Privacy and Security Policy

• Version Control
• Overview
• Data We Collect
• How we use collected data
• How we disclose personal data
• Your rights and choices
• Security and retention

Version Control

Overview

Ramani is building financing infrastructure for Africa's supply chain. Businesses of all sizes use our software and financial services to further their operations. Ramani cares about the security and privacy of the personal data entrusted to us.

We may collect and use personal data when we do business with you or when you do business with those that use our services. Some of our services may be accessed directly by you, including through our websites that reference this policy (e.g. ramani.io). We use internationally recognized standards for privacy and security benchmarks such as GDPR.

Data We Collect

Personal Data is any information that relates to an identified or identifiable individual and can include information about how you engage with our Services (e.g. device information, IP Address, and GPS location). In many cases, the Personal Data that you provide directly to us through our Services will be apparent from the context in which you provide the data:

• Website - ramani.io

• When you register an account on our website, we collect:
• User name, Account name, Admin phone number, GPS location
• We store product list information including but not limited to product names, pricing, vat category, and units
• When you register for our receipt processing services, we ask for information about the taxpayer registered to the business.
• If you use our inventory financing service, we collect:
• A copy of the purchase order and the receipt associated
• The distributor tax information to create an invoice
• Proof of payment as PDF, PNG, or JPEG.

• Ramani Android Applications

• When collecting orders from merchants - Ramani SFA; we store:
• We profile merchants by storing the GPS location of the merchant, store name, and store owner's phone number. This information is collected from the store owner during the registration process
• When creating an order, we collect: the items selected, the GPS location of the transaction, as well as typical order details such as payment type, order total, and order time
• When recording stock movements in and out of your warehouse - Ramani Warehouse, we store:
• Stock delivered from suppliers financed by Ramani
• Stock delivered from your suppliers not financed by Ramani
• Stock that leaves the warehouse to be sold in the market
• Stock returned to the warehouse from the market
• The users that were involved in the transaction and their signatures
• When doing random stock audits - Ramani Stock audit; We store:
• During a stock audit, we gather information about the distributor name, warehouse name, selected items, and the quantity of each item. In addition, we also collect images of the items in PDF, PNG, or JPEG format. This information is obtained during the store visit.

• Ramani WhatsApp

• When interacting with our WhatsApp platform we store
• User name, Account name, and Phone number
• We record the Order life cycle - from Order creation until the order is completed, We store
• Order Id, distributor name, supplier name
• Product list and their Prices, Proof of payment in PDF, PNG, or JPEG
• Audit trail on each order stage
• Payment details as well as delivery status

• AI Camera Network

• To Easy inventory tracking, we store:
• Real-time stock change events in Images and videos to identify changes in the number or location of items
• User's warehouse names and GPS location captured during registration

How We Use Collected Data

Ramani is building the operating system for Africa's supply chains. Since businesses in Africa are still on pen and paper, value is lost in the paper trail. We surface this value by digitizing businesses using an integrated POS and reporting tool.

• Our services

• Ramani Saas: We allow businesses to track their sales, monitor stock and manage relationships with their merchants through Ramani SFA. Through our app, businesses of all sizes can record and track where sales were made and to who, in what quantities those products were sold as well as what price. We store this data in our data centers and surface it to the user through our ramani.io dashboard to empower them to make more data-driven decisions that affect their business.
• Inventory Financing: We store sales data to determine the cash flow of a business. We use this information to better offer our services to customers. We also use this data for fraud monitoring, prevention, and detection.
• Ramani Procurement: We store procurement details to allow distributors and suppliers to better manage their inventory. We store payment details as well as delivery status so that the transactions can be as smooth as possible.
• AI camera Network: We capture and Store real-time stock change events, complete with meta-data such as the time it occurred, and an approximate measure of remaining stock within the warehouse

How We Disclose Personal Data

Ramani strives to ensure the safety and security of your data. We have policies, procedures, and security controls in place in order to make certain that only those that are permitted to access your data can do so. We also make it possible to safely share data with your business partners if approved by the host company.

• Our Users and third parties authorised by our Users:

  We share data with parties directly authorised by a User to receive Personal Data. This includes suppliers in our network that would like to see the movement of their products in the market by the distributors that they operate through. If distributors are either being financed by Ramani.io company limited or are using the Ramani procurement platform to order inventory from their suppliers, they automatically consent to allow the suppliers that are involved in transactions to view their data.

• Service providers:

  We share Personal Data with certain of our service providers subject to contract terms that limit their use of Personal Data. We have service providers that provide services on our behalf, such as identity verification services, data analysis, information technology and related infrastructure, customer service and sms or email delivery. These service providers may need to access Personal Data to perform their services. We authorise such service providers to use or disclose the Personal Data only to perform services on our behalf or comply with legal requirements. We require such service providers to contractually commit to protecting the security and confidentiality of personal Data they process on our behalf. Our service providers are predominantly located in the European Union and the United States of America.

Your Rights And Choices

You may have choices regarding our disclosure and data retention of your Personal Data

• How you can see or change your account Personal Data

  If you would like to review, correct, or update Personal Data that you have previously disclosed to us, you may do so by signing in to your Ramani account or by contacting one of our customer success representatives

• Your data protection rights

  Depending on your location and subject to applicable law, you may have the following rights with regard to the Personal Data we control about you:

  • The right to request confirmation of whether Ramani processes Personal Data relating to you, and if so, to request a copy of that Personal Data. This can currently be done by sms confirmation.
  • The right to request that Ramani rectifies or updates your Personal Data that is inaccurate, incomplete, or outdated.
  • The right to request that Ramani erase your Personal Data in certain circumstances provided by law or on termination of our contractual terms.
  • The right to request that Ramani restrict the use of your Personal Data in certain circumstances such as: permissioning data access within the customer's organisation by account type, allowing business partners to have visibility on data collected on behalf of customers using Ramani.
  • The right to request that we export your Personal Data that we hold to another company, where technically feasible; Authorised business partners looking to export data on the users of the Ramani software.
  • In some cases, you may also have the right to object to the processing of your Personal Data.

Security and Retention

We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of Personal Data. We maintain organisational, technical, and administrative measures designed to protect Personal Data covered by this policy against unauthorised access, destruction, loss, alteration, or misuse. Your Personal Data is only accessed by a limited number of personnel who need access to the information to perform their duties. We keep a record of your personal data until a request is made by our customers under certain conditions and by certain authorised users, to delete the data.

• HTTPS for secure connections

  • Ramani forces HTTPS for all services using TLS (SSL), including our public website and the Dashboard.
  • Our APIs are only served over TLS
• We use site-to-site VPN connections when integrating with third-party providers

• Audits

  We regularly audit the details of our implementation, including the certificates we serve, the certificate authorities we use, and the ciphers we support. Our security playbook is also audited by security experts based out of the United States of America. We use ISO 27001/27701 controls and GDPR as our baseline for the compliance framework.

• Encryption of sensitive data and communication

  All sensitive data stored on our devices and in our data center is encrypted with AES -256. Decryption keys are stored on separate machines.