Privacy Policy

1. Introduction

BilaFundi Works ("BilaFundi", "we", "our", "us") operates a global construction and infrastructure outsourcing platform, headquartered in Nairobi, Kenya. This Privacy Policy explains what personal data we collect from users anywhere in the world, how we use it, who we share it with, and the rights available to you.

BilaFundi Works is the data controller for personal data processed through the platform. Our primary data protection obligations are governed by Kenya's Data Protection Act, 2019. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with its own data protection law (such as the GDPR, or Uganda's Data Protection and Privacy Act, 2019, or Tanzania's Personal Data Protection Act, 2022), we honour the rights available to you under that law as well — see Section 7.

2. Information We Collect

We collect information you provide directly when you register, build a profile, list a service, post or apply to a tender, request a cost estimate, message another user, or contact support:

• Identity data: name, email address, phone number, country, and — where required for provider verification — national ID, passport, or business registration number
• Professional data: profession, qualifications, certifications, portfolio images, service listings
• Organisation data: company or agency name, registration number, VAT number, business or government entity type
• Financial data: billing details and transaction records. Card and mobile-money details are captured and processed directly by our payment processor (Section 4) — BilaFundi does not receive or store full card numbers
• Content you submit: cost-estimate project descriptions, tender applications, messages to other users, support conversations, blog comments
• Usage data: pages visited, searches performed, listings viewed, features used
• Technical data: IP address, browser and device type, and cookie identifiers (see our Cookie Policy)

3. How We Use Your Information

• To provide, operate, and maintain the platform
• To verify provider identity, qualifications, and organisation registration
• To match providers with relevant tenders, services, and clients
• To generate AI-powered cost estimates and support responses (Section 4)
• To process payments, subscriptions, and referral payouts
• To send service notifications, tender alerts, receipts, and platform updates
• To detect fraud, abuse, and violations of our Acceptable Use Policy
• To improve platform performance, reliability, and user experience
• To comply with legal, tax, and regulatory obligations in the countries where we operate

4. Who We Share Information With

We do not sell your personal data. We share it only as necessary, with the following categories of recipient:

• Other users: your public profile, service listings, and tender applications are visible to relevant counterparties as part of how the marketplace functions
• Payment processing: Pesapal, our payment gateway, to process card, mobile money, and other transactions
• AI service providers: when you use the Cost Estimator, request AI support, or when we generate platform content, relevant text (e.g. your project description or support message) is sent to our AI providers — currently Anthropic (Claude) and Google (Gemini) — strictly to generate the response. These providers process the data under their own enterprise data-processing terms and do not use it to train models available to other customers
• Analytics and site reliability: Google Analytics and Microsoft Clarity (aggregated usage analytics), Google reCAPTCHA (bot/fraud prevention on authentication)
• Infrastructure and email: our hosting provider (DigitalOcean) and transactional email provider (ZeptoMail), solely to operate and deliver the service
• Regulators and law enforcement: where legally required, or to protect the rights, safety, or property of BilaFundi, our users, or the public

5. International Data Transfers

Because BilaFundi serves users globally and some of our service providers (Section 4) operate infrastructure outside your home country, your data may be transferred to and processed in countries other than your own, including Kenya and the United States. Where we transfer personal data internationally, we rely on our providers' standard contractual safeguards and enterprise data-processing agreements to protect it.

6. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the service. If you delete your account, we remove or anonymise your personal data within 30 days, except where we are legally required to retain it for longer (for example, financial and tax records, or records relevant to an open dispute or investigation).

7. Your Rights

Subject to the law that applies to you, you generally have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. To exercise any of these rights, contact us at info@bilafundi.com. We aim to respond within 30 days, or sooner where a shorter period is required by your local law (for example, GDPR requests).

8. Children

BilaFundi is not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at info@bilafundi.com and we will delete it.

9. Security

We apply technical and organisational measures to protect your data — see our Security page for details. No system is completely secure; if you believe your account has been compromised, contact us immediately.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

11. Changes to This Policy

We may update this policy as our platform, providers, or applicable law change. We will notify you of material changes by email or a notice on the platform before they take effect.

12. Contact

Data Controller: BilaFundi Works, Nairobi, Kenya
Email: info@bilafundi.com