Privacy Policy

Your data protection matters to us

Last Updated: September 15, 2026

🔒 Your Privacy Rights

We are committed to protecting your personal data in full compliance with the Kenya Data Protection Act (KDPA). Here's what you need to know:

🛡️

Secure by Default

End-to-end encryption & multi-layer security

📋

Full Transparency

Know exactly how we use your data

⚖️

Your Control

Access, edit, or delete your data anytime

1

Introduction

Tano Tena ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our political campaign management platform, in compliance with the Kenya Data Protection Act (KDPA).


2

Information We Collect

We collect several types of information to provide and improve our Service:

👤 Personal Data

  • Name, email, phone
  • Organization details
  • Payment info (M-Pesa)
  • Login credentials

📊 Campaign Data

  • Constituent info
  • Volunteer records
  • Financial data
  • Communications

⚙️ Technical Data

  • IP address
  • Device info
  • Browser type
  • Usage patterns

3

How We Use Your Information

We use the collected information for various purposes:

🏗️

Service Provision

Process registrations, manage subscriptions, provide platform features

💳

Payment Processing

Handle M-Pesa payments and financial operations

💬

Communication

Send updates, security alerts, and support messages

📈

Service Improvement

Analyze usage patterns to enhance features

⚖️

Legal Compliance

Meet KDPA and other regulatory requirements


4

Data Security Measures

We implement industry-standard security measures to protect your data:

🔐

Encryption

HTTPS/TLS 1.3+ in transit

🗄️

Database Security

Separate databases per tenant

🔑

Access Controls

Role-based RBAC system

🛡️

Authentication

Magic links & MFA options

🔍

Regular Audits

Security assessments

📦

Data Isolation

Logical & physical separation


5

Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

🤝 Service Providers

M-Pesa for payment processing, Africa's Talking for SMS services

⚖️ Legal Compliance

When required by law, court order, or government authorities

✅ Your Consent

When you explicitly authorize sharing

🏢 Business Transfers

In connection with a merger, acquisition, or sale of assets


6

Your Rights Under KDPA

📥 Right to Access

Request a copy of your data

✏️ Right to Rectification

Correct inaccurate data

🗑️ Right to Erasure

Request data deletion

📦 Right to Portability

Get data in structured format

✋ Right to Object

Object to processing

🚫 Right to Restrict

Limit data usage


7

📅 Data Retention

We retain data only as long as necessary. Upon account termination, your data will be deleted or anonymized in accordance with legal requirements.

8

🔗 Third-Party Services

M-Pesa - Payment processing

Africa's Talking - SMS services

DigitalOcean - Cloud hosting

9

👶 Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children.

10

🌍 International Transfers

Your data is primarily stored in Kenya. International transfers comply with KDPA requirements and adequate safeguards.


11

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and updating the "Last Updated" date.


12

Contact Information

If you have questions about this Privacy Policy or your personal data:

Email: privacy@tanotena.com

WhatsApp: +254 797 154 454

Postal Address: [To be updated with physical address]


13

🚨 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay in accordance with KDPA requirements.

✓ Your privacy is protected. Ready to start managing your campaign securely?