Privacy Policy

Tesilix ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the Tesilix platform.

This policy applies to all Users of the Tesilix website and mobile application, including Workers and Employers. By using our Platform, you consent to the practices described in this Privacy Policy.

We comply with the Kenya Data Protection Act, 2019 and all applicable data protection regulations.

2.1 Information You Provide Directly

• Full name, email address, and phone number at registration.
• Profile information including location, trade, experience, and qualifications.
• Portfolio photos and work samples uploaded to your profile.
• Certifications and credentials you choose to upload.
• Communications with other Users through our messaging system.
• Reviews and ratings you submit.
• Payment information when applicable.

2.2 Information Collected Automatically

• Device information including device type, operating system, and browser type.
• IP address and approximate location data.
• Usage data including pages visited, features used, and time spent on the Platform.
• Log data including access times, errors, and referring URLs.

2.3 Information from Third Parties

• If you register using Google OAuth, we receive your name, email address, and profile picture from Google.
• We may receive verification information from identity verification services.

We use your personal information to:

• Create and manage your account.
• Enable connections between Workers and Employers.
• Display your profile to relevant users based on location and trade.
• Send job request notifications and platform updates.
• Process payments and transaction records (when applicable).
• Verify your identity and prevent fraud.
• Improve our platform and user experience.
• Respond to your inquiries and provide customer support.
• Comply with our legal obligations under Kenyan law.
• Send marketing communications (with your consent, which you may withdraw at any time).

Under the Kenya Data Protection Act, 2019, we process your personal data on the following legal bases:

• Contract: Processing necessary to provide our services to you.
• Legitimate Interests: Improving our platform, preventing fraud, and ensuring security.
• Consent: For marketing communications and optional features.
• Legal Obligation: Compliance with applicable Kenyan laws and regulations.

5.1 With Other Users

Your public profile information — including your name, trade, location, portfolio, ratings, and reviews — is visible to other registered Users and visitors to the Platform.

Your contact details and private messages are only shared with Users you directly engage with.

5.2 With Service Providers

We share data with trusted third-party service providers who assist us in operating the Platform, including:

• Cloud hosting providers (for data storage and infrastructure).
• Payment processors (for transaction processing).
• Analytics providers (for platform improvement).
• Communication services (for email and push notifications).

All service providers are contractually required to protect your data and may not use it for their own purposes.

5.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights or the safety of our Users.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Your data is stored on secure servers. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (HTTPS/TLS).
• Encrypted storage of sensitive information.
• Access controls limiting who can access personal data.
• Regular security assessments and monitoring.

While we take security seriously, no system is completely secure. We encourage you to use a strong password and to notify us immediately if you suspect any unauthorised access to your account.

We retain your personal information for as long as your account is active or as necessary to provide our services. Specifically:

• Active account data: retained for the duration of your account.
• Deactivated account data: retained for 12 months after deactivation, then deleted or anonymised.
• Transaction records: retained for 7 years as required by Kenyan tax and financial regulations.
• Communications: retained for 24 months then deleted.

You may request deletion of your data at any time (see Section 9 — Your Rights).

We use cookies and similar tracking technologies to:

• Maintain your login session.
• Remember your preferences.
• Analyse how the Platform is used.
• Improve performance and user experience.

You can control cookie settings through your browser. Disabling cookies may affect the functionality of the Platform. We do not sell your data to advertisers or use it for targeted advertising.

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal obligations.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at privacy@tesilix.com. We will respond within 21 days as required by the Kenya Data Protection Act.

The Tesilix Platform is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal information, we will delete it immediately.

If you believe a minor has registered on our Platform, please contact us at support@tesilix.com.

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or through the Platform at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

We have appointed a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and the Kenya Data Protection Act.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at: