Who we are
Mokasa is an AI sales agent on a business’s own WhatsApp number, operated by 40 Analytics (“Mokasa”, “we”). You can reach us at privacy@mokasa.chat.
We handle data for:
- Businesses that use Mokasa, and their team.
- Customers who message those businesses or use their store link.
For customers, the business decides how your data is used and we process it for them. For businesses and site visitors, we decide, as set out here.
What we collect
From businesses
- Contact details: name, business name, WhatsApp number, email.
- Setup: catalogue, prices, delivery zones, hours and agent settings.
- Billing details. Our payment provider handles card details; we do not store them.
- Payment keys you connect (for example Paystack), stored encrypted and used only for your shop’s payments.
From customers of a business
- Your WhatsApp profile name and number.
- Messages, voice notes and images you send, including payment screenshots.
- Order details: items, address or landmark, zone, booking times.
- Payment status. We never receive your full card number or Mobile Money PIN.
From this website
- The get-started form, only if you send it on WhatsApp.
- Short-lived server logs (IP address, browser, pages) for security.
- No cookies for ads and no third-party trackers.
Why we use it
- To run the service: replies, baskets, orders, payment links and confirmations.
- To let businesses manage their chats, orders and payments.
- To reply to people who ask us about Mokasa.
- To keep the service secure and fix problems.
- To meet legal duties, such as keeping invoices.
We do not sell personal data or market to a business’s customers ourselves.
AI and your messages
An AI model reads messages and writes replies. Our AI providers do not train on this data. The AI states only prices, stock and dates from the business’s settings, and never confirms a manual payment; a person does.
Who we share it with
- Meta and our WhatsApp provider, to send and receive messages.
- The business’s payment provider (for example Paystack), for payments.
- Cloud and AI providers, under contract.
- The business’s own systems, if it connects them.
- Authorities, only where the law requires it.
Some process data outside Ghana, Nigeria or Kenya, under contracts and safeguards.
How long we keep it
Business data: while the account is active, then briefly after, unless the law needs longer (for example tax records). Customer chats and orders: while the business has its account, unless deletion is asked for sooner. Server logs: 90 days at most.
Your rights
Under Ghana’s Data Protection Act 2012, Nigeria’s Data Protection Act 2023, Kenya’s Data Protection Act 2019 and similar laws, you can ask to see, correct or delete your data, object to its use, or complain to your data protection authority.
Customers can ask the business, or us and we pass it on. See Data deletion.
Security
Data is encrypted in transit and payment keys at rest. Each business sees only its own data. Team access is limited by role.
Children
Mokasa is not aimed at children. Businesses must not use it to sell to children where the law forbids it.
Changes
For changes that matter, we update the date above and tell businesses first.