Sage RX Back to Sage RX
PRIVACY & YOUR DATA

Privacy Policy

What information Sage RX collects, how we use it, who helps us run the service, and how you can request access or correction.

Effective 19 October 2026Version 1.0Sage RX Limited · Kenya
This policy applies to Sage RX's financial-recordkeeping and educational decision-support services. Sage RX does not hold or transfer customers' business money.
01

Who is responsible for your information

Sage RX is a financial-intelligence and business-learning platform operated under the Sage RX Limited name in Westlands, Nairobi, Kenya. For privacy questions, contact hello@sage-rx.com or call +254 723 158 920.

When you create a business workspace, Sage RX processes the account details and business records necessary to supply the service. Members should only submit information they are entitled to use. The relevant business may have additional responsibilities for personal information it enters into its own workspace.

02

Information we collect

Sage RX does not directly retrieve your live bank or M-PESA balances through this service and does not ask you to provide your payment PIN or complete card details. Financial records in the app come from information you enter or import.

  • Account and identity details: name, email address, account verification and login status, authentication-provider identifiers, and information used for access protection.
  • Workspace details: business name, industry or stage, business goals, workspace members, their roles and access permissions.
  • Financial records you provide: recordkeeping accounts, opening balances, income and expense transactions, categories, descriptions, invoices, bills, budgets, goals and eligible CSV file content during import.
  • Subscription and membership data: plan selection, access dates, payment reference and verification status, billing receipts, workshop or membership activity where relevant.
  • Service and support data: security and audit activity, technical diagnostics, feature usage, AI questions and responses, support requests, preferences and optional notification permissions.
03

Why we process information

We process relevant data to register and protect accounts; operate the workspace; display financial summaries and indicative risk scenarios; answer Ask Sage questions using permitted business context; manage plans and membership services; respond to support and privacy requests; prevent misuse; and maintain service reliability.

Depending on the specific activity, processing may be needed to perform our service agreement, meet legal requirements, pursue legitimate security and operational interests, or act on a relevant user choice or consent. Optional promotional messages are separate from necessary security and service communications.

04

Our service providers and data sharing

Sage RX uses service providers to run the platform. These include Floot and its managed database infrastructure for hosting; transactional email infrastructure associated with Sage RX; Paystack for subscription checkout when enabled; and selected AI services for providing requested assistant features. Optional mailing and notification providers may process contact details only for the relevant functions.

Encrypted independent database exports may be stored in access-restricted Google Drive storage for resilience. Sage RX does not place raw database exports in public storage. We do not disclose a business's financial records as public testimonials or marketing material without the necessary authorization.

Providers may operate outside Kenya. We assess relevant contractual and technical safeguards and handle international transfers under applicable law. Contact us for more information about the providers and safeguards relevant to your records.

05

AI assistance and financial information

Ask Sage may use relevant information from your workspace to respond to questions you submit. AI-generated explanations can be incomplete or inaccurate and should be reviewed against your actual records. Sage RX does not treat an AI response as authorization to transfer funds or to change confirmed subscription payments.

The Status Dashboard and Red Flag Radar interpret business-entered records and assumptions, not verified financial institution balances. Forecasts are indicative planning information, not guaranteed outcomes or individualized investment advice.

06

Sign-in technology, cookies and notifications

We use necessary browser or session technology to help authenticate your account, remember essential security state and keep the service functional. Third-party sign-in providers may also apply their own login security practices. Browser notifications, where offered, require the device/browser permission and can be changed in your device settings.

Marketing messages are subject to the applicable opt-in or other lawful basis and include an opt-out route. You can contact hello@sage-rx.com about your communication choices.

07

How we protect your data

We apply access controls intended to limit business records to authorized workspace members, use supported encrypted connections and provider-managed storage protections, protect server-side credentials, and keep security and audit information where needed. Administrator-sensitive actions can require additional authentication.

No internet service can guarantee absolute protection. We review security controls and incidents and may temporarily restrict affected functionality to protect customers and investigate problems. Users should keep their login credentials secure and report suspected account misuse promptly.

08

How long we keep information

Information is kept for the period needed to operate an active account and meet appropriate contractual, operational, dispute-resolution, security or legal obligations. After cancellation or suspension, some records may remain for a limited recovery or retention period. Billing and audit records and encrypted backups may follow separate retention requirements.

Deletion is not instantaneous: requests are authenticated and reviewed for workspace authority, applicable retention exceptions and backup lifecycle. We will explain the outcome of a request rather than claim deletion occurred before it is verified. A universally fixed purge date is not currently guaranteed.

09

Access, correction and deletion requests

You may contact hello@sage-rx.com to ask what personal information Sage RX holds about you, request access or correction, or request deletion or another applicable data right under Kenyan law. We may need to verify your identity and, for business-wide data, your authority to act for the workspace.

Some requests may be limited by lawful recordkeeping obligations or other valid grounds. We will review the request, explain relevant exceptions and communicate the next steps. Where appropriate, you may raise unresolved concerns with Kenya's Office of the Data Protection Commissioner (ODPC).

10

Contact, complaints and updates

If you have a privacy or security concern, email hello@sage-rx.com with enough detail for us to identify the matter without sending passwords, M-PESA PINs or full card numbers. Our public telephone number is +254 723 158 920.

We may update this notice when our services, processing arrangements or legal requirements change. The current published version and effective date appear at the top of this page. Material changes will be communicated when required by applicable law.

Contact Sage RX

Questions about these terms, your account or personal information?

hello@sage-rx.comPhone: 0723 158 920