Privacy Policy
Last updated: 7 October 2026
This policy explains what personal data Digital Manyatta collects, why, and what your rights are under it. Digital Manyatta is operated in Kenya and is the party responsible for the data described below.
1. What we collect
Account details you give us directly: name, email, phone number, and (for agents) the property listings, photos, and contact information they submit. When you reach out through the Contact page, we collect whatever you include in that message. When you pay to unlock a listing or activate one, we store the payment reference, status, and amount needed to confirm the transaction - never your M-Pesa PIN or full statement history, and never your card number, which Paystack handles directly.
2. Why we're allowed to hold it
We process this data because it's necessary to run the service you've asked for - creating your account, matching a payment to an unlock, or getting your inquiry to the right team. Where we don't need your consent for that, we still don't use your data for anything beyond operating and improving the marketplace.
3. Communications
We send account, payment, and listing-related emails (via Resend) and, where relevant, contact you about a specific inquiry or listing. These are transactional, not marketing - we don't run an email newsletter, and there's currently nothing to opt out of beyond closing your account.
4. Who else sees it
We don't sell your personal information to third parties. We share it only with the service providers that make the platform work, each acting under their own privacy and security commitments: Clerk (sign-in and account security), Convex (application data and hosting), Cloudinary (listing photo storage and delivery), Paystack (M-Pesa payment processing), and Resend (transactional email delivery). An agent's contact details are only revealed to a tenant who has paid the unlock fee for that specific listing, or who is contacting them about a Land or Farmland listing.
5. Data leaving Kenya
Some of the providers above process data outside Kenya as part of their normal infrastructure. We only work with providers that maintain equivalent data protection standards, consistent with the Data Protection Act, 2019.
6. How long we keep it
We keep account and listing data for as long as your account is active, and payment records for as long as Kenyan tax and financial record-keeping law requires. If you delete your account, we remove what we no longer have a legal or operational reason to keep.
7. Your rights
Under the Data Protection Act, 2019 (Kenya), you have the right to access the personal data we hold about you, request its correction or deletion, object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these rights, contact us using the details on our Contact page.
8. Security
Authentication is handled by Clerk and payments by Paystack - we never see or store your password or card details ourselves. Access to the underlying data is restricted to what each part of the platform actually needs to function.
9. Children
Digital Manyatta is intended for users old enough to enter into a tenancy or purchase agreement. We don't knowingly collect data from children.
10. Cookies
We use only the session cookie Clerk sets to keep you signed in. We don't run third-party analytics or advertising trackers.
11. Changes
We may update this policy from time to time; continued use of the site after a change means you accept the update. Significant changes will be reflected in the "Last updated" date above.
This page is provided as a good-faith summary of our privacy practices and reflects the Data Protection Act, 2019 (Kenya) at a general level, but it is not a substitute for advice from a qualified Kenyan lawyer. Contact us with any questions before relying on it for a legal matter.