Privacy Policy

1. Information We Collect

We collect information to provide better services to all our users. The types of information we collect include:

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and password when you create an account.
• Property Information: Details about properties you manage, including addresses, rental rates, and tenant information.
• Financial Information: Payment information (processed securely through payment processors) and transaction history.
• Communication Data: Messages, emails, and other communications you send to us.

1.2 Information Collected Automatically

• Usage Data: Information about how you use our services, including features accessed, time spent, and actions taken.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Location Data: General location information (city/country level) for service optimization.
• Cookies and Similar Technologies: We use cookies to remember your preferences and improve your experience.

1.3 Data Categories Table

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Our Service: To operate, maintain, and improve NyumbaPro services.
• To Process Transactions: To process payments and manage your subscription.
• To Communicate with You: To send service-related announcements, updates, and promotional materials (with your consent).
• To Ensure Security: To monitor and prevent security breaches and fraudulent activities.
• To Comply with Legal Obligations: To meet legal requirements and respond to lawful requests.
• To Analyze and Improve: To understand how users interact with our services and make improvements.

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Your Consent

We will share personal information with third parties when we have your explicit consent to do so.

3.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our services, such as:

• Payment processors (e.g., M-Pesa integration partners)
• Cloud hosting providers
• Customer support platforms
• Analytics and monitoring services

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption: Data encryption in transit and at rest
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Security assessments and penetration testing
• Employee Training: Regular privacy and security training for our team
• Incident Response: Procedures for handling security incidents

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure.

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are:

• Active Accounts: Data is retained while your account is active
• Inactive Accounts: Data is retained for 2 years after account deactivation
• Financial Records: Retained for 7 years as required by Kenyan law
• Analytics Data: Aggregated and anonymized after 3 years

6. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 Rights Under Kenyan Data Protection Act

• Right to Access: Request access to your personal information
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal information
• Right to Object: Object to processing of your personal information
• Right to Data Portability: Request transfer of your data to another service

6.2 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in Section 9. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the service to function properly
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our service
• Marketing Cookies: Used to deliver relevant advertisements

7.2 Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

8. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of Kenya where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions for countries with approved data protection laws
• Binding corporate rules for intra-company transfers

9. Children's Privacy

Our service is not intended for individuals under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.