Privacy Policy

Account data: name, company, email address, phone number, postal address and country. We need this to provision services, create registrar contact records and issue invoices.

Billing data: invoices, payment references and, for card payments, a token supplied by our payment processor. We never store full card numbers or M-Pesa credentials.

Technical data: IP addresses, log data, browser type and support correspondence, used for security, troubleshooting and abuse prevention.

To deliver and support the services you ordered, to meet domain registrar and tax obligations, to detect fraud and abuse, and to send service notices about renewals, outages and security issues.

We only send marketing email where you have opted in, and every message includes a one-click unsubscribe.

Domain registrars and registries, because they require registrant contact details to register and maintain a domain. Where privacy protection is available we publish proxy details instead of yours.

Our billing and automation platform, our data centre providers, our payment processors and our support tooling — each acting under contract and only on data needed for their function.

We do not sell personal data, and we do not share it for third-party advertising.

We keep account and billing records for as long as you are a customer and for the period afterwards required by tax and registrar rules. Server logs are kept for a shorter operational window.

You can request access, correction, export or deletion of your personal data by contacting support. Deletion requests are honoured except where we must retain records to comply with the law or a registry requirement.

Data is encrypted in transit, credentials are hashed, and access to production systems is limited, logged and reviewed. Our AI agent hosting stores third-party API keys in an encrypted vault and injects them at runtime only when a workload requests them.