Privacy Policy

This policy explains how BomaSuite handles personal information when you use our mobile app, web app, public rental marketplace, support channels and related property-management services.

1. Information we collect

Account and contact information

This may include your name, email address, phone number, organization, role, login credentials and, where a property manager records it for a tenancy, identification or emergency-contact details.

Property and rental information

This may include properties, units, listings, listing photos, applications, leases, occupants, bills, receipts, M-Pesa transaction references, owner statements, maintenance requests and messages connected with those records.

Device and service information

We may process device push tokens, notification preferences, session and security records, IP addresses, browser or device details, and diagnostic information needed to operate and protect the service. The mobile app accesses your photo library only when you choose photos for a rental listing.

Information from other people and services

Property owners, managers, agents or tenants may provide information needed to manage a property or tenancy. We may also receive transaction status from payment providers and messages or delivery status from communications providers.

2. How we use information

• Provide accounts, property operations, rental listings, applications, leases, billing, payments, receipts, owner reporting and maintenance workflows.
• Authenticate users, manage role-based access and keep organizations' workspaces separated.
• Send service messages and optional push notifications about relevant rental activity.
• Answer support requests, investigate errors, prevent misuse and protect users and the service.
• Comply with applicable contractual, accounting, regulatory and legal obligations.

BomaSuite does not sell personal information and does not use it for third-party advertising or cross-app tracking.

3. When information is shared

Information is shared only as needed to provide or protect the service, including with:

• Authorized members of the property organization responsible for the relevant property, listing, application or tenancy.
• Infrastructure, hosting, push-notification, email, SMS or messaging providers working for BomaSuite.
• Payment providers, including M-Pesa partners, when processing or reconciling a payment.
• Professional advisers, authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, safety or service integrity.
• A successor in a merger, financing, acquisition or transfer, subject to appropriate confidentiality and notice.

Some service providers may process information outside Kenya. Where that happens, we take reasonable steps to use appropriate contractual and security safeguards.

4. Retention and deletion

We keep information for as long as needed to provide the service, maintain accurate tenancy and financial records, resolve disputes, protect the service and meet applicable obligations. Retention depends on the type of record and why it is held.

You may request account deletion using the contact above. A request may remove or anonymize information that is no longer needed. Some records may be retained where they form part of another party's legitimate property, tenancy or payment records, or where retention is necessary for security, dispute resolution or legal compliance.

5. Your controls

• You can allow or disable push notifications in your device settings.
• You can allow, limit or revoke photo-library access in your device settings.
• You can ask us to access, correct or delete personal information, or object to certain processing, subject to applicable law.
• You can sign out of the app at any time. Signing out does not itself delete your account or business records.

6. Security

We use administrative, technical and organizational measures designed to protect information, including encrypted network connections, authentication controls, role-based access and security monitoring. No method of storage or transmission is completely risk-free.

7. Children

BomaSuite is a property and rental service intended for adults and organizations. It is not directed to children, and we do not knowingly invite children to create accounts.

8. Changes to this policy

We may update this policy as the service or legal requirements change. We will publish the updated date here and provide additional notice where appropriate.

9. Contact us

For privacy questions, account deletion or support, contact BomaSuite at hello@bomasuite.co.ke, call +254 759 065 744, or write to us in Nairobi, Kenya.