Privacy Policy

Last updated: January 2025 · Kenya Data Protection Act, 2019

Mackeldi AgriHub

Mackeldi Corporation Limited ("we", "us", "our") operates the Mackeldi AgriHub platform. This policy explains how we collect, use, share, and protect your information in compliance with the Kenya Data Protection Act, 2019 and applicable international standards.

Information We Collect

Personal details you provide at registration: full name, phone number, email address, and farm details.
Identity documents for KYC verification (National ID / Huduma Namba) and farm photos.
Transaction data: orders, payments, loan applications, and marketplace listings.
Usage data: pages visited, features used, device type, and IP address.
Location data (GPS coordinates) when you use location-based features such as GPS-tagged listings — only with your permission.

How We Use Your Information

To provide, operate, and improve the Mackeldi AgriHub platform.
To process transactions and send payment confirmations via M-Pesa, Airtel Money, Paystack, or PayPal.
To send OTP verification codes and important account notifications via Africa's Talking SMS.
To personalise your experience — AI advisory, price predictions, and relevant listings.
To review KYC applications and prevent fraud.
We do not sell your personal data to third parties.

Data Sharing

With other users only as necessary to facilitate transactions (e.g. sharing your name and county with a buyer when you list produce).
With service providers who operate our platform: Africa's Talking (SMS/OTP), Cloudinary (image storage), Paystack (card payments), Safaricom M-Pesa (mobile payments), Airtel Money (mobile payments), PayPal (international payments), and Supabase/AWS RDS (database hosting).
With KALRO or county agricultural offices only if you explicitly request agronomic support.
With law enforcement or regulatory authorities only when required by Kenyan law.

Data Security

All data is transmitted over HTTPS with TLS 1.3 encryption.
Passwords are hashed using bcrypt. JWT tokens expire after 7 days.
Payment card details are never stored on our servers — processed directly by Paystack and PayPal.
M-Pesa and Airtel Money transactions are processed via Safaricom Daraja and Airtel APIs respectively.
We conduct regular security reviews and follow OWASP best practices.

Your Rights

Access: Request a copy of all personal data we hold about you.
Correction: Update inaccurate information via your Profile settings.
Deletion: Request deletion of your account and associated data by emailing privacy@mackeldi.com.
Portability: Request your data in a machine-readable format.
Objection: Opt out of non-essential communications at any time.
These rights are consistent with Kenya's Data Protection Act, 2019.

SMS & Notifications

We send OTP codes, order updates, and price alerts via SMS through Africa's Talking.
You can manage notification preferences in your Profile → Notifications settings.
We do not send unsolicited marketing SMS without your explicit consent.

Cookies & Local Storage

We use minimal cookies and browser local storage to maintain your session and language preferences.
We do not use third-party advertising or tracking cookies.
You can clear local storage at any time via your browser settings.

Contact & Complaints

For privacy questions or data requests: privacy@mackeldi.com
Mackeldi Corporation Limited, Nairobi, Kenya.
If you believe your data rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya at www.odpc.go.ke.

privacy@mackeldi.com Terms of Service →