Privacy notice

Who we are

Bobplus Africa Ltd, Nairobi, Kenya, runs Lipa. For the payments, payroll and expense records an organization keeps in Lipa, that organization is the data controller and we process the data on its behalf. For account, security and verification data we are the controller.

Data we handle

• Account data: name, email, password (stored hashed), two-factor and passkey settings, sessions and devices you sign in from.
• Organization verification (KYB): legal name, registration number, tax ID (for example a KRA PIN), address, directors’ names and ID numbers, and the documents you upload.
• Payees and employees: names, phone numbers, bank details, statutory IDs (KRA PIN, NSSF, SHIF) and pay, entered by your organization.
• Payments and expenses: amounts, recipients, receipts, approvals and the audit trail of who did what and when.
• Technical data: IP address, browser and request identifiers kept with security and audit records.

Why we use it

• To provide the service your organization signed up for: paying people, running payroll and reimbursing expenses (contract).
• To meet legal duties: tax and statutory returns, anti-money-laundering checks, sanctions screening and record keeping (legal obligation).
• To keep accounts and money safe: step-up confirmation, fraud checks and audit logs (legitimate interest).

We do not sell personal data or use it for advertising.

Who we share it with

• Payment providers (mobile money operators and banks) receive the name, number or account and amount needed to make each payment.
• Regulators and authorities (for example KRA and the Financial Reporting Centre) when the law requires it.
• Hosting, storage and error-monitoring providers bound by contract, with account numbers and phone numbers masked in monitoring.

How long we keep it

• Financial records (payments, payroll, expenses, ledger) and the audit trail: at least 7 years, as tax and anti-money-laundering law requires.
• Invitations that were never accepted: 30 days after they expire.
• Inactive sign-in sessions: 30 days.
• Mobile notification tokens not refreshed: 180 days.
• Fraud-check notes: 2555 days.

Data past its period is deleted automatically every day.

Your rights

You can ask to be told what data we hold about you, to get a copy, to correct it, to object to its use, and to have it erased. When records must be kept by law, erasure replaces your name and contact details with a pseudonym while the financial record stays. Requests about an organization’s payroll or payments go to that organization, which can erase a former member’s or employee’s data from Lipa.

How we protect it

Bank details, phone numbers, salaries and statutory IDs are encrypted at rest; uploaded documents are stored privately and only shown through short-lived links to people allowed to see them. Money movements need a second person’s approval and a fresh confirmation of identity.

Contact and complaints

Write to our data protection officer at [email protected]. If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner (ODPC), Kenya.