Privacy Policy

1. Introduction

Welcome to Ndotoni. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and share your information when you use our rental property platform.

2. Information We Collect

When you use Ndotoni, we collect the following types of information:

2.1 Information You Provide

• Name and email address (when you create an account)
• Phone number (optional, for contact purposes)
• Profile picture (if you sign in with Google or Facebook)
• Property information and photos (if you're a landlord)
• Messages and inquiries sent through our platform
• Booking and payment information
• Reviews and ratings

2.2 Information Collected Automatically

• Device information (browser type, operating system)
• IP address and location data
• Usage data (pages visited, features used)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

• Social media profile information (when you sign in with Google or Facebook)
• Payment information from payment processors (M-Pesa, etc.)

3. How We Use Your Information

We use your information to:

• Provide and improve our rental platform services
• Create and manage your account
• Facilitate communication between tenants and landlords
• Process bookings and payments securely
• Send important notifications about your account and bookings
• Respond to your inquiries and provide customer support
• Prevent fraud and ensure platform security
• Analyze usage patterns to improve user experience
• Comply with legal obligations
• Send marketing communications (with your consent)

4. How We Store Your Information

Your data is securely stored on Amazon Web Services (AWS) infrastructure with industry-standard security measures:

• Encryption at rest and in transit (TLS/SSL)
• Regular security audits and monitoring
• Access controls and multi-factor authentication
• Automated backup and disaster recovery systems
• Data centers located in secure facilities

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

5.1 Other Users

• Landlords can see tenant inquiries and contact information
• Tenants can see landlord contact information for properties they inquire about
• Public profile information is visible to all users

5.2 Service Providers

• Cloud hosting services (Amazon Web Services)
• Payment processors (M-Pesa and other payment gateways)
• Email service providers
• Analytics services

5.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights and the safety of our users.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Object: Object to certain data processing activities
• Restrict: Request restriction of data processing

To exercise these rights, contact us at info@ndotoni.comor visit your account settings.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Analyze site usage and performance
• Provide personalized content and recommendations
• Measure the effectiveness of our marketing campaigns

You can control cookies through your browser settings. Note that disabling cookies may affect some features of our platform.

8. Third-Party Services

We integrate with third-party services for authentication and payments:

• Google Sign-In: Governed by Google's Privacy Policy
• Facebook Login: Governed by Facebook's Privacy Policy
• M-Pesa: Governed by Vodacom's privacy policies

When you use these services, their respective privacy policies also apply.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Most personal data is deleted within 30 days
• Transaction records are retained for 7 years (legal requirement)
• Anonymized analytics data may be retained indefinitely
• Backup copies are deleted within 90 days

10. Children's Privacy

Ndotoni is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than Tanzania. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

12. Security

We implement appropriate technical and organizational measures to protect your data. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of Ndotoni after changes constitutes acceptance of the updated policy.

14. Business Information

Ndotoni is a legally registered business in Tanzania, operating with full compliance to local regulations and business standards.

15. Contact Us

If you have questions about this privacy policy or how we handle your data: