Duka IntelligenceDuka Intelligence

Privacy Policy

1. Data Controller

The data controller responsible for processing personal data is:

Akili Data
Operator of the Duka Intelligence Platform
38286-00100
Nairobi
Kenya
Email: tsah@dukaintelligence.co.ke

2. Data We Collect

When you use the Platform, we may process the following types of data depending on your configuration, integrations, and authorized use.

Business and Operational Data

Including:

  • Business records, transactions, operational metrics, and internal system data
  • Customer, member, supplier, product, service, task, or workflow records
  • Reports, spreadsheets, documents, files, and structured datasets
  • Knowledge objects, summaries, citations, lineage, freshness, and quality metadata

Communications and Channel Data

Where connected or authorized:

  • Email messages and metadata
  • Chat, WhatsApp, collaboration, and support conversations
  • Social media messages, comments, inquiries, engagement signals, and related metadata
  • Response drafts, follow-up items, and workflow activity generated through the Platform

Personal and Account Information

Where applicable:

  • Names, email addresses, phone numbers, job roles, and organization details
  • User names, login credentials, workspace membership, and access permissions
  • Customer or contact information contained in connected systems or communications

Technical and Usage Data

  • IP address
  • Device information
  • Browser type
  • Cookies and usage analytics
  • Logs, audit records, query history, and security events

3. How We Use Your Data

We process data for the following purposes:

  • Providing Platform Services: Including connectors, ingestion, knowledge processing, governed retrieval, Duka Agents, dashboards, APIs, chat interfaces, and workflow support.
  • Data Integration: Synchronizing data from authorized business systems, documents, communication channels, social channels, cloud storage, and external APIs.
  • AI-Assisted Features: Supporting search, retrieval, summarization, recommendations, response drafting, workflow routing, and approved task execution.
  • Governance and Security: Applying access controls, tenant isolation, citations, lineage, freshness checks, audit logs, fraud prevention, and system security.
  • Platform Improvement: Monitoring performance, diagnosing issues, improving product functionality, and maintaining service reliability.
  • Legal Compliance: Meeting legal, regulatory, contractual, and security obligations.

4. Legal Basis for Processing

Where applicable, we process personal data based on:

  • Performance of a contract with users or customers
  • Legitimate business interests in providing, securing, and improving services
  • User consent where required
  • Compliance with applicable legal obligations

5. Sharing Data with Third Parties

We may share data with trusted service providers when necessary to operate the Platform.

Examples include:

  • Cloud hosting providers
  • Infrastructure, database, storage, monitoring, and security services
  • AI processing services
  • Communication, messaging, social, and integration partners

We only share the minimum data necessary for these services, subject to applicable agreements and safeguards.

6. Data Retention

We retain data only for as long as necessary to provide our services, meet legal obligations, resolve disputes, maintain security, and comply with contractual requirements.

General retention principles include:

  • Customer Data retained while accounts or applicable services remain active
  • Account data retained until account closure or as required for legal and operational purposes
  • Logs and audit records retained for security, compliance, troubleshooting, and performance monitoring

7. Security

We implement technical and organizational safeguards including:

  • Secure hosting environments
  • Encrypted data transmission
  • Access control systems
  • Tenant or workspace separation where applicable
  • Monitoring, logging, and operational controls

However, no digital system can guarantee absolute security.

8. Your Rights

Depending on applicable law, you may have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Restrict processing
  • Object to certain processing activities

Requests can be submitted using the contact details below.

9. Changes to this Policy

We may update this Privacy Policy from time to time.

Any updates will be published on this page with a revised Last Updated date.

Last Updated: July 23, 2026

10. Contact

For questions about this Privacy Policy or our data practices, please contact:

Duka Intelligence
38286-00100
Nairobi
Kenya
Email: tsah@dukaintelligence.co.ke