NIADIRECT

Privacy policy

This policy explains what personal data Niadirect Conversions collects, why we collect it, how long we keep it and your rights under the Data Protection Act, 2019. Niadirect Conversions is the data controller. Last updated 15 September 2026.

What we collect

Promoters

  • Your name and national ID number.
  • A photo of yourself, used to verify your identity.
  • Your M-Pesa number, where your earnings are sent.
  • Your county and, if you give it, your town.

Businesses

  • Your business name, phone number and WhatsApp Business number.
  • Your Till or Paybill number.
  • For registered companies: the certificate of registration, KRA PIN and a director's ID number.

When someone taps a link

  • The time of the tap, and the campaign and promoter it belongs to.
  • A one-way fingerprint of the device, used to detect repeat taps. It can't be turned back into a phone, a person or a number.
  • A shortened network address. The last part is removed before anything is stored, so it can't identify a single connection.
  • The mobile network, and the country and region it reports.

Our legal basis

To provide the service
We need your name, number and campaign details to run your account, pay you and connect customers with businesses.
To meet legal obligations
We keep identity details and payment records because Kenyan payment regulations require us to know who we pay.
For our legitimate interests
We use tap records to prevent fraud, so businesses pay only for taps from real people. We keep this to what the job needs: a device fingerprint that can't be reversed and a shortened network address.

What we never do

  • Read, store or analyse your WhatsApp messages.
  • Read or estimate Status view counts.
  • Access or automate your WhatsApp account.
  • Run advertising trackers, pixels or analytics scripts on this site.
  • Sell your data, or share it for anyone else to market to you.

Who we share it with

We use a small number of service providers, each for one job: Supabase hosts the database and account records, Cloudflare serves our pages and links, Safaricom processes M-Pesa payments, and Infobip delivers text messages. Each receives only what that job needs.

How long we keep it

Tap records
24 months from the tap.
Account details
While your account is open, and for 36 months after it closes.
Payment records
Seven years, as Kenyan tax and financial record-keeping rules require.

Data is deleted automatically at the end of each period.

Your rights

You have the right to know what we hold about you, to get a copy of it, to have it corrected or deleted, and to object to how it's used. Exercising these rights is free.

Send a request from your account screen. We respond to every request within seven days, and you can follow its progress on the same screen.

If you're not satisfied with our response, you can complain to the Office of the Data Protection Commissioner.

Contact

You can reach our data protection contact through the request option on your account screen, by email at support@niadirect.co.ke, or by calling 0714 270 583.

Changes to this policy

If we change what we collect, we'll update this policy first and change the date at the top.