Privacy Policy

What we collect

We keep the collection deliberately small:

• Account details: your name, email address and, if you give it, your phone number.
• Listing details: everything you type into a listing, including photographs you upload.
• Inquiries: the name, contact details and message you send to a landlord.
• Saved homes: the listings you add to your shortlist, which only you can see.
• Basic usage data: a per-listing view count. We do not run third-party advertising or analytics trackers.

Why we hold it

To run your account, show your listings to house hunters, pass your inquiry to the right landlord, and keep the platform free of fraud.

We do not sell your data, and we do not share it with advertisers.

Who can see what

Access is enforced in the database itself, using Supabase Row Level Security, rather than only in the application code.

• Published listings, their photographs, and the landlord's display name are public.
• Your email address is never shown publicly. A phone number is only visible if you deliberately add it to a listing as a contact number.
• An inquiry can only be read by the landlord who owns that listing and by you, the sender.
• Your saved homes are private to you. Nobody else can query them, including other landlords.

Where it is stored

Data is stored with Supabase (PostgreSQL and Supabase Storage) and the site is served by Vercel. Both hold data on our behalf under their own security commitments.

Cookies

Kheja_Link sets one kind of cookie: the session cookie that keeps you signed in. It is essential to the service and is not used for tracking or advertising.

Clearing it simply signs you out.

Your rights

You can edit or correct your profile at any time from your account page, and delete any listing you have published.

To have your account and associated data deleted entirely, email hello@khejalink.co.ke and we will action it.

Keeping it safe

Passwords are hashed by Supabase Auth and are never visible to us. All traffic is encrypted in transit. Access to personal data is restricted by database policy rather than convention.