Privacy Policy

1. Introduction

MahutoBulk (“we”, “our”, or “the Company”) provides bulk SMS and business messaging services to businesses in Tanzania. This Privacy Policy explains what information we collect, how we use it, and the rights you have over it — whether you are a business using MahutoBulk to send campaigns, or an individual whose phone number was uploaded by one of our business customers.

2. Information We Collect

We collect the following categories of information:

• Business account information — business name, contact name, email address, phone number, and Sender ID registration details.
• Recipient contact data — phone numbers and contact lists uploaded by our business customers for their own SMS campaigns.
• Payment and billing information— transaction records and billing details processed through our payment processor (see “Payment Processing” below). We do not store full card numbers ourselves.
• Usage and analytics data — message delivery statistics, login history, and general service usage patterns.
• Technical data — IP address, browser type, and device information collected when you use our dashboard or website.

3. How Recipient Phone Numbers Are Handled

The phone numbers and contact lists processed through MahutoBulk are uploaded by our business customers, not by the end recipients themselves. We want to be explicit about how this data is treated:

• Recipient data is used solely to deliver the specific campaign it was uploaded for.
• We do not use recipient phone numbers for our own marketing, resell or share recipient lists with other MahutoBulk customers, or combine one customer’s recipient data with another’s.
• Each business customer is responsible for obtaining lawful consent from their recipients before uploading their contact information, as set out in our Terms of Service.
• Recipient data remains associated with the business account that uploaded it, and is retained and deleted according to the schedule in “Data Retention & Deletion” below.

4. How We Use Your Information

• Provide and maintain our messaging services
• Process and deliver messages to recipients on behalf of our business customers
• Manage accounts, credits, and payments
• Send service updates and important account notifications
• Improve our services and develop new features
• Ensure platform security and prevent fraud
• Comply with legal and regulatory obligations

5. Payment Processing

Payments for SMS credit are processed through PesaPal, a licensed third-party payment gateway supporting mobile money (M-Pesa, Tigo Pesa, Airtel Money) and card payments. When you make a payment, your payment details are handled directly by PesaPal under its own privacy and security terms — MahutoBulk receives confirmation of payment and a transaction reference, not your full payment credentials.

6. Data Security

• Encryption for data in transit
• Secure, access-controlled data storage
• Authentication controls on all accounts
• Regular review of security practices

7. Data Retention & Deletion

We retain data only as long as necessary for the purpose it was collected:

• Account information — retained until you delete your account
• Message logs — retained for 90 days after delivery
• Billing records — retained for 7 years, for tax and regulatory compliance
• Usage/analytics data — retained for up to 24 months

You may request earlier deletion of your account and associated data at any time — see “Your Rights” below.

8. Third-Party Service Providers

We share limited data with the following categories of service providers, each bound by contract to protect your data and use it only for the purpose specified:

• SMS delivery partners, to transmit messages to recipient handsets
• Our payment processor (PesaPal), to process billing and payments
• Cloud hosting and infrastructure providers
• Analytics services, to help us improve the platform

9. International Data Transfers

Some of our infrastructure and service providers operate outside Tanzania. Where data is transferred internationally, we require appropriate contractual safeguards to protect it to a standard consistent with Tanzanian law.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data
• Object to certain processing of your data
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the relevant regulatory authority

To exercise any of these rights, contact us using the details in “Contact Us” below.

11. Tanzania Personal Data Protection Act, 2022

MahutoBulk processes personal data in a manner intended to align with Tanzania’s Personal Data Protection Act, 2022.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

• Email: info@ultraincrementtechnologies.co.tz
• Phone: +255 703 000 866
• Address: Mahuto Business Center, Dar es Salaam, Tanzania