Privacy Policy

1. Introduction

At Momo Pulse, we are deeply committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our cloud communications platform, website, and related services.

We operate in strict compliance with the Personal Data Protection Act (PDPA) of Tanzania, guidelines issued by the Tanzania Communications Regulatory Authority (TCRA), and other applicable international data protection standards.

2. Information We Collect

We collect information through various interactions with our platform:

A. Information You Provide to Us

• Account Information: Name, email address, phone number, company name, and job title when you register for a workspace.
• Billing Information: Billing address, tax identification numbers (TIN/VRN), and payment details. (Note: Actual payment processing is handled securely by our payment partners; we do not store full credit card numbers).
• Support Data: Information you provide when contacting our support team or requesting a demo.

B. Communications Data (Processed on Your Behalf)

As a communications platform, we process data on behalf of our clients (Tenants). This includes:

• Call Data Records (CDRs): Metadata such as source/destination numbers, call duration, routing paths, and timestamps.
• Messaging Metadata: Sender/recipient numbers, delivery statuses, and read receipts for SMS and WhatsApp Cloud API.
• Media & Recordings: Call recordings, voicemails, and rich media (images/documents) sent via WhatsApp, strictly subject to your workspace configuration and retention settings.
• AI & IVR Logs: Transcripts, tool payloads, and routing decisions made by AI agents or IVR flows.

C. Automatically Collected Information

• Device & Usage Data: IP addresses, browser types, operating systems, and interaction logs within the Momo Pulse dashboard.
• Cookies & Tracking: Session cookies required for authentication and analytics tracking to improve platform performance.

3. How We Use Your Information

We use the collected data for the following purposes:

• Service Delivery: To route calls, deliver messages, execute AI agent logic, and provide the core Momo Pulse functionality.
• Billing & Administration: To process payments via Mastercard, Visa, and local Tanzanian mobile money networks (M-Pesa, Tigo Pesa, Airtel Money, HaloPesa, T-Pesa, Ezypesa), and to generate invoices.
• Platform Improvement: To monitor system performance, troubleshoot routing issues, and develop new features.
• Security & Fraud Prevention: To authenticate users, detect unauthorized access, and prevent spam or fraudulent telecom activity.
• Compliance: To fulfill legal obligations under Tanzanian telecommunications and data protection laws.

4. Data Sharing & Disclosure

We do not sell your personal data. We only share data under the following circumstances:

• Telecommunication Partners: We share necessary routing metadata (like phone numbers) with downstream carriers and aggregators to connect calls and deliver SMS/WhatsApp messages.
• Service Providers: Trusted third-party vendors who assist with hosting, payment processing, and customer support. These providers are bound by strict data processing agreements.
• Legal & Regulatory Authorities: We may disclose data if required by law, subpoena, or lawful requests by Tanzanian authorities (such as TCRA or law enforcement) to investigate fraud, abuse, or security threats.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred subject to the same privacy commitments.

5. Data Retention & Storage

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations.

• Account Data: Retained for the lifetime of your active account.
• Call Recordings & Media: Retained based on the specific configuration set by the Tenant administrator. Tenants can delete recordings at any time.
• Telecom Metadata (CDRs): Retained for a minimum period as mandated by Tanzanian telecommunications regulations for audit and billing dispute purposes.

Data is stored securely using enterprise-grade cloud infrastructure, with data localization practices applied where required by Tanzanian law.

6. Security Measures

We implement robust technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Role-based access controls (RBAC) and multi-factor authentication (MFA) for administrative access.
• Regular security audits, vulnerability scanning, and automated threat detection.
• Strict logical separation of tenant data within our multi-tenant architecture.

7. Your Data Protection Rights

Under the Tanzanian Personal Data Protection Act (PDPA), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention requirements (e.g., telecom metadata retention laws).
• Restriction: Request that we limit the processing of your data.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Data Portability: Request your data in a structured, commonly used, and machine-readable format.

To exercise these rights, you can submit a deletion request online or contact our Data Protection Officer using the details below.

8. Cookies & Tracking

Our platform uses cookies to maintain user sessions, remember preferences, and secure your account. We also use analytics cookies to understand how users interact with our website. You can control cookie preferences through your browser settings, though disabling essential cookies may prevent you from accessing the Momo Pulse dashboard.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending an email notification to account administrators.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at: