PRIVACY POLICY

1. INFORMATION WE COLLECT

To provide a robust monetization platform for creators and subscribers, we collect information that falls into three broad categories:

A. INFORMATION YOU VOLUNTARILY PROVIDE

• Account Credentials: Full name, email address, username, and password when you register as a creator or subscriber.
• Creator Profile Data: Bio, profile images, social media handles, and content categories.
• Financial & Payout Information: To facilitate payouts, we collect necessary payment details, which may include Mobile Money details (e.g., M-Pesa numbers), bank account information, or third-party payment processor tokens. Note: We do not directly store raw credit card numbers; these are handled by our secure, PCI-compliant payment gateways.
• Communications: Any support tickets, emails, or feedback you send directly to us.

B. INFORMATION AUTOMATICALLY COLLECTED

• Log and Usage Data: IP addresses, browser types, operating systems, referring URLs, pages viewed, device characteristics, and the specific timing of your platform interactions.
• Device Information: Information about the computer, phone, or tablet you use to access the platform.
• Cookies and Tracking: We use essential and analytical cookies to keep you logged in, remember your preferences, and track aggregate platform performance.

2. HOW WE USE YOUR INFORMATION

We process your data to fulfill our operational goals as a creator platform, including:

• Platform Functionality: Managing your account, processing subscriptions, tracking post access, and ensuring creators receive accurate attribution for their content.
• Financial Transactions: Processing payments from subscribers and distributing earned revenue to creators.
• Customer Support: Diagnosing technical issues and responding to support inquiries.
• Security & Fraud Prevention: Monitoring for abusive behavior, unauthorized access, intellectual property violations, or fraudulent financial transactions.
• Communications: Sending system updates, security alerts, and marketing newsletters (which you can opt out of at any time).

3. SHARING AND DISCLOSURE OF INFORMATION

We do not sell your personal data. We only share data in the following specific circumstances:

• Between Creators and Subscribers: To facilitate the subscription model, creators may see basic identifying details of their subscribers (such as username or display name) to manage their community interactions.
• Third-Party Service Providers: We share data with trusted vendors who perform services on our behalf, such as web hosting providers, database management systems, email delivery networks, and payment gateways.
• Legal Compliance: We may disclose your information if required to do so by law, court order, or regulatory bodies (such as the Office of the Data Protection Commissioner in Kenya).
• Business Transfers: If MyPaidPost undergoes a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity.

4. DATA RETENTION

We retain your personal information only for as long as your account is active or as needed to provide you with our services. If you choose to close your account, we will delete or anonymize your personal data, except where we are legally obligated to retain certain transactional or financial records to comply with tax and statutory laws.

5. SECURITY OF YOUR INFORMATION

We implement appropriate technical and organizational security measures, including HTTPS encryption, secure database hashing, and restricted access protocols, to protect your personal data from unauthorized access, loss, or alteration. However, please remember that no method of transmission over the internet is 100% secure.

6. YOUR RIGHTS & CHOICES

Depending on your location, you hold specific statutory rights regarding your personal information. Under the Kenya Data Protection Act, 2019, and similar global frameworks, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we rectify inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request that we delete your personal data, subject to legal compliance constraints.
• Objection/Restriction: Object to or restrict the processing of your data under specific conditions.
• Data Portability: Request the transfer of your data to another service provider in a structured, machine-readable format.

To exercise any of these rights, please contact us using the information provided below.

7. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our operational practices or legal requirements. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy and, where appropriate, sending an email notice or platform alert.

8. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us at:

• Email: info@mypaidpost.co.ke
• Phone: +254-788-823-853
• 3rd Floor, Ambwere Plaza Building, Mumias Road, Kakamega, Kenya