Legal

Privacy Policy

Last updated: 8 July 2026

1. What we collect

Account data: name, email, and password (stored as a hash by our authentication provider). Listing data: the company details, services, lanes, and contact information forwarders choose to publish. Marketplace activity: RFQs, quotes, reviews, and messages you create. Payment metadata: for M-Pesa, the phone number you enter, the transaction reference, and the receipt number returned by Safaricom; for card payments, the payment reference returned by Stripe. We never see or store card numbers, CVVs, or M-Pesa PINs — those go directly to Stripe and Safaricom.

2. How we use it

To run the marketplace: showing listings, matching RFQs to forwarders' lanes, delivering quotes and messages, and processing membership payments. To send transactional email: lead alerts, quote notifications, acceptance confirmations, renewal reminders, and replies to your contact messages. We do not sell personal data, and we do not send marketing email without a separate opt-in.

3. What is public

Published forwarder listings — including the business contact details a forwarder adds — are public by design. Reviews are public with the name the reviewer provides. Your account email and phone number are never public; other signed-in users can see only your display name when you message them.

4. Who processes data for us

We use a small set of processors to run the platform: Supabase (database and authentication hosting), Vercel (application hosting), Safaricom Daraja (M-Pesa payments), Stripe (card payments), and Resend (transactional email). Each receives only what it needs for its function. Data may be processed outside your country; our processors maintain industry-standard safeguards.

5. Messages

Messages are private to their participants. Our staff may access message content only to investigate fraud, abuse, disputes about platform use, or legal requests — not for marketing.

6. Cookies

We use essential cookies to keep you signed in. We do not run third-party advertising or tracking cookies.

7. Retention

Account and marketplace data is kept while your account is active. Transaction records are retained as required by tax and financial regulations. When you close your account, we delete or anonymise personal data that we are not legally required to keep.

8. Your rights

Subject to applicable law — including Kenya's Data Protection Act, 2019 — you may request access to, correction of, or deletion of your personal data, and object to certain processing. Contact us and we will respond within a reasonable time. You may also complain to your data protection authority; in Kenya, the Office of the Data Protection Commissioner.

9. Children

The platform is a business tool for adults. It is not directed at anyone under 18, and we do not knowingly collect their data.

10. Changes

We will announce material changes to this policy on the platform. The "last updated" date above always reflects the current version.

Privacy questions or requests? Reach us via the contact page.