Privacy policy

Last updated: 2026. This policy applies to the website, WhatsApp assistant and all portals.

What we collect

• Account data — name, phone, email, preferred language.
• Enquiry data — job descriptions, locations, photos you attach, messages with providers.
• Payment data — M-Pesa phone number, amounts, receipt numbers. We never see your M-Pesa PIN.
• Provider verification data — identity documents, certificates, referee contacts. Stored in restricted storage and visible only to the verification team.
• Usage data — searches, result counts and page views, used to improve matching.

How we use it

To match you with providers, process payments, verify providers, prevent fraud, respond to support and safety reports, and — only with consent — send tips and offers.

Sharing

Customer contact details are shared with a provider only when you send an enquiry or accept a quote. Provider contact details are shared only after a recorded, paid unlock. We share data with Safaricom (M-Pesa), Meta (WhatsApp Business) and SMS carriers strictly to deliver those services. We never sell personal data.

Retention

Enquiries, payments and receipts are retained for seven years for legal and tax purposes. Identity documents are deleted 90 days after a final verification decision unless re-verification is pending. Account data is deleted on request, subject to legal holds.

Your rights

You may access, correct, export or delete your data, and withdraw marketing consent at any time from account settings. Requests are answered within 7 days. Complaints may also be lodged with the Office of the Data Protection Commissioner.

Security

Data is encrypted in transit and at rest. Access is role-based and audited. Row-level security ensures customers, providers, partners and staff only see the records they are entitled to.