Mula
Legal

Privacy Policy

How Mula collects, uses, stores, shares, and protects information across the website, storefronts, merchant services, and support channels.

This is a comprehensive MVP privacy draft for product design and early implementation. It should be reviewed for Kenya Data Protection Act compliance before production launch.

Last updated: June 2026

1. Overview

This Privacy Policy explains how Mula collects, uses, stores, shares, and protects information when people use Mula's website, store creation tools, storefronts, merchant services, support channels, and related products, including any AI-assisted features Mula makes available.

Mula may process personal information about merchants, customers, visitors, support contacts, drivers, partners, and platform users.

2. Information we collect

Mula may collect information directly from users, automatically through usage of the service, or from third-party services connected to Mula.

  • Name, email address, and phone number
  • Business name, category, location, store name, and store link
  • Product information, product images, store logo, order details, delivery or pickup information, and customer contact information
  • Payment status or payment reference information
  • Support messages, device/browser information, usage analytics, IP address, cookies, and similar technologies

3. Information merchants provide

Merchants may provide personal account details, business details, store details, product listings, images, prices, inventory information, customer communication records, payment or settlement details, verification documents, preferences, and settings. Merchants are responsible for ensuring they have the right to upload or share this information.

4. Information customers provide through storefronts

When customers browse or place orders through a Mula-powered storefront, Mula may collect customer name, phone number, email where provided, delivery address or pickup preference, order details, product choices, payment method or status, customer notes, and messages sent to the merchant. This information is used to help the merchant receive, manage, and fulfill the order.

5. Information collected automatically

When people use Mula, we may collect pages visited, buttons clicked, signup progress, store setup progress, browser type, device type, approximate location from IP address, session information, error logs, and performance information. This helps Mula fix bugs, improve setup flows, prevent abuse, and support users.

6. How we use information

Mula may use information to create and manage accounts, create and display storefronts, process and manage orders, help merchants communicate with customers, provide support, improve store setup flows, generate AI-assisted suggestions, maintain security, detect fraud or abuse, verify accounts, manage payment status, send important service messages, improve performance, understand usage, and comply with obligations.

8. Mula AI and generated content

Mula AI may process merchant-provided store information, product information, customer order context, and support context to generate descriptions, taglines, categories, setup recommendations, order summaries, customer reply drafts, and support suggestions. AI-generated suggestions are assistive and should be reviewed before publishing, sending, or relying on them. Mula should not use sensitive personal information for unnecessary AI processing.

9. Payments and third-party services

Mula may use third-party providers for payments, hosting, authentication, SMS or OTP delivery, email, messaging, analytics, error tracking, AI infrastructure, maps, or delivery tools. These providers may process information according to their own terms and privacy policies. Mula should share information only when needed to provide services, comply with law, prevent fraud, improve reliability, or support users.

10. How we share information

Mula may share information with merchants when customers place orders, with customers when order status or merchant information must be shown, with payment providers, support providers, hosting and infrastructure providers, analytics providers, regulators or authorities where legally required, and professional advisers where needed. Mula should not sell personal information to advertisers.

11. Data security

Mula uses reasonable technical and organizational measures to protect information. Measures may include access controls, authentication, secure hosting, encryption where appropriate, monitoring, backups, audit logs, and limited employee access. No system can be guaranteed perfectly secure. Users should protect login details and notify Mula about suspected unauthorized access.

12. Data retention

Mula keeps information for as long as needed to provide services, maintain accounts, process orders, support merchants and customers, meet operational needs, prevent fraud or abuse, and comply with legal, tax, accounting, or regulatory obligations. When information is no longer needed, Mula may delete, anonymize, or archive it.

13. User rights

Depending on applicable law, users may have the right to be informed, access personal information, correct inaccurate information, request deletion, object to processing, restrict processing, request data portability, withdraw consent where processing depends on consent, or complain to a data protection authority. Requests can be sent to support@mula.store. Mula may need to verify identity before acting on a request.

14. Merchant responsibility for customer data

Merchants using Mula may receive customer information to fulfill orders. Merchants should use customer data only for order-related purposes, protect it, avoid unnecessary sharing, avoid spam, respect customer privacy, and delete or secure data they no longer need. If merchants export or copy information outside Mula, they are responsible for how they handle it.

15. Children's privacy

Mula is not designed for children. Mula does not knowingly collect personal information from children. If Mula learns that a child has provided personal information without proper authorization, Mula may delete or restrict that information.

16. International use

Mula may operate across multiple countries as it grows. Information may be processed in countries where Mula, its team, hosting providers, infrastructure providers, or service providers operate. Where required, Mula should use appropriate safeguards for cross-border data transfers.

17. Cookies and analytics

Mula may use cookies and similar technologies to keep the site working, support login and sessions, remember preferences, understand usage, improve setup flows, measure performance, and prevent abuse. More information is available in the Cookie Policy.

18. Marketing communication

Mula may send product updates, onboarding messages, merchant education, or marketing messages where permitted. Users may opt out of non-essential marketing messages. Mula may still send important service messages related to accounts, orders, security, payments, or legal notices.

19. Data breach handling

If Mula becomes aware of a personal data breach, Mula should assess the risk, take steps to contain it, and notify affected users or regulators where required by applicable law.

20. Changes to this Privacy Policy

Mula may update this Privacy Policy as the product evolves. The updated version will be posted on this page with a new last updated date. Where changes are material, Mula may notify users through the website, dashboard, email, or other appropriate channels.

21. Contact

Privacy questions can be sent to support@mula.store.