Privacy Policy
Last Updated: September 2026 · Compliant with the Kenya Data Protection Act (KDPA) 2019
At proQ Kenya, we recognize that your bidding preferences, target counties, and company capabilities are confidential commercial assets. We do not sell your personal or company data to third parties, competitors, or marketing brokers.
1. Data Controller Information
proQ Kenya operates as the Data Controller under the Kenya Data Protection Act, 2019. For all data privacy matters, you can reach our Data Protection Officer at privacy@proq.co.ke.
2. Information We Collect
- Account Credentials: Full name, business email address, encrypted password.
- Company & Bidding Profile: Company name, target procurement sectors, target counties, budget thresholds, and AGPO category (Youth, Women, PWD, or None).
- Communication Details: Mobile phone number for 07:00 AM WhatsApp/SMS alert dispatch.
- Payment Information: M-Pesa phone numbers and transaction receipts. Note: Credit/debit card numbers are processed directly by Paystack Kenya and are never stored on our servers.
3. How We Use Your Data
We process your data strictly for legitimate operational purposes:
- Delivering daily 07:00 AM WhatsApp and SMS notifications for matching procurement notices.
- Powering the AI Bidding Copilot to evaluate tender compliance against your specific company capacity.
- Processing monthly subscription renewals via Paystack and Daraja M-Pesa APIs.
- Monitoring platform stability and preventing fraudulent access.
4. Third-Party Sub-Processors
We only partner with established, compliant infrastructure providers:
- Paystack Payments Limited: PCI-DSS Level 1 payment gateway for M-Pesa STK Push and card billing.
- Meta Platforms (WhatsApp Cloud API): End-to-end encrypted notification dispatch.
- Africa's Talking: Licensed Kenyan telecommunications aggregator for SMS alerts.
- Neon Database Inc.: Encrypted-at-rest PostgreSQL cloud database.
5. Your Rights Under Kenyan Law
In accordance with Section 26 of the Kenya Data Protection Act 2019, you have the right to:
- Request a copy of all personal data held about you.
- Correct or update inaccurate or outdated bidding profile information.
- Withdraw consent for WhatsApp or SMS alerts at any time in Notification Preferences.
- Request complete deletion of your account and associated history ("Right to be Forgotten").
6. Data Security Measures
All traffic between your browser and proQ Kenya is encrypted using TLS 1.3 encryption. Internal database connections enforce SSL certificate verification, and user passwords are treated with cryptographic salting and hashing.