Privacy Policy

Murua Home (Pty) Ltd ("we", "us", or "our") operates the Infinity platform ("the Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Platform.

We are committed to protecting your privacy and complying with the Botswana Data Protection Act (2018), the Protection of Personal Information Act (POPIA) of South Africa where applicable, and international best practices for data protection.

We collect the following types of information:

Account Information: Name, email address, phone number, job title, and organisation details provided during account registration.

Usage Data: Information about how you interact with the Platform, including pages visited, features used, timestamps, and device information (browser type, operating system, IP address).

Business Data: Operational data you enter into the Platform, including financial records, employee records, client information, job details, and other business content.

Communication Data: Messages, emails, and notifications processed through the Platform's communication features.

Device Information: Device identifiers, session tokens, and browser fingerprints used for security and session management.

We use your information to:

• Provide, maintain, and improve the Platform services
• Authenticate your identity and manage your account
• Process transactions and send related notifications
• Provide customer support and respond to enquiries
• Send service-related communications (updates, security alerts, account notifications)
• Analyse usage patterns to improve Platform performance and user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

The Platform includes AI-powered features that process your data to provide analytics, recommendations, and automated workflows. AI processing occurs within the Platform environment and is subject to the same security and access controls as all other data processing.

AI-generated outputs are logged and auditable. No autonomous AI actions are taken on external communications without explicit human approval. You may disable AI features at any time through the Platform settings.

Your data is stored on secure cloud infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls (RBAC) with per-tenant data isolation
• Multi-factor authentication options
• Comprehensive audit logging of all data access and modifications
• Regular security assessments and vulnerability scanning
• Automated backups with encrypted offsite storage

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

Service Providers: We use trusted third-party services for email delivery, SMS messaging, cloud hosting, and error monitoring. These providers are bound by data processing agreements and access only the minimum data necessary to perform their services.

Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if necessary to protect the rights, property, or safety of our users or the public.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify affected Tenants before any such transfer.

We retain your data for as long as your account is active or as needed to provide Platform services. Business data is retained according to your Tenant configuration. Deleted records are soft-deleted and recoverable for 90 days before permanent removal.

Audit logs are retained for a minimum of seven (7) years in compliance with financial record-keeping requirements. Upon account termination, your data is available for export for 30 days, after which it is permanently and irreversibly deleted.

Under applicable data protection laws, you have the right to:

• Access your personal data and request a copy of the information we hold about you
• Rectify inaccurate or incomplete personal data
• Delete your personal data (subject to legal retention requirements)
• Restrict processing of your personal data in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent for processing based on consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

The Platform uses essential cookies for authentication and session management. These are necessary for the Platform to function and cannot be disabled.

We may use analytics cookies to understand how the Platform is used and to improve performance. You can control analytics cookies through the cookie consent banner or your browser settings.

We do not use advertising cookies or tracking pixels. We do not engage in cross-site tracking.

Your data may be processed on servers located outside of Botswana. Where data is transferred internationally, we ensure appropriate safeguards are in place, including data processing agreements with adequate security provisions.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated to Tenants via email or in-app notification at least 14 days before taking effect. The "Last updated" date at the top of this page indicates when the most recent changes were made.

For questions, concerns, or complaints about our data handling practices, or to exercise your data protection rights, please contact:

Email: [email protected]
Address: Gaborone, Botswana

This Privacy Policy is governed by the laws of the Republic of Botswana. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Botswana.