Privacy Policy

Last updated: 31 October 2026

1. Who we are

Cjay Analytica (business registration BN-93S9R5A6, Kenya) runs the website www.cjayanalytica.com and the Cjay Analytica platform, a hosted document and finance manager that businesses use for quotations, invoices, receipts, expenses and financial reports. In this policy, “we” and “us” mean Cjay Analytica. You can reach us at support@cjayanalytica.com.

We follow the Data Protection Act, 2019 of Kenya. For data a business stores in the platform about its own customers and staff, that business is the data controller and we process the data on its behalf, under its instructions.

2. What we collect

• Account details: the name, email address and password (stored only as a secure hash) of each person who signs in to the platform, and which company and role they belong to.
• Business records: what a business enters into the platform, such as company details, logos, customer names and contact details, quotations, invoices, receipts, expenses, supplier bills, loans and assets.
• Google account data, only if a business chooses Connect Google (see section 4).
• Email settings: the address and app password a business enters so the platform can send its documents by email. The app password is stored encrypted.
• Technical data: the minimum logs our hosting providers keep to run and secure the service (for example IP address, browser type and the time of a request). The platform stores your sign-in in your browser’s local storage; it does not use advertising or tracking cookies. This website uses no cookies.
• Messages you send us, for example by email or WhatsApp.

3. How we use it

• To provide the platform: sign-in, storing and showing a business’s records, producing PDFs and reports, and sending the emails and reminders the business asks for.
• To support businesses that ask for help (see section 6), and to keep the service secure, fix faults and prevent misuse.
• To contact account owners about their account, the service, billing and important changes.

We do not sell personal data, and we do not use business records or Google data for advertising.

4. Data from Google accounts

A business can connect its own Google account in Settings → Google. With the business’s permission, the platform then uses these Google services on that account only:

• Google Drive (drive.file): to create a “Documents” folder and save the PDFs of the business’s quotations, invoices and receipts. This permission only reaches files and folders the platform itself created; we cannot see any other files in the Drive.
• Google Calendar (calendar.events): to add and update calendar events for quotations with travel dates.
• Google Tasks (tasks): to add and update follow-up to-dos for quotations.
• Basic profile (openid, email): to show which Google account is connected.

We store the Google access token encrypted, and use it only to perform the actions above when the business saves a document or asks for them. We do not read, copy or keep the contents of the Google account beyond the files, events and tasks the platform creates.

Cjay Analytica’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it or transfer it to data brokers, we do not use it to train artificial intelligence models, and people at Cjay Analytica do not read it unless the business asks us to for support, it is needed for security, or the law requires it.

A business can disconnect Google at any time in Settings → Google → Disconnect, or from its Google Account at myaccount.google.com/permissions. When it disconnects, we revoke and delete the stored token. Files, events and tasks already created stay in the business’s Google account.

5. Who we share data with

We use a small number of service providers to run the platform. They process data only to provide their service to us:

• Supabase: database, sign-in, file storage and server functions.
• Cloudflare: hosting of this website and the platform’s web pages.
• Google: our own business email, and the Google services a business connects (section 4).

These providers may store data outside Kenya. Where they do, we rely on their contractual and security commitments to protect it, as the Data Protection Act requires. We share data with authorities only where the law requires it.

6. Support access

While a business is being set up, our support staff can open its company in the platform to configure it. Once the business is live, support staff can only open it after the business’s owner or an administrator approves a request, for a limited time (1, 7 or 30 days), and the business can end that access at any time in Settings → Team.

7. How long we keep data

We keep a business’s records for as long as its account is active. When an account is closed, we delete its records within 90 days, unless the business asks us to export them first or the law requires us to keep them longer. Backups are overwritten on a rolling basis.

8. Security

Data is encrypted in transit (HTTPS). Each business’s records are separated at the database level so one business cannot see another’s. Passwords are hashed, and Google tokens and email app passwords are encrypted. No system is perfectly secure; if we learn of a breach affecting personal data, we will notify the affected businesses and the Office of the Data Protection Commissioner as the law requires.

9. Your rights

Under the Data Protection Act, 2019 you can ask to access, correct or delete personal data about you, object to its processing, or ask for a copy in a common format. If your data is held by a business that uses our platform, contact that business first; we will help it respond. Otherwise, email support@cjayanalytica.com. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).

10. Children

The platform is a business tool and is not directed at children.

11. Changes

If we change this policy, we will update the date above and, for significant changes, tell account owners by email or in the platform.

12. Contact

Cjay Analytica · support@cjayanalytica.com · +254 735 700 061 / +254 713 212 626