Privacy Policy

This Privacy Policy explains how HomeBooktz handles personal data when people visit our website, apply for a subscription, use the HomeBooktz business-management platform, or contact support. It applies to the platform and related services operated under the HomeBooktz name.

The role HomeBooktz performs depends on the data and the activity. HomeBooktz may determine purposes and means for account administration, subscription management, platform security, and its own support and operational records. A tenant business may determine the purposes for personal information it enters about its staff, customers, suppliers, borrowers, or other contacts. For those tenant-directed activities, HomeBooktz may process information on that business's instructions. The actual roles depend on the circumstances and applicable law; neither role applies universally to every record.

Tenant businesses are responsible for providing appropriate notices and having an applicable lawful basis for information they enter into the platform. A data-processing agreement and further role documentation may be required for some relationships.

Depending on how the platform is used, information may include names, email addresses, telephone numbers, account and business/workspace details, staff profiles, roles and permissions, customer and supplier contact details, and information in operational, sales, inventory, accounting, payroll, lending, and other business records. Subscription records may include plan, invoice, payment status, payment-provider references, and contact details used for billing.

Authentication and security records may include login/session information and technical details such as browser, device, IP address, or user-agent data where available in application security or audit logs. The platform is not intended to collect sensitive personal information unnecessarily. Tenant businesses should avoid entering sensitive data unless it is necessary, lawful, and appropriately protected for their use of the service.

We use information to create and administer accounts; provide platform features and tenant/workspace management; authenticate users and enforce permissions; support business operations and recordkeeping; manage subscriptions, invoices, and payment-provider interactions; answer support requests; protect the service and investigate misuse; maintain audit records; improve and operate the service; and meet applicable legal obligations or resolve disputes.

The applicable lawful ground depends on the purpose, the parties, and the relevant law. Processing may be necessary to take steps requested before a service contract or to perform that contract; to meet a legal obligation; or, where permitted and appropriately balanced, for legitimate interests such as service security and administration. Consent may be used where it is the appropriate ground, and can be withdrawn where consent is relied upon. Tenant businesses are responsible for assessing the lawful grounds for personal data they place in their workspaces. These grounds require legal review against the specific processing and applicable Tanzanian requirements.

Information may be shared with infrastructure and database providers (including Supabase), email delivery providers configured for HomeBooktz (Resend or SendGrid), and payment providers used for subscription transactions (including SonicPesa or Abliner). The provider used can depend on configuration and the transaction. We may also share information with support or professional service providers who need it to provide services, and with regulators, courts, or law-enforcement authorities where required or permitted by law. We do not identify analytics providers because no analytics service was identified in the application configuration reviewed for this policy.

HomeBooktz relies on cloud infrastructure and third-party services. Their systems and support operations may process or access personal data in countries other than Tanzania; the processing location can depend on provider configuration and service. We do not represent that all data is stored in Tanzania. Cross-border transfers are subject to applicable Tanzanian data-protection requirements, including any required assessment, safeguards, approvals, or permits. Provider locations and transfer safeguards should be confirmed as part of the service configuration and legal review.

The platform uses authenticated access, role-based authorization, database access controls, tenant-scoped access policies, and audit logging. Connections to configured services use their supported secure transport. These measures are intended to reduce unauthorized access and are not a guarantee that every risk can be eliminated. Access credentials should be kept confidential and access permissions reviewed by tenant administrators.

Information is retained only for as long as needed for the relevant service or operational purpose, contractual needs, applicable legal obligations, dispute resolution, security, and legitimate recordkeeping. The applicable period depends on the record and circumstances. HomeBooktz's formal retention schedule remains to be established and may specify more detail.

Subject to applicable legal conditions and exceptions, rights may include being informed; access; rectification; erasure or destruction; restriction; portability; objection; rights concerning automated decision-making where applicable; withdrawal of consent where consent is the basis; and the right to complain to the relevant supervisory authority. These rights are not absolute in every circumstance and may depend on the applicable law and the role of the party handling the request.

For a privacy question or request, email homebooktz@gmail.com and identify the account or tenant concerned, the request, and a safe way to respond. We may need to verify identity or authority before acting. If the information is held in a tenant workspace, the tenant business may need to handle the request or direct HomeBooktz as its service provider. You may also contact the Personal Data Protection Commission of Tanzania regarding applicable complaint rights.

The application uses browser storage for authentication/session persistence, depending on the user's remember-session choice, and uses session storage for a temporary public registration draft. It also uses a browser cookie for the sidebar display preference and local storage for interface preferences such as theme. These technologies support sign-in, session continuity, and interface operation. No advertising or analytics cookie service was identified in the application configuration reviewed for this policy.

HomeBooktz is a business-management service and is not directed to children. Tenant businesses should not enter children's personal data unless it is necessary for their lawful business activity and they have satisfied applicable requirements.

We will publish revisions as new versioned Privacy Policy documents with an effective date. Published versions are intended to remain identifiable; a revised policy should not silently replace the version previously acknowledged. Where required, we will provide notice or request renewed acknowledgement.