Privacy policy
Effective Date: February 26, 2026
This Privacy Policy describes how InstaEscrow (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our platform and services.
1. Information We Collect
Personal Information: Name, phone number, email address (via Google Sign-In), store handle, M-Pesa registration name, and M-Pesa phone number.
Store Information: Store name, store type, product descriptions, and invoice history.
Device Information: Operating system, browser type, device model, IP address, and app version.
Transaction Data: Payment records, escrow balances, payout history, invoice details, and dispute records.
Usage Data: Pages visited, features used, actions taken, timestamps, and session information.
2. How We Use Your Information
- To provide, maintain, and improve our escrow payment services
- To authenticate your identity and manage your vendor account
- To process transactions, escrow holds, and payouts
- To facilitate communication between buyers and vendors
- To detect, prevent, and address fraud, scams, and security issues
- To resolve disputes and process refunds
- To send transaction notifications, security alerts, and service updates
- To comply with legal obligations and enforce our Terms of Service
3. Information Sharing
We do not sell your personal information. We may share your information with:
- Payment Processors: Licensed payment processors and mobile money providers (including M-Pesa) for processing payments and payouts
- Buyers: Limited vendor information (store name, store handle) is shared with buyers on invoices
- Legal Requirements: When required by law, court order, or governmental authority
- Safety: When we believe disclosure is necessary to protect rights, property, or safety
4. Cookies & Tracking
We use HttpOnly cookies to manage authentication sessions securely. These cookies are essential for the Platform’s functionality and cannot be disabled. We do not use third-party tracking cookies for advertising.
5. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data, subject to legal retention requirements and pending transactions
- Objection: Object to processing of your personal data for specific purposes
To exercise these rights, contact us at privacy@autotribes.app.
6. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure HttpOnly cookies for session management, and server-side token storage. M-Pesa details are handled securely through our payment processor. However, no method of electronic storage or transmission is 100% secure.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 7 years as required by Kenyan financial regulations. After account termination, we may retain certain information for fraud prevention and dispute resolution.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on the Platform. Your continued use of the Platform after changes constitutes acceptance of the updated policy.
9. Contact
For questions about this Privacy Policy, contact us at privacy@autotribes.app.