Privacy Policy
By System Admin
Privacy Policy
Last Updated: April 2026
1. Information We Collect
Account Information
When you register, we collect your name, email address, phone number, and company information (if provided).
Usage Data
We collect information about how you interact with the platform, including pages visited, searches performed, tenders viewed, and features used.
Payment Information
Payment transactions are processed by our payment partners (M-Pesa, PawaPay). We store transaction references and amounts but do not store your full payment credentials.
2. How We Use Your Information
- To provide and personalize our services
- To process payments and manage subscriptions
- To send tender alerts, email digests, and service updates
- To improve our platform based on usage patterns
- To prevent fraud and enforce our Terms of Service
3. Data Security
- Passwords are hashed using bcrypt with high-cost factor
- All sessions are protected with secure, HTTP-only cookies
- CSRF tokens protect against cross-site request forgery
- Rate limiting prevents brute-force attacks
- Input sanitization protects against injection attacks
4. Data Sharing
We do not sell your personal data. We may share information with:
- Payment processors to complete transactions
- Email service providers to deliver notifications
- Law enforcement when required by legal process
5. Your Rights
- Access and download your personal data
- Correct inaccurate information via your Profile settings
- Delete your account by contacting support
- Opt out of marketing emails via Email Digest settings
6. Cookies
We use session cookies for authentication and preference storage. No third-party tracking cookies are used unless you have enabled Google Analytics integration.
7. Contact
For privacy-related inquiries, please use the Contact page or email our support team.
