PesaView · Privacy

Privacy Policy

Effective date: 9 October 2026 · Last updated: 9 October 2026

This policy explains how Caydeesoft Solutions Limited (“Caydeesoft”, “we”, “us”) handles personal data when you visit the PesaView website, request a demo, or use PesaView payment operations services. We aim to handle personal data lawfully, fairly, transparently, and only for clear purposes.

When a business uses PesaView to process payment data: the business is generally the controller and decides why and how that data is used. Caydeesoft generally acts as its processor, processing data under the customer’s documented instructions and an appropriate data processing agreement. For our own website, account, support, and business records, Caydeesoft may act as controller.

1. Who is responsible

Caydeesoft Solutions Limited provides PesaView. For privacy questions or requests, contact info@caydeesoft.com or write to Caydeesoft Solutions Limited, Kenya. If you are an end customer whose payment information appears in a PesaView customer’s account, contact that business first; it controls that processing. We will assist the customer as required by our agreement and applicable law.

2. Personal data we handle

Website and demo enquiries: name, business contact details, organisation, and information you include in your enquiry.
Customer account and access data: name, username, email, phone number, password credentials, assigned roles, product or organisation access, authentication settings, and login or session information.
Payment operations data: transaction references, amounts, timestamps, payment status, channel, payer or payee details, contact information, account identifiers, and related request, response, or callback data supplied by customers or payment providers.
Support and operational records: messages, configuration details, audit and activity records, and information needed to investigate an issue or protect the service.
Technical data: IP address, browser or device information, session identifiers, and service logs generated when the site or platform is used.

Please do not send card security codes, passwords, or unrelated sensitive personal information through demo or support channels.

3. Why we use data and our legal bases

Where GDPR applies, we rely on the legal basis relevant to the purpose. Depending on the context, that may be performance of a contract, steps taken at your request before a contract, compliance with a legal obligation, our legitimate interests in operating and securing the service, or your consent where consent is required. We use data to:

respond to enquiries, arrange demonstrations, and manage customer relationships;
provide payment operations, transaction monitoring, reconciliation, reporting, and support;
authenticate users, administer access, investigate incidents, and protect the service against fraud or misuse;
maintain business, accounting, and compliance records and meet legal obligations; and
improve reliability and troubleshoot the platform, using aggregated or de-identified information where practical.

Where a customer is the controller, that customer is responsible for identifying and documenting the legal basis for its use of end-customer data and for giving required notices.

4. How we share data

We may disclose relevant data to service providers that host, maintain, secure, or support PesaView; payment providers and financial institutions selected by the customer; professional advisers; and public authorities where required by law. Providers are authorised to process data only for their service and subject to appropriate contractual safeguards. We do not sell personal data. We do not use payment data for unrelated advertising.

5. International transfers

Data may be processed in Kenya and in other countries where we or our service providers operate. When GDPR-restricted international transfers apply, we will use a recognised transfer mechanism, such as an adequacy decision or appropriate safeguards including standard contractual clauses, and take any additional steps required by law. Customers should consult their agreement or contact us for details about the providers and locations applicable to their deployment.

6. Retention

We keep personal data only as long as needed for the purposes described above, the customer agreement, and applicable legal, accounting, dispute-resolution, or security requirements. Retention periods depend on data type and context. At the end of a customer relationship, customer data is returned or deleted in line with the applicable agreement and legal requirements. Backups and limited records may persist for a reasonable period before secure overwrite or deletion.

7. Security

We use technical and organisational safeguards designed to protect data, including access controls and authentication features. Customers are responsible for managing their users, credentials, devices, and configured integrations. No method of transmission or storage is completely secure; please notify us promptly if you suspect unauthorised access.

8. Your privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection; to withdraw consent where processing relies on consent; and to complain to a supervisory authority. These rights are subject to legal conditions and exceptions. If a PesaView customer controls the data, send the request to that customer. We will support the controller as required. For data we control, contact us using the details above.

9. Cookies and similar technologies

The website and authenticated service may use cookies or similar technologies needed for sessions, security, and core functionality. Browser settings can limit cookies, but some service features may then stop working. If we introduce non-essential analytics or advertising technologies that require consent, we will provide the appropriate notice and choice before using them.

10. Children

PesaView is a business service and is not directed to children. We do not knowingly collect children’s personal data through the public website. Businesses using the service must ensure their use of personal data complies with applicable requirements concerning children.

11. Changes to this policy

We may update this policy as the service or applicable requirements change. We will publish the current version here and update the effective date. Where required, we will give customers or affected individuals additional notice.

12. Contact

Privacy questions and requests: info@caydeesoft.com. Please include enough detail for us to understand your request, but do not include passwords or payment credentials.