Privacy policy

1. Who we are

DavoBooks is operated by Webline Africa Limited. We are the controller of the personal data we collect about visitors to this website, and we act as a processor of the business records our customers store in the platform.

You can reach us about privacy at our published contact address.

2. What we collect

• Account details - your name, work email address, company name and role.
• Business records - the invoices, customers, suppliers, staff, payments and stock information you choose to enter.
• Support conversations - the messages and attachments you send us when asking for help.
• Technical data - IP address, browser type, pages requested and timestamps, kept for security and to diagnose faults.

3. Why we use it

• To create and secure your account and provide the features you have subscribed to.
• To authenticate users and protect your company data from unauthorised access.
• To provide support and respond to enquiries.
• To keep an audit trail, which is a core part of the product.
• To meet legal, tax and accounting obligations that apply to us.
• To improve reliability and fix faults.

4. Our legal basis

Where Tanzanian law requires a legal basis for processing, we rely on the performance of our contract with you for account and service data, on our legitimate interests in keeping the platform secure and reliable, on your consent where you have given it, and on compliance with legal obligations.

5. Who we share with

We do not sell personal data. We share it only where necessary:

• With service providers who host, back up or monitor the platform on our behalf, under contract and only as instructed.
• With professional advisers where genuinely needed.
• With authorities where we are legally required to disclose.
• With other users of your own company account, according to the permissions a director has granted.

6. How long we keep it

We keep account and business records for as long as your subscription is active. After cancellation we make an export available and then delete or anonymise the data within a reasonable period, except where law requires us to retain particular records for longer - for example tax and accounting records.

7. Your rights and data exports

Subject to applicable law, you may ask to access, correct, delete or restrict the processing of your personal data, and you may object to certain processing. To make a request, contact us from the email address on your account so we can verify it.

You can export your own company data from within the platform, or request an export of your records if you are closing your account.

8. How we protect it

Access is role-based, data is scoped to the company it belongs to, traffic is encrypted in transit, and sensitive actions are recorded in an audit trail. Our Security page describes these controls in more detail. If you believe you have found a vulnerability, please report it privately.

9. Where data is stored

Data is hosted on infrastructure we control or on infrastructure provided by a contracted hosting provider. Where any processing happens outside Tanzania, we require an appropriate level of protection for the data as required by applicable data protection law.

10. Changes and contact

We will update this policy when our practices or the law change, and we will change the revision date at the top of the page. If you have a question about privacy, contact us and we will respond within a reasonable period.