Version v1.1 · Effective 1 August 2026 · Farm Boksi Ltd, 3rd Floor, Olympic Building, Mwanza, Tanzania
This agreement is maintained by Farm Boksi Ltd and applies to every farmer, aggregator, buyer, cold chain provider, logistics provider, financier, input company and administrator using Nuru. Every account holder signs it electronically when they first sign in.
This Platform Usage Agreement (the "Agreement") governs your access to and use of the Nuru platform operated by Farm Boksi Ltd, 3rd Floor, Olympic Building, Mwanza, Tanzania ("Nuru", "we", "us").
By ticking the acceptance box and typing your full name, you sign this Agreement electronically. That electronic signature has the same legal effect as a handwritten signature and is recorded with a timestamp against your account.
If you accept on behalf of a company, cooperative, financial institution, or other organisation, you confirm you are authorised to bind that entity.
You must be at least 18 years old and legally able to enter contracts in your country of operation.
You must give accurate identity, contact, business, and location details, and keep them current. Nuru may request documents to verify identity, business registration, licences, or land use rights before approving a role such as farmer, aggregator, buyer, cold chain, logistics, financier, or input supplier.
You are responsible for all activity under your credentials and for keeping them confidential. Notify us immediately at info@farmboksi.shop if you suspect unauthorised access.
Nuru may suspend, restrict, or terminate accounts that fail verification, breach this Agreement, or present fraud, sanctions, or safety risk.
You will not post false produce, quality, origin, certification, or volume information, manipulate prices, create fake accounts or reviews, or misrepresent another person or organisation.
You will not scrape, reverse engineer, overload, or attempt unauthorised access to the platform, other users' data, or our APIs beyond your issued key limits.
You will not use Nuru for money laundering, terrorist financing, sanctions evasion, trade in prohibited goods, forced or child labour, or any activity unlawful in the jurisdictions you operate in.
Content you upload (photos, batch records, documents) must be yours to share and must not infringe third party rights.
Data controller: Farm Boksi Ltd. Contact for privacy matters: info@farmboksi.shop.
What we collect: account and profile data (name, email, phone, country, organisation), role and verification data, listings and batch records, orders and escrow transactions, payment metadata (we do not store full card numbers), shipment GPS pings and driver assignment data, loan applications and credit indicators, device and log data, and support communications.
Why we process it (lawful bases): to perform our contract with you (marketplace, escrow, logistics, traceability, financing workflows); to meet legal obligations (tax, anti-money-laundering, food safety and export traceability); for our legitimate interests (platform safety, fraud prevention, analytics, service improvement); and with your consent where required (marketing emails, optional AI features).
Who we share it with: counterparties to a transaction (only the data needed to complete it), logistics and cold chain providers assigned to your shipment, financiers you apply to, payment and mobile money processors, our infrastructure and email providers acting as processors under contract, and authorities where legally required.
Traceability transparency: batch events published to a public trace code are intended to be visible to buyers and consumers who scan the QR code. Do not include personal data in batch notes. Precise GPS locations and driver personal details are restricted to parties involved in the shipment and platform administrators.
AI features: prompts and market, weather, or compliance queries are sent to our AI provider to generate insights. Insights are advisory, may be inaccurate, and are not professional agronomic, legal, or financial advice. Do not submit personal or confidential third party data to AI features.
Retention: account and transaction records are retained while your account is active and for up to seven years afterwards where required for tax, audit, dispute, and regulatory purposes. Marketing subscriptions are retained until you unsubscribe.
Your rights: subject to applicable law you may request access, correction, deletion, export, restriction, or objection, and may withdraw consent at any time. Send requests to info@farmboksi.shop; we aim to respond within 30 days.
Security: access is protected by authentication, role based access controls, row level database security, encrypted transport, and hashed API secrets. No system is perfectly secure. We will notify affected users and, where required, regulators of a personal data breach without undue delay.
Cross border transfers: data may be processed outside your country by our infrastructure providers under appropriate safeguards.
Farm Boksi Ltd acts as a data collector and data processor under the Personal Data Protection Act, No. 11 of 2022 (the "Act") and its 2023 Regulations, and complies with the registration, notification and processing duties supervised by the Personal Data Protection Commission (PDPC).
Lawful processing: we process personal data fairly, lawfully and transparently, only for the specified marketplace, escrow, traceability, logistics and financing purposes described in this Agreement, and only to the extent necessary for those purposes.
Consent: where the Act requires consent, we ask for it separately and you may withdraw it at any time without affecting lawfulness of processing already carried out. Personal data of a child is processed only with verifiable consent of a parent or lawful guardian.
Sensitive personal data (including health, biometric, financial hardship or genetic data) is processed only where you have given explicit consent or where the Act otherwise permits it.
Your rights under the Act: to be informed how your data is used, to access your data, to rectify inaccurate data, to erasure or destruction, to object to processing including for direct marketing, to restrict processing, and to lodge a complaint with the PDPC if you believe your rights are infringed. Requests go to info@farmboksi.shop and are answered within the statutory timelines.
Cross border transfer: personal data is transferred outside Tanzania only where the destination provides adequate protection, where you consent, or where the transfer is otherwise permitted under the Act, and always under written processor commitments.
Breach notification: we notify the PDPC and affected data subjects of a personal data breach without undue delay as required by the Act.
Where you are in the European Union, European Economic Area or United Kingdom, we process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and the UK GDPR. Farm Boksi Ltd is the controller for platform account, transaction and traceability data, and acts as processor where we handle data on behalf of a buyer, financier or cooperative.
Legal bases: Article 6(1)(b) contract performance for marketplace, escrow, logistics, traceability and financing workflows; Article 6(1)(c) legal obligation for tax, anti-money-laundering, food safety and export traceability records; Article 6(1)(f) legitimate interests for platform security, fraud prevention and service improvement; and Article 6(1)(a) consent for marketing, non-essential cookies and optional AI features. Special category data is processed only with explicit consent under Article 9(2)(a).
Data subject rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability in a machine readable export (Art. 20), objection including to processing based on legitimate interests and to direct marketing (Art. 21), and the right not to be subject to solely automated decisions with legal or similarly significant effects (Art. 22). Nuru Score and credit indicators are decision support only; a human at the financier makes the lending decision, and you may request an explanation or human review.
Withdrawing consent and exercising rights is free of charge. Write to info@farmboksi.shop; we respond within one month and may extend by two further months for complex requests, telling you why.
International transfers: data may be transferred to Tanzania and to infrastructure providers outside the EEA or UK using Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary technical measures including encryption in transit and access control.
Retention and minimisation: we keep only what is needed for the purposes above, apply the retention periods in this Agreement, and delete or anonymise data when the purpose ends unless retention is legally required.
Breach: reportable personal data breaches are notified to the lead supervisory authority within 72 hours and to affected individuals where the risk is high. You may also lodge a complaint with your local supervisory authority or the UK ICO.
Cookies and similar technologies: strictly necessary cookies keep sessions and security working. Analytics, personalisation and marketing technologies are used only if you allow them in the privacy preferences panel, and you can change or withdraw those choices at any time from the same panel.
Nuru supports mobile money, card, bank transfer, and letter of credit flows. Nuru operates as a technology and escrow facilitation platform and is not a bank or licensed deposit taker.
Buyer funds for an order are held in escrow and released to the seller when delivery is confirmed, or refunded, withheld, or split by a platform administrator following the dispute process in section 6.
Platform and transaction fees are shown before you confirm an order and may be updated with notice. Payment processor and mobile money charges, taxes, levies, and currency conversion costs are your responsibility unless stated otherwise.
You must be the lawful owner of the payment instrument used. Chargebacks, reversals, or failed settlements may be recovered from your balance or future payouts.
Financing offers, credit limits, and Nuru Score indicators are decision support only. The financier, not Nuru, makes and is responsible for the lending decision and loan terms.
Sellers are responsible for produce quality, food safety, accurate grading, packaging, and compliance with the standards of the origin and destination markets. Buyers are responsible for inspecting on delivery.
Cold chain and logistics providers must maintain declared temperature ranges, keep vehicles and facilities fit for food transport, and record shipment events honestly.
Raise a dispute within 72 hours of delivery confirmation, with evidence. Escrow funds relating to the disputed order may be held while we review. Administrators may release, withhold, refund, or partially settle based on the evidence and this Agreement.
Nuru's dispute decisions are contractual determinations of escrow release. They do not remove your right to pursue other legal remedies.
API keys are personal to your organisation. Keep secrets confidential, rotate or revoke compromised keys immediately, and stay within published rate limits.
Traceability data retrieved through the API may be displayed to your customers provided it is not altered, and provided your presentation does not imply certification by Nuru beyond what the record states.
We send service messages (approvals, orders, escrow, disputes, shipments, security) that you cannot opt out of while you hold an account.
Marketing and community mailing list emails are sent only with consent, and every marketing email includes an unsubscribe link.
The platform is provided on an "as is" and "as available" basis. Market prices, weather forecasts, compliance summaries, and credit indicators are informational and not guaranteed.
To the maximum extent permitted by law, Nuru is not liable for indirect, incidental, or consequential loss, loss of profit, crop loss, or spoilage caused by third party carriers or facilities. Our total aggregate liability is limited to the platform fees you paid in the three months before the event giving rise to the claim.
You indemnify Nuru against claims arising from your breach of this Agreement, your content, or your goods and services.
Nothing in this Agreement excludes liability that cannot lawfully be excluded, including for fraud or death and personal injury caused by negligence.
You may close your account at any time once open orders, escrow balances, shipments, and loans are settled. We may suspend or terminate for breach, legal requirement, or risk.
We may update this Agreement. Material changes are notified in the platform and by email, and continued use after the stated effective date, or acceptance of the new version when prompted, constitutes acceptance.
This Agreement is governed by the laws of the United Republic of Tanzania, and the courts of Tanzania have jurisdiction, without limiting mandatory consumer or data protection rights in your country of residence.
Contact: Farm Boksi Ltd, 3rd Floor, Olympic Building, Mwanza, Tanzania. Email info@farmboksi.shop. Phone +255 793 437 232.