Privacy Policy

Data Controller: Fanel Limited, a company registered in Kenya. Registered office: Nairobi, Kenya. Privacy contact: privacy@fanel.co.ke (or info@fanel.co.ke).

Fanel ("we", "us", "our") is committed to protecting your personal data and operating in line with the Kenya Data Protection Act, 2019 (DPA) and regulations made thereunder; ODPC registration is in progress. This policy explains what data we collect, why we collect it, how we use it, and your rights as a data subject.

1. What We Collect

We collect information you provide directly: your name, email address, phone number, business name, and the prospect and customer data you enter into Fanel. We also collect usage data such as pages visited and features used.

When you make a payment, we also receive transaction metadata from our payment processor (amount, M-Pesa or card reference, timestamp). We do not store full card numbers.

2. How We Use Your Data

We use your data to provide and improve the Fanel service, send you product updates and billing notifications, and power AI features like prospect scoring and email drafting. We do not use your data to train AI models without your explicit consent.

3. Data Sharing

We do not sell your data. We share data only with service providers who help us operate Fanel, under strict data processing agreements:

• Supabase — database hosting and authentication
• Vercel — application hosting and edge delivery
• IntaSend — M-Pesa and card payment processing (see §8 for retention)
• Resend — transactional email delivery
• Anthropic (Claude AI) — AI-powered features (prompts only, no stored data)
• Africa's Talking — SMS notifications

4. Data Storage

Your data is stored on servers within or accessible from Kenya and the EU. We apply industry-standard encryption in transit and at rest.

5. Your Rights

Under the DPA 2019, you have the right to access, correct, or delete your personal data. To exercise these rights, email us at privacy@fanel.co.ke (or info@fanel.co.ke) — or, for account holders, use the self-serve options in your account settings.

If your contact details appear in our B2B Scout directory and you would like them removed, use our public removal page: fanel.co.ke/opt-out. You can also lodge a complaint directly with the Office of the Data Protection Commissioner at odpc.go.ke.

6. Cookies

We use essential cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies.

7. Changes to This Policy

We may update this policy as the product evolves. We will notify you of significant changes by email.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

Payment and transaction records are retained for 7 years to comply with the Tax Procedures Act, 2015 and Kenya Revenue Authority eTIMS requirements. This retention applies regardless of whether you delete your account.

9. Contact

For privacy questions, data subject access requests, or to exercise any of your rights under the DPA 2019, contact us at: privacy@fanel.co.ke (or info@fanel.co.ke).

Fanel Limited, Nairobi, Kenya.