This Data Protection Policy explains how Allios collects, uses, stores, and protects personal and business data when you use our services, including SACCO, lending, clinic, and POS modules.
This document supplements our Privacy Policy and Terms of Service.
Allios acts as a Data Processor, handling Customer Data on behalf of the Customer (Data Controller).
Allios does not claim ownership of your data. Customers retain full ownership and control, while Allios processes data solely to deliver and improve its services.
We also collect device and usage data (IP, browser type, session metadata) for functionality and security analytics.
Allios integrates with external providers such as Google Services, MTN MoMo, Airtel Money, and analytics tools. We share only minimal data required for each integration, and users can revoke access at any time through their accounts.
If a data breach occurs, we’ll notify affected users and authorities in accordance with applicable laws.
We retain data only as long as necessary or required by law.
Upon termination, customers have 30 days to export their data before permanent deletion, as outlined in the Terms of Service.
Data may be processed outside your country. We use lawful mechanisms (e.g., Standard Contractual Clauses) to ensure adequate protection for cross-border data transfers.
To exercise these rights, contact our Data Protection Officer below.
We may revise this policy periodically. The latest version will always be available on this page, and material updates will be communicated via email or in-app notices.