Privacy policy

This policy explains what personal data KenyanMarketer processes and why, in line with Kenya’s Data Protection Act, 2019.

What we collect

• Account details: your email address, M-Pesa phone number and a securely hashed password.
• TikTok details: the TikTok usernames you submit, their follower counts, and the links to posts you submit.
• Payment details: payout amounts, M-Pesa receipts and the registered M-Pesa name returned by Safaricom.
• Security data: IP address, device/browser type and sign-in times, used to protect accounts and prevent fraud.

Why we use it

• To run your account, review your TikTok accounts and verify your posts.
• To pay you by M-Pesa and keep accurate payment records.
• To email you about approvals, verifications, payouts and password resets.
• To detect and prevent fraud and abuse.

Who we share it with

• Safaricom (M-Pesa): your phone number and payout amount, to send payments.
• Our email provider: your email address and the content of messages we send you.
• TikTok: we query TikTok’s public embed service with the post links you submit to confirm they exist and who posted them.

We do not sell your personal data.

How long we keep it

Account data is kept while your account is open. Payment and verification records are kept as long as the law requires for financial records. Security logs are kept for up to 180 days.

Your rights

You can ask to access, correct or delete your personal data, or object to how it is processed. Contact us through the email address our messages come from. You may also complain to the Office of the Data Protection Commissioner (ODPC).

Security

Passwords are hashed with argon2id, sessions use secure HTTP-only cookies, and sensitive credentials are encrypted at rest. All traffic is encrypted with TLS.