Customer and merchant agreement
Terms and Conditions
These terms explain how merchants, their authorised users, and customers may use Keshopay payment services, the responsibilities of each party, and the protections that continue to apply under Tanzanian law.
Review draft: complete the BRELA registration number, TIN, business licence number, address, email, and toll-free contact fields before publishing this document as an approved customer notice.
About these terms and the parties
“Keshopay”, “we”, “us”, and “our” mean the legal entity identified below. “Merchant” means the business that has contracted to use Keshopay. “Customer” means a person who pays, receives a refund, authorises a mandate, raises a complaint, or otherwise interacts with a merchant through Keshopay.
These public terms operate with the merchant order form, approved pricing schedule, product disclosures shown before a transaction, and any provider terms that are expressly presented to the relevant user. If a signed merchant agreement conflicts with these terms, the signed agreement governs the merchant relationship, but neither document removes mandatory consumer rights.
- Legal entity:
- Kesho Technologies Company Limited
- BRELA registration number:
- [insert BRELA company registration number]
- TIN:
- [insert Tanzania Revenue Authority TIN]
- Business licence number:
- [insert business licence number]
- Regulatory role:
- Kesho Technologies Company Limited does not hold or claim a direct Bank of Tanzania payment-service licence or approval. Regulated payment processing is provided through Malipo Pay and AzamPay under their applicable licences and approvals, where each provider integration is enabled and operationally certified.
- Address:
- [insert registered physical and postal address, Tanzania]
- Email:
- [insert customer-support email]
What Keshopay provides
Keshopay is the payment-orchestration and merchant-operations technology product of Kesho Technologies Company Limited. Depending on the enabled product, this may include hosted checkout, payment links, invoices, customer-authorised recurring collection requests, refunds, payouts, provider routing, reconciliation, reporting, webhooks, and complaint tracking.
Kesho Technologies Company Limited does not hold or claim a direct Bank of Tanzania payment-service licence or approval. Regulated money movement is performed through third-party providers Malipo Pay and AzamPay under their applicable licences and approvals, where the relevant integration is enabled and operationally certified. Keshopay does not ask a customer to disclose a wallet PIN or one-time password and does not presently provide a consumer deposit account or stored-value wallet.
Eligibility, authority, and account access
- A merchant must be duly established, provide complete and accurate onboarding information, pass applicable KYB and risk checks, and use production services only after approval.
- A platform user must be at least 18 years old, authorised by the relevant organisation, and use only the tenant and projects to which access has been granted.
- Customers must provide accurate transaction information and have authority to use the selected payment method.
- Account credentials, API keys, recovery codes, and signing secrets must be kept confidential and may not be shared between people or environments.
Instructions, authorisation, and transaction status
An instruction is treated as authorised when it is submitted through a valid signed-in session, API credential, hosted capability link, or provider approval flow. Customers remain in control of their mobile-money approval and should verify the merchant, amount, fees, and total before confirming.
A submitted instruction may be pending while a provider completes processing. A timeout or unknown outcome does not mean the transaction failed. Keshopay will query status or wait for a verified callback and will not automatically send an unknown payment to a different provider. Users must not repeat a payment merely because confirmation is delayed.
Transaction records and receipts may be delivered electronically. Users should retain the Keshopay payment reference and any provider reference.
Acceptable use
You must not use Keshopay for unlawful, fraudulent, deceptive, sanctioned, abusive, or unauthorised activity; interfere with platform security; submit another person's data without a lawful basis; attempt to access another tenant or project; disguise transaction purpose; or use sandbox credentials in production.
Merchants must describe goods and services accurately, honour their customer obligations, maintain lawful refund and complaint practices, and promptly provide information required for fraud, AML, sanctions, consumer-protection, reconciliation, or regulatory review.
Prices, fees, taxes, and settlement
The exact customer amount, any customer-paid fee, applicable configured tax label, and total are displayed before confirmation. A customer will not be charged a Keshopay fee that was not disclosed before the transaction. Merchant pricing, provider costs, settlement deductions, and taxes are governed by the approved pricing plan and merchant agreement.
Published prices are in Tanzanian shillings unless expressly stated otherwise. A pricing quote is time-limited and bound to the transaction for which it was issued. More information appears in the Fees & Charges Notice.
Cancellations, refunds, reversals, and disputes
A payment instruction generally cannot be cancelled after it has been accepted for processing. A merchant may issue a full or partial refund subject to the original payment status, the remaining refundable amount, provider availability, risk controls, and any required production approval. A refund is complete only when its status is confirmed as successful.
Reversals, duplicate or erroneous debits, excess charges, fraud claims, and non-delivery disputes will be investigated fairly. Any remedy may include correction, refund, apology, compensation where legally required, or another appropriate action. A customer's statutory right to complain or seek redress is not limited by these terms.
Security responsibilities
- Never disclose a PIN, OTP, password, recovery code, API secret, or webhook signing secret to Keshopay support or a merchant.
- Check the amount and merchant name on the provider prompt before approving.
- Notify Keshopay and the relevant provider immediately if credentials, a device, or payment method may be compromised.
- Merchants must use supported security controls, restrict access by role and project, remove departed users promptly, and verify webhooks before acting on them.
Availability and third-party services
We operate controls intended to keep the service secure and available, but mobile networks, banks, payment providers, telecommunications, internet services, and scheduled maintenance can affect processing. We will not describe a transaction as successful until reliable evidence supports that status.
Planned maintenance and material incidents are handled under the Service & Incident Commitments. Any contractual availability commitment for a merchant is stated in its signed agreement and does not convert a pending provider outcome into a failed transaction.
Personal data and communications
We process personal data to provide transactions, secure accounts, prevent fraud, comply with law, support customers, resolve complaints, and operate the service. The Privacy Notice explains the data, purposes, recipients, retention, transfers, and rights available to data subjects.
Operational, security, transaction, legal, and complaint messages are service communications. Marketing requires the applicable consent and can be stopped without preventing necessary service messages.
Restriction, suspension, and termination
We may restrict or suspend access where reasonably necessary to protect customers or systems, comply with law or regulator/provider requirements, investigate suspected fraud, address overdue contractual obligations, or respond to a material breach. Where lawful and safe, we will provide reasons and a route to review.
A merchant may terminate in accordance with its signed agreement. Termination does not erase accrued payment, settlement, refund, complaint, confidentiality, audit, or legal-retention obligations. Customers may stop using the service at any time, subject to completion of already authorised transactions.
Responsibility and legal rights
Each party is responsible for loss caused by its fraud, wilful misconduct, negligence, breach of law, or material breach of its obligations. Keshopay is responsible for its own services and does not disclaim responsibility that Tanzanian law does not permit it to exclude. A merchant remains responsible for its products, fulfilment, customer representations, and use of Keshopay.
Commercial liability allocation between Keshopay and a merchant belongs in the signed merchant agreement. Nothing in these public terms excludes liability for fraud or wilful misconduct, limits a consumer's right to legal action, or removes any refund, compensation, privacy, complaint, or other mandatory statutory remedy.
Changes to these terms
We may update these terms for legal, regulatory, security, provider, or product reasons. Material adverse changes will be notified in writing or electronically before they take effect where required. The notice will identify what changed and when it becomes effective. Changes do not retrospectively alter an already accepted transaction disclosure.
Governing law, complaints, and contact
These terms are governed by the laws of the United Republic of Tanzania. Courts and competent regulators retain the jurisdiction provided by law. Before regulatory escalation, customers should use the internal process in the Complaints & Redress Procedure; this does not prevent urgent relief or another remedy that cannot lawfully be restricted.
- Legal entity:
- Kesho Technologies Company Limited
- BRELA registration number:
- [insert BRELA company registration number]
- TIN:
- [insert Tanzania Revenue Authority TIN]
- Business licence number:
- [insert business licence number]
- Regulatory role:
- Kesho Technologies Company Limited does not hold or claim a direct Bank of Tanzania payment-service licence or approval. Regulated payment processing is provided through Malipo Pay and AzamPay under their applicable licences and approvals, where each provider integration is enabled and operationally certified.
- Address:
- [insert registered physical and postal address, Tanzania]
- Email:
- [insert customer-support email]