Itabaki ("we", "us") provides property management software for landlords, agencies and their tenants. This policy explains what personal data we collect, why, and the choices you have. We process personal data in line with the Kenya Data Protection Act, 2019 and, where applicable, other laws.

• Account data: name, email, phone number, role, organisation and login security data (sessions, 2FA).
• Property and tenancy data: properties, units, leases, tenants, maintenance requests, documents you upload.
• Payment data: invoices, payment records, transaction references from payment providers (e.g. M-Pesa). We do not store full card numbers.
• Usage data: activity logs, device/browser information, IP-based security events.

• To operate the service: accounts, billing, receipts, reminders, reports and support.
• To secure the platform: authentication, fraud/abuse prevention, audit logs.
• To send service notifications (email, SMS, in-app) you have configured.
• To meet legal obligations, including tax reporting where required by law.

We share data only as needed to run the service: payment processors and mobile money providers, SMS/email delivery providers, cloud hosting, and authorities where legally required. Data belonging to an organisation (its properties, tenants and payments) is visible to that organisation's authorised users.

We keep data while your account is active and for as long afterwards as needed to meet legal, tax and accounting requirements. You can delete your account from Settings; some records may be retained where the law requires.

Subject to the Data Protection Act, you may request access, correction or deletion of your personal data, object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner. Contact us first at contact@itabaki.co.ke.

We use encryption in transit, access controls, audit logging, multi-factor authentication and role-based permissions. No system is perfectly secure; please use a strong password and enable two-factor authentication.

We may update this policy; material changes will be announced in the app or by email.