Legal
Privacy Policy
Last updated: 21 July 2026
Who we are
Makao360 is operated from Nairobi, Kenya. We are the data controller for personal data you provide when using the Service.
Data we collect
- Account: name, phone, email, role (tenant/landlord/admin).
- KYC: government ID number, ID document image, selfie (only if you submit).
- Property/lease data supplied by landlords.
- Payment metadata (amounts, timestamps, reference numbers) — not full card details.
- Anonymous product analytics if you opt in via the cookie banner.
How we use it
Operate the Service, verify identities, reconcile rent, comply with financial regulations, prevent fraud, and improve the product. We do not sell your data.
Sharing
With payment partners (Safaricom, participating banks) strictly to process your transactions. With your landlord (for tenants) or your tenants (for landlords) only for data required to manage the tenancy. With regulators when legally required.
Retention
Account and financial records are retained for at least 7 years as required by Kenyan tax and AML law. KYC documents are retained for the duration of your account plus 5 years.
Your rights
You may request access, correction, deletion (subject to retention obligations), objection, or export of your data. Email privacy@makao360.app.
Security
Row-level access control, encryption in transit (TLS) and at rest, and least-privilege administrative access. See our security page.
Cookies
See our cookie policy.