Privacy Policy

Mizizi AI, Nairobi, Kenya, is the data controller for the personal data described here. Contact: amani@mizizi-ai.com. We handle personal data in line with the Kenya Data Protection Act, 2019.

• Account details: name, email, phone, company and your password (stored only as a secure hash)
• Google sign-in details: your name, email and profile picture, if you choose Continue with Google
• Requests and messages: service requests, chat messages and support tickets
• Documents you upload or that we share with you
• Billing details: invoices, amounts, dates and payment references
• Call bookings you make through our booking calendar
• Contact form details, if you write to us from the website
• Technical data: device, browser and log data needed to keep the service secure

• To create your account and run the portal
• To deliver the services you request
• To bill you and keep financial records
• To answer your messages and book calls
• To secure the service and prevent abuse
• To meet legal obligations

We rely on your consent (for example cookies and optional tools), on performing a contract with you, on our legitimate interests in running and securing the service, and on legal obligations.

We do not sell your personal data. We share it only with providers that help us run the service, under agreements that require them to protect it:

• Hosting, database, storage and authentication providers
• Google, if you use Google sign-in
• Calendly, if you book a call
• Email delivery providers
• AI model providers, when you use the portal assistant
• Professional advisers, and authorities where the law requires

Some providers process data outside Kenya. Where that happens we take steps to make sure your data stays protected, as the Data Protection Act requires.

We keep account and project data while your account is active and for as long as needed afterwards to meet legal, tax and accounting duties. Invoices are kept for the period tax law requires. You can ask us to delete other data.

Documents are stored privately and each client can only see their own. Access is controlled per account, and traffic is encrypted. No system is perfectly secure, so please use a strong, unique password.

Under the Data Protection Act you can ask to access, correct or delete your personal data, object to or restrict how we use it, ask for a copy in a portable format, and withdraw consent at any time.

Email amani@mizizi-ai.com and we will respond within a reasonable time. You can also complain to the Office of the Data Protection Commissioner in Kenya.

Our services are for adults and organisations. We do not knowingly collect data from children.

We will update this policy when our practices change and show the new effective date at the top. For material changes we will tell you in the portal or by email.