Your privacy, plainly explained.

At SpaceYako, your privacy is the foundation of the trust that powers our marketplace. This Privacy Policy explains what information we collect when you use spaceyako.com (the “Platform”), how we use and protect it, and the choices you have. By using SpaceYako you agree to the practices described here.

We collect information you give us directly, plus data generated through your use of the Platform.

You provide

• Account details — name, email, phone number, password, and (for agents) verification documents.
• Listing content — property descriptions, photos, location, pricing, and contact preferences.
• Communications — messages you send to agents or support, and the messages we send you via email, SMS, or WhatsApp.
• Payments — billing email and transaction references when you purchase a listing or subscription. Card details are processed directly by Paystack and never touch our servers.

Collected automatically

• Usage data — pages viewed, searches, saved properties, device, browser, IP address, and approximate location.
• Site activity — which pages were opened, how long each was on screen, how far it was scrolled, which links and buttons were pressed, where the visit came from, and approximate city and country. We do not store your IP address for this: requests are grouped by a code made with a random key that is deleted after a day, so an anonymous visit cannot be linked to other days or traced back to you. Search terms and filters are recorded; nothing else you type into a form is. If you are signed in, the activity is linked to your account. It is deleted after 90 days.
• Cookies — small files used to keep you signed in, remember preferences, and measure performance.

• Operate the Platform and deliver the services you request — listings, search, viewings, messaging.
• Verify agents, prevent fraud, and protect users from misleading or harmful content.
• Send transactional notifications about your account, payments, and viewings via email, SMS, and WhatsApp.
• Improve search relevance, recommendations, and overall product quality, including a daily summary of site activity that our team reviews.
• Send marketing and product updates — only where you have opted in. You can unsubscribe at any time.
• Comply with legal obligations and enforce our Terms.

SpaceYako does not sell your personal information. We share data only with:

• Agents and sellers — when you contact them about a listing or book a viewing.
• Service providers— payment processing (Paystack), messaging (Africa's Talking, WhatsApp Business API), email delivery (Resend), error monitoring (Sentry), and object storage (Cloudflare R2). These providers act under our instructions.
• Legal and safety — when required by law or to protect users, agents, or SpaceYako from harm or fraud.
• Business transfers — if SpaceYako is involved in a merger, acquisition, or asset sale, with appropriate notice to you.

We use first-party cookies to keep you signed in, store preferences such as language and saved searches, and run analytics. Our own site-activity measurement uses no cookie: your browser keeps only a random id for the open tab and the date of your first visit. You can clear or block cookies and site storage in your browser, but parts of the Platform may stop working as expected.

We keep personal data only as long as needed for the purposes described above, or as required by Kenyan law and tax records. When you delete your account, we remove or anonymise your data within a reasonable period, except records we must retain for legal, fraud-prevention, or audit reasons.

Under the Data Protection Act, 2019 (Kenya) and similar laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to lawful retention obligations.
• Object to or restrict certain processing.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

To exercise any of these rights, email karibu@spaceyako.com. We respond within 30 days.

We protect your data with industry-standard safeguards: TLS encryption in transit, hashed passwords, signed webhooks, restricted access to production systems, and continuous monitoring. No system is perfectly secure — we encourage you to use a strong, unique password and to report any suspicious activity to us immediately.

SpaceYako is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has shared data with us, contact us and we will delete it promptly.

Some of our service providers operate outside Kenya. Where we transfer your data internationally, we do so under appropriate safeguards and only to providers committed to data-protection standards comparable to those in Kenya.

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their policies before sharing any data with them.

We may update this Privacy Policy as the Platform evolves. We will post the updated version here with a new “Last updated” date and, for material changes, notify you by email or in-app banner.

For privacy questions, requests, or complaints, contact our team:

• Email: karibu@spaceyako.com
• Address: Nairobi, Kenya