Privacy Policy
Effective date: 1 January 2025 · Governed by the Kenya Data Protection Act 2019
1. Who we are
Metron ISP ("Metron", "we", "us") is a software company registered in Kenya. Our registered address is Muranga, Kenya. Contact: privacy@metronisp.com.
2. Data we collect
We collect data you provide directly (name, email, phone, ISP subscriber data you import), data generated by using our services (usage logs, billing events, API requests), and device data (IP address, browser type). We do not collect biometric or sensitive personal data.
3. How we use your data
To provide and improve the Metron ISP platform; to reconcile billing payments; to send transactional communications (receipts, alerts, support responses); and to comply with legal obligations under the Kenya DPA 2019.
4. Legal basis for processing
We process data under contract (to deliver the services you have subscribed to), legitimate interests (service improvement, fraud prevention), and legal obligation (Kenya DPA 2019, tax records).
5. Data sharing
We share data only with: M-Pesa/Safaricom and Airtel Money APIs (to reconcile payments); cloud infrastructure providers (AWS, in af-south-1 region); and email/WhatsApp notification services. We do not sell subscriber data.
6. Data retention
Account data is retained for the duration of your subscription plus 7 years for tax compliance. You may request deletion at any time; we will delete within 30 days subject to legal retention requirements.
7. Your rights
Under the Kenya DPA 2019, you have the right to access, correct, delete, and port your data. Contact privacy@metronisp.com. We will respond within 21 days.
8. Changes
We will notify you by email and in-app notice at least 14 days before material changes to this policy.