Privacy Policy

This policy explains how RemoBridge handles personal data. It is written to respect the right to privacy in Article 31 of the Constitution of Kenya and the requirements of the Data Protection Act, 2019. Read it together with our Terms & Conditions.

1. Data controller

The data controller is RemoBridge. Registered legal name: [Owner to supply: registered business name]. Registration number: [Owner to supply: registration number]. Physical address: [Owner to supply: physical address]. ODPC registration: [Owner to supply: data controller registration status/number, if applicable].

Privacy contact: privacy@remobridge.site. Legal contact: legalremobridge@gmail.com.

2. Personal data we collect

• Account data: name, email address, phone number and password (stored hashed by our authentication provider).
• Payment data: M-Pesa phone number, amount, transaction reference/receipt code and payment status. Optional receipt screenshots you upload. We do not collect card numbers or M-Pesa PINs.
• Order data: products ordered, order status, allocated resources and delivery records.
• FULLU data: the document type and design options you choose, the fictional sample data generated, your terms-acceptance timestamp, and generation/download records. FULLU does not ask for real identity documents.
• Partner program data: referral codes, referral clicks (date, source, campaign, device and browser type), registrations, commissions and withdrawal details you provide (M-Pesa name/number or bank name/account details).
• Support data: messages you send through support chat or email.
• Technical data: IP address, browser and device information and security logs.

3. Why we process it and our lawful basis

• Providing the services and processing orders and payments — performance of a contract.
• Account security, fraud and abuse prevention, FULLU misuse detection and rate limiting — legitimate interests and legal obligations.
• Service emails (verification, password reset, order and payment notices) — performance of a contract.
• Marketing emails — consent, which you can withdraw at any time using the unsubscribe link.
• Tax, accounting and legal compliance — legal obligation.

4. Payment processing and service providers

We share personal data only as needed with:

• Our M-Pesa payment provider (PayHero) and Safaricom M-Pesa, to process payments;
• Our cloud hosting, database, file storage and authentication provider;
• Our transactional email delivery provider;
• Competent authorities where required by law.

We do not sell personal data. Full provider names and contract details: [Owner to supply: confirm list of processors and their locations].

5. Cookies, analytics and tracking

We use essential browser storage for sign-in sessions, theme preference and referral attribution (a referral code saved when you arrive through a partner link). We do not use advertising cookies. See our Cookie Policy.

6. AI processing

RemoBridge does not currently send your personal data to third-party AI providers. FULLU generates fictional samples using fixed templates and lists of invented data. If this changes, we will update this policy before doing so.

7. International transfers

Our hosting and email providers may process data outside Kenya. Where this happens we rely on the safeguards permitted by the Data Protection Act, 2019. Provider data locations: [Owner to supply: hosting and email data-centre regions].

8. Retention and deletion

We keep personal data only for as long as needed for the purposes above. Retention periods: [Owner to supply: account, payment, FULLU log and support-chat retention periods]. You can ask us to delete your account; we will delete or anonymise data we are not legally required to keep.

9. Security and incident handling

Data is encrypted in transit (HTTPS). Access to records is restricted by per-user access rules, private file storage and short-lived download links, and staff access is limited to admins who need it. No system is completely secure. If a personal data breach is likely to put you at risk, we will notify the Office of the Data Protection Commissioner and affected users as required by law.

10. Your rights

Under Article 31 of the Constitution and the Data Protection Act, 2019, you have the right to:

• Be informed of how your data is used;
• Access your personal data;
• Object to processing;
• Correct false or misleading data;
• Delete false, misleading or unnecessary data;
• Data portability;
• Withdraw consent where processing relies on consent.

To exercise a right, email privacy@remobridge.site from the email on your account. We may need to confirm your identity; do not send identity documents unless we ask.

11. Complaints

You can complain to us at privacy@remobridge.site or through our complaints page. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.

12. Children

Our services are not intended for anyone under 18.

13. Changes

We will update the "Last updated" date when this policy changes and notify you of material changes.