Privacy Policy

HomeSpot ("we", "us") processes personal data in accordance with the Kenya Data Protection Act, 2019 (KDPA) and regulations issued by the Office of the Data Protection Commissioner (ODPC). This policy explains what we collect, why we collect it, and your rights as a data subject.

1. Data we collect

We collect account details (name, email, phone), tenancy and lease records, payment and M-Pesa transaction metadata, maintenance requests, visitor logs, communications history, and audit logs. Marketplace listers may have a separate profile without an organisation tenancy record.

2. Lawful basis & purpose

Processing is necessary to perform our contract with property managers and tenants, to comply with tax obligations (including KRA eTIMS), and for legitimate interests such as fraud prevention and platform security. You provide explicit consent at registration (version 1.0).

3. Multi-tenancy & processors

Operational data is scoped to your organisation. We use subprocessors including cloud hosting, M-Pesa (Safaricom), SMS (Celcom Africa), email (Resend), and optional storage providers. Data is primarily hosted in jurisdictions with adequate safeguards or contractual protections.

4. Your rights (ODPC)

• Right of access — export your data via the tenant portal or by emailing support.
• Right to rectification — update profile details in-app or contact your building manager.
• Right to erasure — request account deletion via Settings or support@homespot.co.ke.
• Right to object or restrict processing — contact us for non-essential processing.
• Right to lodge a complaint with the ODPC if you believe your rights have been violated.

5. Retention & security

We retain financial records as required by Kenyan law. We apply encryption in transit, role-based access, audit logging, rate limiting, and session timeouts. In the event of a personal data breach, we will notify affected users and the ODPC where required.

6. Contact

Data Protection Officer: support@homespot.co.ke