Last Updated: July 8, 2026
Effective Date: July 8, 2026
Data Controller: Atlas Softech Limited
Your Privacy is Our Priority. Atlas Softech Limited ("we," "our," or "the Company") respects your privacy and is committed to protecting your personal and business data. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding it.
We collect information directly from you, automatically through your use of the Service, and from third parties in limited circumstances. Account Information: Full name, email address, phone number, and password when creating your account. Shop Details: Business name, location/address, owner name, contact information, VAT/tax registration number, and currency preference. Business Data: Products and inventory information, pricing and cost data, sales transactions and receipts, expense records, staff member information, purchase orders, and supplier details. Payment Information: Payment method details are processed by Pesapal and Stripe — we do not store sensitive payment card data on our servers. Usage Data (Automatic): Pages visited, features used, time spent in the app, device type, operating system, browser type, and IP address. Cookies and Tracking: Session cookies for authentication and local storage for user preferences (language, currency selection).
Under the Data Protection Act of Tanzania and international data protection standards, we process your data on the following legal bases: • Contract Fulfillment: Processing necessary to provide SOKONI POS services and fulfill our contractual obligations to you • Legitimate Interest: Processing for business purposes such as service improvement, security, fraud prevention, and analytics • Legal Compliance: Processing required by Tanzanian law or government authorities • Consent: Where you have explicitly opted in (e.g., marketing communications, optional analytics) For marketing communications and non-essential processing, we will obtain your explicit consent.
We use the information we collect for the following purposes: Core Service Provision: • Creating and managing your account • Storing, processing, and displaying your business data • Processing subscription payments and managing billing • Providing technical support and customer service • Sending important service notifications and account updates • Generating business reports, analytics, and insights Service Improvement: • Analyzing usage patterns to improve features and user experience • Identifying and fixing technical issues and bugs • Developing new features and enhancements Security and Fraud Prevention: • Detecting unauthorized access and suspicious activity • Preventing fraud, abuse, and unauthorized use • Enforcing our Terms and Conditions We Do NOT: • Sell your personal or business data to third parties for profit • Share your data with advertisers or data brokers • Use your data for surveillance or tracking beyond service improvement
Atlas Softech Limited implements comprehensive security measures to protect your data from unauthorized access, disclosure, alteration, and destruction. Encryption Standards: • At Rest: All data stored in our databases is encrypted using AES-256 (Advanced Encryption Standard), the same encryption standard used by governments and banks • In Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2+ (Transport Layer Security) via HTTPS • Encryption Keys: Encryption keys are managed by dedicated key management systems and are never stored with encrypted data Data Isolation and Access Control: • Multi-Tenancy: Each shop's data is logically isolated in separate database schemas — no cross-tenant data access is possible by design • Row-Level Security (RLS): Database-level security policies prevent any user from accessing data outside their assigned shop • Role-Based Access Control (RBAC): Users can only access data and features permitted by their role (Admin, Manager, Cashier) • Audit Logging: All access to sensitive data is logged with timestamps and user identifiers for security auditing Infrastructure Security: • Secure Data Centers: Hosted on world-class cloud infrastructure with 24/7 physical security • Automatic Backups: Daily automated backups with geographically redundant storage for disaster recovery • Network Security: Firewalls, DDoS protection, intrusion detection/prevention systems Breach Notification: If a data breach occurs that compromises your personal information, we will notify you by email within 72 hours and describe the nature of the breach, data affected, and steps taken to remediate the issue.
We are committed to protecting your privacy and do not sell, rent, lease, or share your personal or business data with third parties for their own marketing or profit purposes. Limited Sharing Circumstances: • Payment Processors: We share limited transaction data with Pesapal and Stripe to process your subscription payments. These processors are bound by strict confidentiality agreements and PCI-DSS compliance requirements • Email Service Provider: We use Resend for transactional emails. Your email address and order details are shared only to send requested communications • Cloud Infrastructure: Your data is hosted on certified infrastructure providers bound by data processing agreements • Legal Requirements: We may disclose data if required by law, government authorities, or court order • Service Providers: Contractors and service providers who assist in operating the service sign data protection agreements No Data Sales: We do not and will never sell, trade, or rent your business data, customer lists, sales information, or any personally identifiable information to any third party.
We retain your data for as long as necessary to provide the Service and comply with legal obligations. Active Accounts: All data is retained while your account is active so you can access your business information anytime. Account Deletion: • Self-Service Deletion: You can permanently delete your account and all associated data at any time directly from within the app by navigating to Profile → Delete Account. No support request or external form is required • Immediate and Permanent: When you confirm deletion, your account and all data belonging to you — including shop(s), products, sales transactions, expenses, staff assignments, purchase orders, discounts, debts, cash shifts, and subscriptions — are permanently and irreversibly deleted from all systems, including backups. There is no 30-day retention or grace period; deletion takes effect immediately upon confirmation • Ownership Transfer: If you own one or more shops, you may choose to transfer ownership of those shops to another staff member before your account is deleted, preserving all shop data under the new owner. Alternatively, you may choose to delete all shop data along with your account Data Export: Before deletion, you can export all your data (products, sales, expenses, reports) in PDF or CSV format from your account. Legal Retention: We may retain limited, anonymized data (such as aggregated transaction records required for tax compliance) for up to 7 years to comply with Tanzanian tax and accounting regulations. Such retained data is anonymized and used only for compliance purposes — it is not linked to your identity.
Under the Data Protection Act of Tanzania and international data protection standards, you have the following rights: Right to Access: You have the right to request and receive a copy of all personal data we hold about you. Log into your account to view your profile information, or email sokoni_pos@atlassoftech.com to request a complete data export. Right to Correction: You can update, correct, or modify your personal information at any time through your account settings. Right to Deletion: You have the right to delete your account and all associated data ("right to be forgotten") at any time, directly from within the app. Navigate to Profile → Delete Account, choose whether to transfer shop ownership or delete all shop data, and confirm by typing "DELETE". Your account and all related data are permanently and irreversibly deleted immediately upon confirmation — no retention period, no support request required. Right to Data Portability: You have the right to receive your data in a structured, commonly-used format (CSV, PDF) and to transmit it to another service provider. Right to Object: You may object to certain data processing activities, including marketing communications and analytics. Right to Withdraw Consent: For any processing based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. Right to Lodge a Complaint: If you believe your data is being processed in violation of your rights, you may lodge a complaint with the Data Protection Commissioner of Tanzania. To exercise your rights, contact us at sokoni_pos@atlassoftech.com. We will respond within 2 business days.
We use cookies and similar technologies to enhance your experience and understand how you use SOKONI POS. Essential Cookies (Required): • Session Cookies: Used to authenticate your login and maintain your session. These are necessary for the service to function • Security Cookies: Used to protect against fraud and unauthorized access Preference Cookies (Optional): • Language Preference: Stores your language selection • Currency Preference: Stores your preferred currency display • Theme Preference: Stores your dark/light mode selection No Third-Party Tracking: We do not use third-party tracking cookies, pixels, or analytics tools that track you across websites. We do not enable Google Analytics, Facebook Pixel, or similar tracking tools.
SOKONI POS primarily stores data in Base44's cloud infrastructure, hosted on world-class data centers with 99.9% uptime SLA. All data is stored in encrypted databases with automatic daily backups. You own your data — always.
SOKONI POS is not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a child has provided information to us, we will delete such data immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via: • Email notification to your registered address • Prominent notice on the SOKONI POS website • Within the app itself Changes become effective 30 days after notification unless otherwise specified. Your continued use of SOKONI POS after the change date constitutes your acceptance of the updated Privacy Policy.
If Atlas Softech Limited is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your data may be transferred as part of that transaction. We will provide you with notice and an opportunity to opt out where legally permitted.
This Privacy Policy is governed by the laws of the United Republic of Tanzania, including the Data Protection Act. Any disputes arising from this policy or our data practices shall be subject to the jurisdiction of Tanzanian courts. If any provision is found invalid, it will be severed, and the remaining provisions will continue in effect.
If you have questions about this Privacy Policy, our data practices, or wish to exercise your data rights: Atlas Softech Limited Service: SOKONI POS Email: sokoni_pos@atlassoftech.com Location: Tanzania We aim to respond to all inquiries within 48 business hours. Your trust is important to us — we are committed to protecting your privacy and maintaining the security of your business data.
🔒 Your Data is Safe and Secure
We use enterprise-grade encryption (AES-256), secure infrastructure, and strict access controls to protect your business data. No data is sold. You own your data.
© 2026 Atlas Softech Limited. All rights reserved. SOKONI POS is a registered trademark.