Privacy Policy

1. Who we are

Homezetu ("we", "our", "us") operates the platform at homezetu.com, a Kenya-based real estate marketplace connecting tenants, landlords, agents, and investors. This Privacy Policy applies to all users of our website and services.

We comply with Kenya's Data Protection Act 2019 and its accompanying regulations.

2. What data we collect

• Account data: name, email address, phone number, role (tenant/landlord/agent)
• Listing data: property details, photos, price, location that you provide
• Communication data: inquiry messages exchanged between users on the platform
• Usage data: pages visited, search queries, listing views (via anonymised analytics)
• Payment data: payment reference numbers and confirmation status (we do not store card details)
• Device data: browser type, IP address, operating system (for security and fraud prevention)

3. How we use your data

• To operate your account and the platform
• To connect tenants with landlords/agents via inquiries
• To send you relevant property alerts based on your saved searches
• To verify listings and prevent fraud
• To improve our platform through usage analytics
• To send service notifications (listing approval, new messages) — not marketing spam

4. Who we share data with

We do not sell your personal data. We share limited data with:

• Supabase — our database and authentication provider (EU data centres)
• Cloudinary — image hosting (your listing photos)
• Railway — our backend hosting provider
• Other users: your name and phone number become visible to users you actively inquire with

5. Your rights (Kenya Data Protection Act 2019)

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate data via your profile settings
• Right to erasure: request deletion of your account and associated data
• Right to object: opt out of marketing communications at any time
• Right to data portability: receive your data in a machine-readable format

To exercise any right, email support@homezetu.com. We respond within 30 days.

6. Cookies

We use essential cookies to keep you logged in and remember your preferences. We use anonymised analytics cookies (no third-party ad trackers) to understand how people use Homezetu. You can disable cookies in your browser settings — some features may not work without essential cookies.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Listing inquiry records may be retained for up to 12 months for dispute resolution purposes.

8. Security

We use industry-standard security measures: HTTPS everywhere, encrypted database storage, JWT authentication, and role-based access controls. No system is 100% secure — please use a strong email address and report any suspicious activity to us immediately.

9. Children

Homezetu is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has an account, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy periodically. Material changes will be notified via email. Continued use of Homezetu after changes constitutes acceptance of the updated policy.