Privacy Policy

• Account: name, email, phone, password hash, avatar if you add one.
• Profile and payouts: handle, organisation, KYC documents you submit, payout number and preferences.
• Campaign activity: campaigns you create or apply to, affiliate links, clicks, conversions, clip submissions and view counts.
• Device and usage: IP address, user agent, pages viewed, contact form submissions.
• Support: messages you send through contact or tickets.

• Provide and maintain accounts, campaigns and attribution (7–30 day window).
• Process funding, holds and payouts (KES 50 minimum) to mobile money or bank.
• Verify channel ownership, detect fraud and enforce campaign briefs.
• Send transactional messages: payouts, invitations, magic links, contact replies.
• Support, aggregate analytics and legal compliance.

We share data only where it is needed:

• Creators and brands: approved application details and performance on shared campaigns.
• Processors: payment, hosting, email and storage providers under contract.
• Legal: where required by Kenyan law or to protect rights and safety.

We do not sell personal data.

We use essential cookies for authentication (cfk_access_token, cfk_refresh_token) and for preferences. No advertising cookies. You can block non-essential cookies in your browser, but sign-in will not work without the auth cookies.

Account and transaction records are kept while your account is active and for up to 365 days after deletion, for legal and financial reconciliation. Contact submissions are kept for 365 days; IP addresses are anonymised after 90 days. You can request deletion through /contact or in app settings.

Under Kenya’s Data Protection Act, and where applicable GDPR, you may:

• Access, correct or delete your personal data.
• Object to or restrict processing.
• Export your data (Settings → Export).
• Withdraw consent where processing is based on consent.

To exercise any of these, email support@bekrol.com from your account address.

We use encryption in transit, hashed passwords, scoped tokens and rate limiting. No system is completely secure: keep your credentials private and enable MFA.

Data is processed primarily in Kenya and the EU. Where we use processors elsewhere, we rely on standard contractual clauses or equivalent safeguards.

Bekrol is not intended for children under 16. We do not knowingly collect their data. If you believe a child has provided data, contact us and we will remove it.

Updates are posted here with a new date. Material changes are notified by email or in-app notice. Continued use after a change means you accept the revised policy.

Questions about privacy? Write to support@bekrol.com or through /contact. The Foundry, Kilimani — Nairobi, Kenya.