Xendly Biz Privacy Policy

Who we are

Xendly Biz is provided by Xendly Corp Ltd (Xendly Labs), Kigali, Rwanda. Xendly Biz lets merchants run an online store (a business with products, a storefront and an optional custom domain) and lets customers browse, order, pay and receive delivery. For any privacy question or request, contact our data-protection contact at privacy@xendlylabs.com.

Information we collect

• Account information you give us: your name, email address, phone number, and profile photo. Merchants additionally provide business details such as the business name, description, logo, opening hours, location and payout/contact information.
• Sign-in identifiers: when you sign in with Google, Apple, or Facebook, we receive a basic profile (name, email) from that provider to create and secure your account.
• Product & catalogue data entered by merchants: product names, prices, descriptions, images, stock levels and barcodes.
• Order & delivery information: items ordered, order totals, the delivery address, phone number and any notes needed to fulfil and deliver an order.
• Payment information: mobile-money (MoMo) and other payment-transaction records and references processed through our payment provider. We do not store full card or mobile-wallet credentials ourselves.
• Subscription & usage: a merchant’s plan, credit balance and billing records.
• Device & log data: standard technical information (device type, app version, IP address, push- notification token, crash and diagnostic logs) used to operate and secure the service.

How we use your information

• To run storefronts, show products, and let customers place orders.
• To create, secure, and support your account.
• To process payments and to arrange and track delivery of orders.
• To send transactional and order notifications (for example, order status updates and delivery alerts).
• To manage merchant subscriptions, credits, billing, and custom domains.
• To maintain, troubleshoot, and improve the service, and to keep it safe from fraud and abuse.
• To comply with our legal obligations.

Who we share it with

We do not sell your personal data. When you buy from a store, the information needed to fulfil your order (such as your name, delivery address, phone number and the items ordered) is shared with the merchant whose store you ordered from so they can fulfil it. We also share data with service providers who process it on our behalf to run Xendly Biz:

• Payment processor (Paypack) to take mobile-money (MoMo) and other payments for orders and subscriptions.
• Delivery provider (Kapiteni) to dispatch and deliver orders to the delivery address you provide.
• Authentication providers (Google, Apple, Facebook) when you choose to sign in with them.
• Cloud hosting, storage and infrastructure used to run the app, store product images, and deliver custom domains.

We may also disclose information where required by law.

Data retention

We keep your account and business information for as long as your account is active. Records we are legally required to retain — such as order, financial and payment records — are kept for the period required by applicable law and then deleted. Aggregated or anonymized data that no longer identifies you may be kept to improve the service. Residual copies in encrypted backups are purged within 30 days of deletion.

Your rights and choices

You can access and update your profile and business details in the app, and you can delete your account and associated data at any time:

• Delete your Xendly Biz account (in the app, on the web, or by email).
• Delete specific data without closing your account.

To exercise any data-protection right, email privacy@xendlylabs.com. We respond to verified requests within 30 days.

Children

Xendly Biz is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

Security

We use industry-standard measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you of any breach as required by law.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes will be communicated in the app or by email.

Contact us