APOPS Business Suite

Privacy

APOPS Business Suite is operated by APOPS Assurance Ltd, Nairobi, in line with the Kenya Data Protection Act, 2019.

What we collect

When you create an account: your name, company, email, phone number and password (stored only as a secure hash), plus the time and IP address of sign-ins. When you send a message or feedback: what you write. The records you keep in your workspace (customers, quotes, invoices, payments, suppliers, payouts) are your business data: we process them only to run the service for you, and they are kept in your own private workspace, separate from every other company.

How we use it

To run your account, to answer your messages, to tell you about your trial and your subscription, and to keep the service secure (for example, to stop misuse of sign-in codes). We do not sell your details. When a free trial ends without an upgrade, the workspace stays read-only for 60 days so you can download your data; after that all of it is permanently deleted and we email you a certificate of data destruction. You can also ask us to delete it earlier.

Data protection (Kenya Data Protection Act, 2019 and EU GDPR)

  1. Who is responsible. Your company is the data controller of the business data you enter (customers, quotes, invoices, receipts, payments, payouts, suppliers, staff). APOPS Assurance Ltd, which runs APOPS Business Suite, is only your data processor (Data Protection Act, 2019, section 42; GDPR Article 28): we process that data only to provide the service, on your instructions.
  2. We keep nothing for ourselves. APOPS does not use, read, analyse, sell, share or keep your business data for its own purposes. It lives only in your private workspace. Our staff open it only when you ask for support, and every sign-in is recorded. We keep no copy outside the service and its routine backups.
  3. Fingerprints of your documents. Every quote, invoice and receipt gets a SHA-256 fingerprint (a hash) the moment it is saved, kept in a sealed register in which each entry also seals the one before it. Changes are recorded as new versions, so nobody, including APOPS, can change a document unnoticed. You can send a document's code to your client, download the whole register with your data, and anyone can check a code at /verify.
  4. Your rights. You can see, download and take away all your data (sections 26 and 38; GDPR Articles 15 and 20): the account owner downloads it under Companies & data, in a file that opens in Excel, together with the fingerprints. You can have data corrected or erased (section 40; GDPR Articles 16 and 17); we act within 14 days of a request.
  5. How long we keep it. While you subscribe, for as long as you use the service. If a free trial ends without an upgrade, the workspace stays read-only for 60 days so you can download everything; then all its data is permanently deleted and we email you a certificate of data destruction (section 39; GDPR Article 5(1)(e)). After deletion we keep only that certificate (company name, account email, dates and the number of records destroyed) as proof.
  6. Security. Encrypted connections (HTTPS), passwords stored only as one-way hashes, a code by email at every sign-in, encrypted M-Pesa keys, and each company in its own separate workspace (section 41; GDPR Article 32).
  7. Breaches. If a breach affects your data, we tell you without delay and at the latest within 48 hours of finding it, with what you need to inform the Data Commissioner within 72 hours (section 43; GDPR Article 33).
  8. Service providers. We use a hosting provider and an email provider to run the service, bound by confidentiality and security obligations. Where data is stored outside Kenya, it is protected by appropriate safeguards (sections 48 and 49; GDPR Chapter V).
  9. Questions and complaints. Write to info@checkthis.top. You may also complain to the Office of the Data Protection Commissioner (odpc.go.ke) or, in the EU, to your supervisory authority.

Advertising and cookies

This page may show Google ads. Google and its partners may use cookies to show ads based on your visits to this and other sites. You can turn off personalised ads at adssettings.google.com. The app itself shows no ads.

Your rights

You can ask to see, correct or delete your details at any time. Email info@checkthis.top.