Privacy policy
Last updated 2026-10-14. This policy covers the website at https://crystalerp.co.ke. The Crystal ERP application itself, and the data a customer keeps in it, are governed by the customer's licence agreement.
Who we are
Sajsoft Solutions Ltd ("we"), Raja Building, 3rd Floor, Biashara Street, Nairobi, Kenya, is the data controller for information collected on this website. Contact: info@sajsoft.co.ke, 0725 473 779 / 0731 726 021.
What we collect and why
- Enquiry, quote, demo, support and partner forms: your name, a WhatsApp number or email address, your country and business type, and any message you add. We use it to reply to you and, with your consent, to tell you about Crystal ERP. We also record which page and button you used, the campaign that brought you (UTM parameters), the referring site, the time, and the IP address, to understand where enquiries come from and to prevent abuse.
- WhatsApp: when you tap a WhatsApp link we open a chat with a pre-written message. WhatsApp (Meta) processes that conversation under its own terms. We keep the conversation as part of our sales records.
- Invoices and M-Pesa payments: we may record your contact details, the service requested, invoice details and the M-Pesa transaction reference you share for verification. Payment is made through Safaricom M-Pesa Paybill 4107499, account POS. This website does not provide online checkout or collect your M-Pesa PIN or card details.
- Site statistics: this site does not run third-party analytics. The web server keeps standard access logs (IP address, page, time) for security.
- Bot protection: forms use a hidden field and timing checks; no third-party service is involved.
Where it goes
Form submissions are stored in a private folder on our hosting and can be emailed to our sales team. We do not sell personal data. Information is shared only with providers needed to operate the service, such as hosting, email, Safaricom M-Pesa and WhatsApp, and where the law requires.
How long we keep it
Enquiries are kept for up to 24 months after the last contact, or longer if you become a customer. Order and payment records are kept for the period required by Kenyan tax and company law.
Your rights
Under the Data Protection Act, 2019 (Kenya) you may ask what personal data we hold about you, ask us to correct or delete it, object to marketing, and complain to the Office of the Data Protection Commissioner. Write to info@sajsoft.co.ke. Marketing messages stop as soon as you tell us.
Cookies and local storage
This website sets no advertising cookies. The browser keeps a small note of the campaign that first brought you here (so we know which advert worked) and whether you sent a form; nothing in it identifies you. You can clear it from your browser at any time.
Changes
We update this page when our practices change. The date at the top is the version you are reading.