Privacy Policy

ZamiiStay is a Kenya-focused rental marketplace that helps owners publish rental listings and helps verified agents discover approved rental supply.

Data controller / business name

Tiny Card Limited

Platform name

ZamiiStay

Contact email

privacy@zamiihub.org

Mailing address

P.O. Box 19091, Kisumu 40100

• Account information: name, email address, password credentials, phone number, WhatsApp number, account type, verification status, and login details.
• Profile information: profile photo, business name, agent or owner details, location, and any information users choose to add to their profile.
• Listing information: property title, description, location, price, availability, amenities, house rules, uploaded photos, and other rental-related details.
• Uploaded images and media: property photos, profile photos, and other images uploaded to the platform.
• Verification information: information used to verify email accounts, owner accounts, agent accounts, or other trust-related status.
• Reviews and moderation content: reviews, ratings, reports, complaints, admin notes, and moderation decisions.
• Contact and communication data: support messages, safety reports, privacy requests, partnership messages, and legal notices sent to ZamiiStay.
• Technical and usage data: IP address, browser type, device information, session data, cookies, log data, pages viewed, timestamps, and security-related activity.

• Create and manage user accounts.
• Verify email addresses.
• Support password resets and account recovery.
• Review and approve rental listings.
• Display approved listings in the marketplace.
• Gate owner contact access to verified agents where applicable.
• Moderate reviews, listings, and user activity.
• Detect spam, fraud, abuse, fake accounts, or unauthorized platform use.
• Respond to user support requests.
• Respond to safety reports and privacy requests.
• Improve platform functionality, security, and user experience.
• Communicate important updates about accounts, listings, policies, or services.
• Comply with legal, regulatory, accounting, tax, or dispute-resolution obligations.

• The processing is necessary to provide the platform service.
• The user has given consent.
• The processing supports legitimate platform safety, moderation, fraud prevention, or security interests.
• The processing is needed to comply with legal obligations.
• The processing is needed to respond to user requests, complaints, or disputes.

ZamiiStay does not sell user personal data.

• Platform admins: admins may access account, listing, review, support, and moderation data as needed to operate the platform.
• Verified agents: where applicable, owner contact details may be shared only with verified agents who are permitted to access gated contact information.
• Service providers: we may use third-party vendors to host the platform, store images, send emails, manage databases, monitor security, process support requests, or provide analytics.
• Cloudinary for uploaded image storage and delivery.
• GoDaddy for application hosting.
• Render for database hosting.
• Microsoft for verification emails, password reset emails, and support messages.
• Legal and safety purposes: we may disclose information if required by law, court order, regulator request, legal process, fraud investigation, safety concern, or to protect the rights, safety, and security of ZamiiStay, users, or the public.

ZamiiStay may use cookies, session storage, or similar technologies to keep users logged in, secure accounts, remember preferences, detect suspicious activity, and understand platform usage.

Users may control cookies through their browser settings, but disabling cookies may affect login, account access, or platform functionality.

• Be informed about how personal data is used.
• Access personal data held by ZamiiStay.
• Request correction of false, inaccurate, or misleading data.
• Object to certain processing of personal data.
• Request deletion of false, misleading, outdated, or unnecessary data where applicable.
• Raise a privacy concern or complaint.

ZamiiStay keeps personal data only for as long as reasonably needed for platform operations, safety, legal compliance, dispute resolution, fraud prevention, and business records.

• Account data: while the account is active, plus up to 12 months after closure.
• Listing data and images: while the listing is active, plus up to 12 months after removal.
• Support messages: up to 12 months.
• Safety reports and moderation records: up to 12 months or longer where needed for disputes or legal reasons.
• Technical logs: up to 12 months, unless needed for security or legal investigation.
• Featured listing payment records: up to 2 years or as required by accounting, tax, or legal obligations.

ZamiiStay uses reasonable technical and organizational measures to protect user information. These may include password protection, email verification, access controls, admin permissions, secure hosting, database controls, and monitoring for suspicious activity.

No online platform can guarantee perfect security. Users should use strong passwords, protect their email accounts, avoid sharing login credentials, and report suspicious activity promptly.

ZamiiStay may use service providers located outside Kenya. This means user data may be stored or processed in other countries depending on the hosting, database, email, image-storage, or analytics vendors used.

Where required, ZamiiStay will take reasonable steps to ensure that cross-border processing is handled responsibly and in line with applicable data-protection requirements.

ZamiiStay is intended for users who are at least 18 years old.

Users under the minimum age may not create accounts, publish listings, act as agents, or submit personal data through the platform.

ZamiiStay may update this Privacy Policy from time to time. If we make material changes, we may notify users by email, platform notice, or by updating the effective date on this page.

Continued use of ZamiiStay after a policy update means the user accepts the updated Privacy Policy.