Privacy Policy

Paza Technologies Ltd.

Last updated: [Insert Date] · Jurisdiction: Republic of Kenya

Paza Technologies Ltd. ("Paza," "we," "us," or "our") operates a digital platform that facilitates collaboration between brands and creators. This Privacy Policy explains how we collect, use, store, and protect personal data when you use the Paza platform ("Platform" or "Services"). This policy is designed to comply with the Data Protection Act, 2019 of Kenya. By accessing or using the Platform, you consent to the practices described in this Privacy Policy.

1. Who We Are

Paza Technologies Ltd. is the data controller responsible for personal data processed through the Platform. If you have questions about this Privacy Policy or your personal data, you may contact us at:

Email: privacy@paza.ai
[Company Address]

2. Information We Collect

We may collect several categories of information depending on how you interact with the Platform.

2.1 Account Information

When you create an account, we may collect: name, email address, phone number, business or brand name, profile information, and account credentials.

2.2 Creator Profile Information

Creators may provide additional information including: social media handles, content categories, audience demographics (where available), portfolio content, and links to public profiles.

2.3 Payment Information

When transactions occur on the Platform, payment data may be processed through third-party payment providers. This may include: payment account identifiers, mobile money numbers, bank account details, and billing information. Paza does not store full payment card details. Payment processing is handled by licensed payment providers.

2.4 Platform Activity Data

We collect information generated through use of the Platform, including: campaign participation, campaign communications, content submissions, verification evidence, transaction history, and interaction logs.

2.5 Publicly Available Information

If you provide social media handles or public profile links, we may collect publicly available information associated with those accounts (e.g. follower counts, engagement metrics, public posts, public profile metadata). This information may be used to verify creator profiles or generate platform analytics.

2.6 Technical Data

When you access the Platform, we may automatically collect technical information including: IP address, browser type, device type, operating system, usage data, and session logs.

3. How We Use Personal Data

We use personal data to operate and improve the Platform. Primary purposes include:

  • Platform Operation: creating and managing user accounts, facilitating creator–brand collaborations, enabling communication between users
  • Transaction Processing: processing campaign payments, managing payout processes, preventing fraudulent financial activity
  • Campaign Verification: verifying campaign deliverables, analyzing submitted campaign evidence, resolving disputes between users
  • Analytics and Platform Improvement: generating marketplace insights, improving verification systems, developing analytics tools and scoring systems (analytics may be based on aggregated platform activity)
  • Security and Fraud Prevention: detecting fraud, investigating suspicious activity, protecting platform integrity
  • Legal Compliance: processing where required to comply with applicable laws, regulations, or legal obligations

4. Legal Basis for Processing

Under applicable data protection laws, Paza may process personal data based on: user consent; performance of a contract; compliance with legal obligations; and legitimate business interests such as fraud prevention or service improvement.

5. Sharing of Personal Data

We may share personal data with trusted third parties where necessary to operate the Platform. These may include:

  • Payment Processors: payment service providers that process transactions (e.g. IntaSend, Paystack, mobile money providers)
  • Technology Service Providers: companies that help operate our infrastructure (e.g. hosting providers, analytics services, cloud infrastructure). These providers process data only on our instructions.
  • Legal and Regulatory Authorities: we may disclose personal data where required by law, court order, or regulatory request.

6. Data Security

Paza uses commercially reasonable security measures designed to protect personal data from unauthorized access, loss, or misuse. Security measures may include: encryption of sensitive data, access controls, secure data storage, and monitoring for unauthorized activity. However, no online system can guarantee absolute security.

7. Data Retention

We retain personal data only for as long as necessary to: operate the Platform, fulfill contractual obligations, comply with legal and regulatory requirements, and resolve disputes. Retention periods may vary depending on the type of data and legal obligations.

8. International Data Transfers

Paza may use service providers located outside Kenya. Where data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place to protect personal data.

9. Your Data Protection Rights

Depending on applicable law, users may have rights including: the right to access personal data; the right to request correction of inaccurate data; the right to request deletion of personal data; the right to object to certain processing activities; and the right to withdraw consent where processing is based on consent. Requests may be submitted by contacting us using the information provided below.

10. Cookies and Tracking Technologies

The Platform may use cookies or similar technologies to: maintain user sessions, analyze platform usage, and improve platform functionality. Users may control cookie settings through their browser preferences.

11. Children's Privacy

The Platform is not intended for individuals under the age of 18. Paza does not knowingly collect personal data from minors. If we become aware that personal data of a minor has been collected, we will take reasonable steps to delete such information.

12. Third-Party Platforms

Creators and brands may connect or reference third-party platforms such as social media services. Paza is not responsible for the privacy practices of those platforms. Users should review the privacy policies of third-party services they use.

13. Changes to This Privacy Policy

Paza may update this Privacy Policy periodically to reflect changes in our services or legal requirements. Updated policies will be posted on the Platform with a revised effective date. Continued use of the Platform after updates constitutes acceptance of the updated policy.

14. Contact Information

For questions regarding this Privacy Policy or personal data requests, contact:
Paza Technologies Ltd.
Email: privacy@paza.ai
[Company Address]