Privacy Policy

1. Introduction

MojaDesk (“MojaDesk”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what personal data we collect when you use our website, applications, and customer support platform (collectively, the “Services”), how we use it, who we share it with, and the rights available to you.

This policy is prepared in accordance with the Personal Data Protection Act, No. 11 of 2022 and the Personal Data Protection (Personal Data Collection and Processing) Regulations, 2023 of the United Republic of Tanzania, as well as other applicable laws including the Electronic Transactions Act, 2015 and the Electronic and Postal Communications Act, 2010.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Who we are

MojaDesk is a cloud-based customer support platform operated by The Site Weavers, based in the United Republic of Tanzania. For the purposes of the Personal Data Protection Act, 2022, we act as a data controller in respect of personal data we collect about visitors and account holders, and as a data processor in respect of the data our business customers process through the platform on behalf of their own customers.

If you are an end customer interacting with a business that uses MojaDesk, that business is the controller of your conversation data, and its own privacy policy will also apply.

3. Information we collect

We collect the following categories of personal data:

• Account information: name, business name, email address, phone number, password, and billing details when you register or subscribe.
• Conversation data: messages, attachments, contact details, and metadata exchanged through connected channels such as WhatsApp, Messenger, Instagram, Telegram, Viber, and website live chat.
• Payment information: transaction records processed through our payment partners (for example Pesapal) or bank transfers. We do not store full card or mobile money credentials.
• Technical data: IP address, device and browser type, operating system, time zone, and usage logs.
• Usage data: features used, pages visited, response times, and interactions with the Services.
• Communications: information you provide when you contact support, complete forms, or subscribe to our newsletter.

4. How we use your information

We use personal data to:

• Provide, operate, and maintain the Services and your account;
• Process payments, subscriptions, and renewals;
• Enable multi-channel messaging, AI-assisted replies, and automation;
• Respond to enquiries and provide customer support;
• Improve, personalise, and develop our Services;
• Send service-related notices and, where you have consented, marketing communications;
• Detect, prevent, and address fraud, abuse, and security incidents;
• Comply with legal obligations under Tanzanian law.

5. Lawful basis for processing

We process personal data only where we have a lawful basis to do so under the Personal Data Protection Act, 2022, including:

• Consent that you have freely given (for example, newsletter subscriptions or optional cookies);
• Performance of a contract to provide the Services you have requested;
• Compliance with a legal obligation to which we are subject;
• Legitimate interests in operating, securing, and improving our Services, balanced against your rights.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Sharing and disclosure

We do not sell your personal data. We may share it with:

• Service providers who help us operate the platform (hosting, payment processing, messaging channel providers, AI providers, email delivery, and analytics), under contractual confidentiality and data-protection obligations;
• Our business customers where you are an end customer engaging with them through MojaDesk;
• Authorities and regulators where required by Tanzanian law, court order, or lawful request, including the Personal Data Protection Commission (PDPC);
• Successors in the event of a merger, acquisition, or reorganisation, subject to this policy.

7. Cross-border transfers

Some of our service providers may process data outside the United Republic of Tanzania. Where personal data is transferred outside Tanzania, we do so in accordance with the requirements of the Personal Data Protection Act, 2022, including ensuring an adequate level of protection, obtaining your consent where required, or relying on appropriate safeguards.

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal, accounting, and reporting obligations, and to resolve disputes. When data is no longer required, we securely delete or anonymise it. Business customers control the retention of conversation data within their own accounts.

9. How we protect your data

We apply appropriate technical and organisational measures to safeguard personal data, including encryption in transit, access controls, authentication, and regular monitoring. In the event of a personal data breach that poses a risk to your rights, we will notify the Personal Data Protection Commission and affected individuals as required under the Personal Data Protection Act, 2022. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data where there is no legal reason to retain it;
• Object to or restrict certain processing;
• Withdraw consent at any time;
• Request a copy of your data in a portable format;
• Lodge a complaint with the Personal Data Protection Commission (PDPC) of Tanzania.

To exercise any of these rights, contact us using the details below. We will respond within the timeframes set by the Personal Data Protection Act, 2022.

11. Cookies and tracking

Our website uses cookies and similar technologies to keep you signed in, remember preferences, measure performance, and improve your experience. You can control or disable cookies through your browser settings; however, some features of the Services may not function properly without them.

12. Children's privacy

The Services are intended for businesses and adults. We do not knowingly collect personal data from children under the age of 18 without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post the updated version on this page and revise the “Effective date” above. Material changes will be communicated through the Services or by email where appropriate.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• MojaDesk (operated by The Site Weavers), United Republic of Tanzania
• Phone / WhatsApp: +255 767 213 119

You may also reach our support team via the contact page.