Terms & Conditions

1. Acceptance of Terms

By creating an account or using Mwosho Data Quality Automation App ("the Service", "Mwosho"), you agree to be bound by these Terms & Conditions. If you do not agree, do not use the Service.

2. Nature of Data — User Responsibility

Mwosho is not responsible or accountable for the type, nature, content, or legality of any data you submit for cleaning. You are solely responsible for ensuring that you have the right to process, upload, and clean the data, including any personal, financial, medical, or otherwise sensitive information.

You agree not to upload data that is illegally obtained, subject to export restrictions, or that you do not have the legal right to process. Mwosho reserves the right to terminate accounts found to be in violation of applicable laws.

3. Data Security — Shared Responsibility Model

3a. User-Side Responsibility

If a data breach or data leak occurs as a result of your use of unsafe, unsecured, or public networks while accessing the Service, Mwosho will not be held liable or accountable for such leaked, intercepted, or compromised data. It is your responsibility to:

• Access the Service only via secure, trusted networks.
• Keep your login credentials and API tokens confidential.
• Enable Two-Factor Authentication (2FA) for added account protection.
• Log out of shared or public devices after each session.
• Immediately report any suspected unauthorised access to your account.

3b. Our Commitment

On our part, Mwosho is committed to maintaining robust security measures to protect data processed on our infrastructure and will not knowingly tolerate or permit breaches to our systems. Our security commitments include:

• Encrypted data in transit (TLS) and at rest.
• VirusTotal scanning of every uploaded file before processing.
• Strict access controls and regular security audits.
• Automatic deletion of uploaded files after processing is complete.
• No sale or transfer of your data to third parties.

4. Limitation of Liability

To the maximum extent permitted by applicable law, Mwosho, its officers, employees, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to data loss, data breaches resulting from user-side vulnerabilities, or loss of business resulting from cleaned or processed data outputs.

5. Service Usage

Your use of the Service is subject to plan limits (jobs per month, file size caps). Exceeding these limits will require an upgrade. Mwosho reserves the right to throttle or suspend accounts that abuse the Service.

6. Changes to Terms

Mwosho may update these Terms at any time. Continued use of the Service after changes constitutes acceptance of the new Terms. We will notify registered users via email of significant changes.

7. Phishing & Social Engineering Awareness

Phishing and social engineering attacks impersonate trusted services to steal credentials or data. As a user of Mwosho, you should be vigilant about the following risks specific to this application:

7a. How attackers may target Mwosho users

• Fake login pages — emails or messages containing a link to a site that looks like Mwosho but has a slightly different domain (e.g. mwosh0.com, mwosho-app.net). Always verify the address bar reads exactly app.mwosho.com or www.mwosho.com before entering credentials.
• Fake download links — messages claiming to offer a Mwosho desktop app update from an unofficial source. The only legitimate Windows installer is distributed through the official Mwosho website or the GitHub releases page at github.com/MarkNgatara/mwosho_app.
• Impersonation emails — messages appearing to come from "Mwosho Support" requesting that you re-enter your password, share your 2FA code, or confirm billing information by clicking a link. Mwosho support will never request these via email.
• Malicious file uploads — third parties may attempt to trick you into uploading a file they have crafted. Every file you upload is virus-scanned, but you are responsible for verifying that the data you process belongs to you or that you have authorisation to process it.
• API key theft — if you use the Mwosho public API, treat your API key like a password. Do not paste it into chat tools, version control, or public forums. Rotate it immediately from your account settings if you suspect it has been exposed.

7b. How to protect yourself

• Enable Two-Factor Authentication (2FA) in your account settings — it blocks most credential-theft attacks.
• Bookmark app.mwosho.com and use the bookmark rather than clicking emailed links.
• Check that the browser shows a valid padlock / HTTPS before logging in.
• Never share your password or 2FA code with anyone, including people claiming to be Mwosho staff.
• If you receive a suspicious message that appears to be from Mwosho, report it to security@mwosho.com before clicking any links.

7c. Liability

Mwosho is not liable for losses arising from successful phishing or social engineering attacks against a user's account where the attack exploited user-side actions (e.g. voluntarily disclosing credentials). However, if you suspect your account has been compromised, contact us immediately at security@mwosho.com and we will take prompt action to secure it.

8. Contact

For any questions about these Terms, contact us at legal@mwosho.com.