Legal

Privacy Policy

Last updated: Working draft

Note: This privacy policy is a working draft. It has not been reviewed by a qualified legal or data-protection professional. If you have compliance requirements (e.g. GDPR, Kenya's Data Protection Act), please seek appropriate advice before relying on this document.

The short version

  • We only collect what's needed to run the platform
  • Your renter email is never shared with landlords
  • Landlord contact details are only visible to logged-in users
  • We don't sell your data or use advertising trackers
  • You can request deletion of your account and data at any time

Section 1

What data we collect

When you create an account, we collect:

  • Your email address (used for authentication)
  • Your display name
  • Your role (renter, landlord, or agent)
  • Contact information you choose to share (phone number, WhatsApp number, contact email). Landlords only, and only information you explicitly enable

When landlords post listings, we collect the listing content they provide, including photos uploaded to our storage.

We log listing views and contact enquiries (which listing was viewed or contacted, by which account) to help landlords gauge interest in their properties.

Section 2

How data is stored

All data is stored via Supabase, a hosted backend platform. Data is stored in a PostgreSQL database and Supabase's object storage for uploaded images. Supabase is hosted on AWS infrastructure.

Section 3

Who can see your contact information

For landlords: the contact details you enable (phone, WhatsApp, email) are only shown to logged-in users. Anonymous visitors cannot see your contact details.

For renters: your account information is not displayed publicly. Your email is not shared with landlords through the platform.

Section 4

Cookies and tracking

We use a session token (stored in your browser's local storage) to keep you logged in. We do not use third-party advertising cookies or tracking pixels.

Section 5

Data sharing

We do not sell or share your personal data with third parties, except where required by law or necessary to operate the platform (e.g. Supabase as our infrastructure provider).

Section 6

Data retention and deletion

You can delete your account and associated data by contacting us at tuzama@zohomailcloud.ca. We will process deletion requests within 30 days.

Section 7

Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page with a revised date.

Section 8

Questions

Privacy questions or deletion requests? Contact us. We're a small team and we read everything.