Privacy Policy

This Privacy Policy explains how Ottocare Garage ERP collects, uses, and protects personal information when you use the platform.

1. Who we are

Ottocare operates a multi-tenant garage management platform. Each client organisation (tenant) controls operational data in its own workspace. Platform operators process limited account and support data to run the Service.

2. Information we collect

• Account data: names, emails, phone numbers, roles, and authentication details for users.
• Organisation data: company name, contacts, subscription and billing metadata.
• Operational data you enter: customers, vehicles, jobs, invoices, inventory, and related records (controlled by your organisation).
• Technical data: IP address, browser type, device info, session logs, and security events.
• Cookies: see our Cookie Policy.

3. How we use information

• To provide, secure, and improve the Service.
• To authenticate users, enforce permissions, and prevent abuse.
• To communicate service notices, support responses, and billing where applicable.
• To meet legal and regulatory obligations.

4. Sharing

We do not sell personal data. We may share data with infrastructure providers under contract, with partners who onboard your organisation where applicable, or when required by law.

5. Your rights

Depending on applicable law (including the Kenya Data Protection Act, 2019), you may request access, correction, deletion, or restriction of personal data. Tenant-held customer data should first be requested from the relevant garage organisation. See Data Protection.

6. Security

We use access controls, encryption in transit where configured, and operational safeguards. Report suspected incidents promptly.