This is a comprehensive MVP privacy draft for product design and early implementation. It should be reviewed for Kenya Data Protection Act compliance before production launch.
Last updated: June 2026
1. Overview
This Privacy Policy explains how Mula collects, uses, stores, shares, and protects information when people use Mula's website, store creation tools, storefronts, merchant services, support channels, and related products, including any AI-assisted features Mula makes available.
Mula may process personal information about merchants, customers, visitors, support contacts, drivers, partners, and platform users.
2. Information we collect
Mula may collect information directly from users, automatically through usage of the service, or from third-party services connected to Mula.
- Name, email address, and phone number
- Business name, category, location, store name, and store link
- Product information, product images, store logo, order details, delivery or pickup information, and customer contact information
- Payment status or payment reference information
- Support messages, device/browser information, usage analytics, IP address, cookies, and similar technologies
3. Information merchants provide
Merchants may provide personal account details, business details, store details, product listings, images, prices, inventory information, customer communication records, payment or settlement details, verification documents, preferences, and settings. Merchants are responsible for ensuring they have the right to upload or share this information.
4. Information customers provide through storefronts
When customers browse or place orders through a Mula-powered storefront, Mula may collect customer name, phone number, email where provided, delivery address or pickup preference, order details, product choices, payment method or status, customer notes, and messages sent to the merchant. This information is used to help the merchant receive, manage, and fulfill the order.
5. Information collected automatically
When people use Mula, we may collect pages visited, buttons clicked, signup progress, store setup progress, browser type, device type, approximate location from IP address, session information, error logs, and performance information. This helps Mula fix bugs, improve setup flows, prevent abuse, and support users.
6. How we use information
Mula may use information to create and manage accounts, create and display storefronts, process and manage orders, help merchants communicate with customers, provide support, improve store setup flows, generate AI-assisted suggestions, maintain security, detect fraud or abuse, verify accounts, manage payment status, send important service messages, improve performance, understand usage, and comply with obligations.
7. Legal basis and consent
Where required, Mula processes personal information based on user consent, contract performance, legitimate business interests, legal obligations, security, or fraud prevention. Users may have rights to access, correct, delete, restrict, object to, request portability of, or withdraw consent for personal data, depending on applicable law.
8. Mula AI and generated content
Mula AI may process merchant-provided store information, product information, customer order context, and support context to generate descriptions, taglines, categories, setup recommendations, order summaries, customer reply drafts, and support suggestions. AI-generated suggestions are assistive and should be reviewed before publishing, sending, or relying on them. Mula should not use sensitive personal information for unnecessary AI processing.
9. Payments and third-party services
Mula may use third-party providers for payments, hosting, authentication, SMS or OTP delivery, email, messaging, analytics, error tracking, AI infrastructure, maps, or delivery tools. These providers may process information according to their own terms and privacy policies. Mula should share information only when needed to provide services, comply with law, prevent fraud, improve reliability, or support users.
11. Data security
Mula uses reasonable technical and organizational measures to protect information. Measures may include access controls, authentication, secure hosting, encryption where appropriate, monitoring, backups, audit logs, and limited employee access. No system can be guaranteed perfectly secure. Users should protect login details and notify Mula about suspected unauthorized access.
12. Data retention
Mula keeps information for as long as needed to provide services, maintain accounts, process orders, support merchants and customers, meet operational needs, prevent fraud or abuse, and comply with legal, tax, accounting, or regulatory obligations. When information is no longer needed, Mula may delete, anonymize, or archive it.
13. User rights
Depending on applicable law, users may have the right to be informed, access personal information, correct inaccurate information, request deletion, object to processing, restrict processing, request data portability, withdraw consent where processing depends on consent, or complain to a data protection authority. Requests can be sent to support@mula.store. Mula may need to verify identity before acting on a request.
14. Merchant responsibility for customer data
Merchants using Mula may receive customer information to fulfill orders. Merchants should use customer data only for order-related purposes, protect it, avoid unnecessary sharing, avoid spam, respect customer privacy, and delete or secure data they no longer need. If merchants export or copy information outside Mula, they are responsible for how they handle it.
15. Children's privacy
Mula is not designed for children. Mula does not knowingly collect personal information from children. If Mula learns that a child has provided personal information without proper authorization, Mula may delete or restrict that information.
16. International use
Mula may operate across multiple countries as it grows. Information may be processed in countries where Mula, its team, hosting providers, infrastructure providers, or service providers operate. Where required, Mula should use appropriate safeguards for cross-border data transfers.
18. Marketing communication
Mula may send product updates, onboarding messages, merchant education, or marketing messages where permitted. Users may opt out of non-essential marketing messages. Mula may still send important service messages related to accounts, orders, security, payments, or legal notices.
19. Data breach handling
If Mula becomes aware of a personal data breach, Mula should assess the risk, take steps to contain it, and notify affected users or regulators where required by applicable law.
20. Changes to this Privacy Policy
Mula may update this Privacy Policy as the product evolves. The updated version will be posted on this page with a new last updated date. Where changes are material, Mula may notify users through the website, dashboard, email, or other appropriate channels.
21. Contact
Privacy questions can be sent to support@mula.store.