we will remove it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the product interface or by email where we have your contact details. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

10. Contact

Michael Thuita Limited
Nairobi, Kenya
admin@thuita.com