Legal

Privacy Policy

Last updated: June 2025

This Privacy Policy explains how Rada collects, uses, and protects information about businesses and individuals who use the Rada Vendor portal to manage promotions, vouchers, and campaigns on the Rada platform.

1. Information We Collect

Account information. When you register as a vendor, we collect your name or brand name, contact email, phone number, and any logo or brand assets you upload. Registered businesses also provide a legal business name and registration number.

Account credentials. We collect your login email and securely store authentication credentials. Passwords are hashed and never stored in plain text.

Identity verification (KYC) data. To unlock withdrawals and promotions, individuals complete an identity check. Registered businesses also upload a registration certificate and an owner or director ID. These documents are stored in restricted-access file storage and reviewed by our team.

Payout data. When you withdraw your earnings, we collect the M-Pesa phone number you provide and process the payout through Safaricom Daraja.

Campaign and voucher data. We collect details of every voucher and promotion you create, including discount values, expiry dates, redemption limits, and associated images.

Redemption data. We record each time a user redeems one of your vouchers, including a timestamp and an anonymised user reference, for reporting and fraud prevention purposes.

Usage data. We collect information about how you use the vendor portal. pages visited, features used, and actions taken. to improve the platform.

2. Cookies

The vendor portal uses a strictly necessary authentication session cookie to keep you signed in. We do not use advertising or third-party analytics cookies.

3. How We Use Your Information

We use your information to:

• Operate and maintain your vendor account
• Verify your identity (and business documents, when required) before unlocking withdrawals and promotions
• Display your brand and promotions to Rada users
• Track and report voucher redemptions to you
• Process payouts of your earnings via M-Pesa
• Send important account notifications and platform updates
• Detect and prevent fraudulent redemptions
• Improve the Rada Vendor platform
• Comply with legal and accounting obligations

4. Sharing Your Information

We do not sell your business data. We share information only as follows:

Rada users. Your brand name, logo, venue name, and voucher details are displayed publicly to Rada app users.

Payout processing. Payouts are processed by Safaricom through the M-Pesa Daraja API, which receives your phone number and the payout amount.

Service providers. We use Supabase for database and authentication, Cloudflare for hosting, and Resend for transactional email. These providers process data on our behalf under appropriate data protection agreements.

Legal requirements. We may disclose information if required by law or to protect the rights and safety of Rada, our users, or the public.

5. Data Retention

We retain your vendor account data for as long as your account is active. Voucher, redemption, and payout records are retained for a minimum of 7 years for accounting and audit purposes. You may request closure of your vendor account at any time by contacting us.

6. Security

Access to the vendor portal requires authentication. All data is encrypted in transit using TLS and at rest using AES-256 (a default protection provided by our database infrastructure provider, Supabase. see Supabase's security documentation), and we implement database-level access controls so vendor accounts can only access their own data.

7. International Data Transfers

Your business data is primarily stored with Supabase in the European Union (Frankfurt, Germany). The vendor portal is hosted on Cloudflare Workers, which may process traffic through infrastructure in multiple regions.

8. Your Rights

You have the right to access, correct, or request deletion of your business data at any time. To exercise these rights, contact us at hello@radaapp.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the date above.

10. Contact Us

For privacy questions, contact us at hello@radaapp.com.