1. Who We Are
Bobsave ("we", "us", "our") is a business automation company operated by Bobomurithi, based in Nairobi, Kenya. We operate the website bobsave.com and provide AI-powered business automation workflow services to clients across Africa and beyond.
For the purposes of data protection legislation, Bobsave (Bobomurithi) is the data controller of your personal information.
Contact details:
Email: bobomurithi@gmail.com
WhatsApp / Phone: +254 702 505 946
Address: Nairobi, Kenya
2. Information We Collect
We collect personal data that you provide directly to us, and some information collected automatically when you use our services:
Information you provide directly:
- Name (first and last name) when you create an account or contact us
- Email address when you sign up, subscribe, or contact us
- Phone number when you reach out via WhatsApp or phone
- Business name and business-related information when you enquire about or purchase our services
- Password (stored securely in hashed form) when you create an account
- Payment information processed securely through Paystack. We do not store your card details on our servers
Information collected automatically:
- Browser type, device type, operating system, and screen resolution
- Pages visited, time spent on pages, and navigation patterns on our site
- IP address and approximate geographic location
- Referring website or source
- Cookie identifiers and usage analytics data
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing our services: To set up your account, build and deliver your automation workflows, manage your subscription, and provide customer support
- Processing payments: To process setup fees and monthly subscription payments through our payment processor, Paystack
- Customer support: To respond to your enquiries, provide technical support, and communicate about your automation workflows
- Service improvement: To analyse usage patterns, improve our website, and enhance our services
- Communications: To send you service-related notifications, invoices, workflow updates, and (with your consent) marketing communications
- Legal compliance: To comply with applicable laws, regulations, and legal processes in the Republic of Kenya
- Security: To detect, prevent, and address fraud, unauthorized access, and other harmful activity
4. Legal Basis for Processing (GDPR)
For visitors from the European Union, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter)
- Contract: Where processing is necessary for the performance of a contract with you (e.g., providing the automation services you have purchased)
- Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., improving our services, ensuring network security), and those interests are not overridden by your rights
- Legal obligation: Where processing is necessary for compliance with a legal obligation under Kenyan law
5. Data Sharing and Third Parties
We do not sell, trade, or rent your personal information to third parties. We may share your information with the following categories of service providers who assist us in operating our business:
- Paystack (payment processing) — Paystack processes your payment details securely. We do not store your card number, CVV, or full payment credentials on our servers. Paystack's own privacy policy applies to payment data. See: paystack.com/privacy
- Cloudflare (website hosting and security) — Cloudflare provides our website hosting, CDN, DDoS protection, and SSL certificates. Cloudflare may collect certain technical data such as IP addresses and request headers. See: cloudflare.com/privacypolicy
- n8n (workflow automation platform) — n8n is the automation engine we use to build and run your workflows. Data processed through n8n is handled in accordance with n8n's privacy policy. See: n8n.io/legal/privacy
- Google Analytics (usage analytics) — We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymised usage data. See: policies.google.com/privacy
- Google AdSense (advertising) — We use Google AdSense to display advertisements. Google AdSense uses cookies to serve ads based on your prior visits. You may opt out of personalised advertising at Google Ads Settings
We may also share information with legal authorities where required by law or to protect our rights under the laws of the Republic of Kenya.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Account data (name, email, phone, business name): Retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law
- Payment records: Retained for 7 years as required by Kenyan tax and financial record-keeping regulations
- Usage analytics: Retained for 24 months from the date of collection, after which it is anonymised or deleted
- Customer support communications: Retained for 24 months after the last interaction
- Cookie data: Retained in accordance with the cookie expiry periods described in Section 8 below
7. Your Rights Under Kenya's Data Protection Act 2019
Under the Kenya Data Protection Act 2019 (DPA 2019), you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you
- Right to rectification: You have the right to request correction of inaccurate or incomplete personal data
- Right to erasure: You have the right to request deletion of your personal data, subject to our legal obligations and legitimate business needs
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format
- Right to object to processing: You have the right to object to the processing of your personal data for certain purposes
- Right to withdraw consent: Where we rely on your consent to process data, you have the right to withdraw that consent at any time
- Right to lodge a complaint: You have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya if you believe your data protection rights have been infringed
To exercise any of these rights, please contact us at bobomurithi@gmail.com. We will respond to your request within 30 days as required by the DPA 2019.
8. Cookies
Our website uses the following types of cookies:
- Essential cookies: Required for the website to function correctly (e.g., session management, security tokens). These cannot be disabled.
- Analytics cookies (Google Analytics): Help us understand how visitors use our site. These collect anonymised data about pages visited, time on site, and navigation patterns. Duration: up to 24 months.
- Advertising cookies (Google AdSense): Used to serve relevant advertisements based on your browsing history. You can opt out of personalised advertising via Google Ads Settings.
You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data in transit (provided by Cloudflare)
- Encrypted storage for sensitive data at rest
- Secure password hashing for account credentials
- Limited access to personal data on a need-to-know basis
- Regular security reviews of our systems and third-party providers
While we take reasonable precautions, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.
10. International Data Transfers
Your personal data may be processed in countries outside of Kenya by our third-party service providers (e.g., Cloudflare, Google, Paystack, n8n). Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with the Kenya Data Protection Act 2019 and, for EU visitors, the GDPR Standard Contractual Clauses or equivalent transfer mechanisms.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.
Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: bobomurithi@gmail.com
- WhatsApp: +254 702 505 946
- Address: Nairobi, Kenya
You may also contact the Office of the Data Protection Commissioner of Kenya if you believe your data protection rights have been infringed:
Website: www.odpc.go.ke
Questions about your data?
We're happy to help with any privacy concerns or data requests.
Email Us About Privacy