Privacy Policy
Last updated: March 2025
1. Who We Are
Zana CRM ("we", "our", "us") is a customer relationship management platform built for Kenyan real estate agents. We are operated by the Zana CRM team and accessible at usezana.co.ke.
2. Information We Collect
We collect the following categories of information:
- Account information: Your name, email address, and profile photo when you sign up via email or Google OAuth.
- CRM data: Lead details, listings, reminders, and notes you enter into the platform.
- Billing information: Payment transactions processed via Paystack. We do not store card numbers — Paystack handles all payment data securely.
- Usage data: Pages visited, features used, and basic analytics to improve the product. Collected via Vercel Analytics (anonymous).
3. How We Use Your Information
- To provide and operate the Zana CRM platform
- To process payments and manage your subscription
- To send reminder notifications and system emails
- To respond to support requests
- To improve the product based on usage patterns
We do not sell your data to third parties. We do not use your CRM data for advertising.
4. Data Storage & Security
Your data is stored on Supabase (PostgreSQL), hosted on servers in secure data centres. All data is encrypted in transit (HTTPS/TLS) and at rest. Access to production data is restricted to authorised personnel only.
Row-level security (RLS) ensures that each agent can only access their own data. No agent can view another agent's leads, listings, or client information.
5. Third-Party Services
We use the following trusted third-party services:
- Supabase — database and authentication
- Paystack — payment processing (PCI-DSS compliant)
- Vercel — hosting and deployment
- Google OAuth — optional sign-in method
Each provider has their own privacy policy governing how they handle data passed to them.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your CRM data at any time
To exercise any of these rights, email us at support@usezana.co.ke.
7. Data Retention
We retain your data for as long as your account is active. If you cancel your account, your data will be deleted within 30 days upon request.
8. Cookies
We use session cookies to keep you logged in. These are essential for the platform to function. We do not use tracking or advertising cookies.
9. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email. Continued use of Zana CRM after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions, contact us at support@usezana.co.ke.