How Mauzo looks after your information

Mauzo helps small businesses in Kenya keep track of orders, sales, stock, money customers owe, and deliveries. To do that, it has to keep some information about the business, the people who work there, and their customers. This page explains, in plain words, what that is and what we do with it.

Last updated 2 October 2026

What we collect

We only keep what Mauzo needs to work. That is:

Your account. Your name, email address, and (if you add it) your phone number. Your password is never stored as you typed it: we keep only a scrambled version (a hash) that can check your password but can't be turned back into it.
Your business's records. Whatever you and your team enter: the business name and locations, products and prices, customers (names, phone numbers, addresses, notes), suppliers, orders, payments, expenses, stock movements and deliveries. Mauzo also keeps a record of who changed what and when, so a team can see what happened.
WhatsApp messages, if the business connects its WhatsApp number. More on this below.
Signing in. When you sign in, Mauzo puts one cookie in your browser, called mauzo_session, so you stay signed in. It lasts up to 30 days, or until you sign out. If someone gets a password wrong, we briefly note the email address and network address they tried from, to slow down people guessing passwords.

We don't use advertising, ad trackers or analytics tools, and we don't use cookies for anything other than keeping you signed in.

Why we use it

We use this information only to run Mauzo for the business that entered it:

to show the business its orders, sales, stock, what customers owe and what needs doing today;
to let the right people on the team sign in and see what their role allows;
to send emails you ask for, like a link to choose a new password or an invitation to join a team;
to read orders that customers send on WhatsApp and send them replies and confirmations;
to keep Mauzo safe, for example by stopping repeated wrong password attempts.

One business can never see another business's information.

WhatsApp messages

A business can connect its own WhatsApp number to Mauzo through Meta's WhatsApp Business Platform. When it does, and a customer sends a message to that number:

Mauzo receives the message from Meta: the text, the customer's phone number, and the name on their WhatsApp profile.
For photos, videos, voice notes, documents and stickers, Mauzo doesn't download the file. It only notes what kind of message it was, plus any caption, file name, or the place name and address of a shared location.
Mauzo stores these messages with the business's records so it can read the order (which products, how many, which day) and show it to the business to check and accept.
Mauzo sends replies from the business's own number: a short “we've received your order” message, the order confirmation once the business accepts it, and any reply someone on the team writes. Those sent messages are stored too.

These messages belong to the business you messaged. Mauzo doesn't use them for anything else, doesn't send you marketing, and doesn't share them with other businesses.

How long we keep it

Business records and WhatsApp messages are kept for as long as the business uses Mauzo, so its history stays complete, until the business asks us to delete them. Disconnecting a WhatsApp number stops new messages arriving, but keeps the ones already received.
Sign-in sessions end after 30 days, or when you sign out.
Password-reset links stop working after 1 hour, and team invitation links after 7 days.
Notes about wrong password attempts only count for 15 minutes, and old ones are cleared out automatically.
The demo business you can try from the front page is sample data. Each demo copy is removed automatically when it expires.

Your choices

If you use Mauzo for your business, you can see and correct your business's records at any time. The account owner can remove people from the team and disconnect the WhatsApp number in Settings.
If you're a customer of a business that uses Mauzo, your details are kept by that business. You can ask them to correct or remove them. If you don't want your WhatsApp messages read by Mauzo, you can contact the business another way.
You can ask what information Mauzo holds about you, ask for it to be corrected, or ask for it to be deleted. See below for how.

How to delete your data

There are a few ways, depending on who you are:

You messaged a business on WhatsApp, or you're one of its customers. Ask that business to delete your details and messages. They know you, and can confirm the request comes from you. You can also write to us directly (details below).
You work at a business that uses Mauzo. Ask your account owner (you'll find them in Settings, under Team) to remove you from the team, and to ask us to delete your account.
You own the business. Write to us from the email address on your account and tell us what to delete: one person, one customer's details and messages, or the whole business. We'll delete it from Mauzo's database and tell you when it's done.

Deleting a business removes its records, its customers and its WhatsApp messages from Mauzo. To stop new WhatsApp messages reaching Mauzo straight away, the owner can also disconnect the number in Settings, under WhatsApp orders.

Questions

If anything here isn't clear, or you think we've got something wrong, please tell us. You can reach us at waititu200@gmail.com.

If we change this policy, we'll update it here and change the date at the top.