Privacy Policy

Helvino Technologies Limited acts as a data processor for personal data that customer companies (data controllers) store in PetroManager — for example employee records, payroll and customer details — and as a data controller for account and billing information about our customers' administrators.

What we collect

• Company registration, KRA PIN and contact details.
• User account details, login activity and device/session information.
• Business records entered by customers, including employee and customer personal data.

How we protect it

• Strict tenant isolation: every record is bound to its company and enforced server-side.
• Encryption in transit (TLS) and encryption of sensitive fields (national ID, KRA PIN, NSSF/SHIF numbers, bank accounts, integration credentials) at rest.
• Role-based access control, two-step verification and tamper-evident audit trails.
• Managed database backups.

Purpose & minimisation

Data is used only to provide the Service, to support customers and to meet legal obligations. We do not sell personal data.

Data subject rights

Individuals may request access, correction or deletion of their data through the company that holds it. Customers can export and correct records within the application; contact info@helvino.org for assistance.

Retention

Records are retained while the customer account is active and thereafter for periods required by Kenyan tax, employment and accounting law, after which they are deleted or anonymised.

Breach notification

We will notify affected customers and the Office of the Data Protection Commissioner of personal data breaches as required by law.

Contact

Helvino Technologies Limited · info@helvino.org · 0110421320 / 0703445756