Privacy policy

• Your name. So our support team knows who they are speaking to.
• Your email address. For your receipt, your guide access, and replies from support.
• Your phone number. Only when you pay with M-Pesa. Safaricom needs it to send the STK prompt to your handset and to send a refund back to the same number.
• Payment records. The order reference, amount, currency, provider and whether the payment succeeded. We never receive your card number, your card PIN or your M-Pesa PIN — those stay with Paystack and Safaricom.
• What you write to us. Support emails, community posts and anything you send our support team.
• Basic server logs. IP address, page requested and time, kept briefly to keep the site up and to spot abuse.

We do not ask for your ID number, your KRA PIN, your bank details, or your login for any platform. If anyone claiming to be from GigAgora asks you for those, it is not us.

• To take your payment and give you what you paid for — this is the contract between us.
• To send receipts, refunds and support replies.
• To keep the tax and accounting records Kenyan law requires us to keep.
• To keep the site secure and stop fraud and abuse.

We do not use your details for advertising, we do not build profiles on you, and we do not sell or rent your information to anybody.

• Safaricom (M-Pesa) receives your phone number and the amount, so it can prompt you to pay and, later, refund you.
• Paystack receives your email address and the amount when you pay by card, and handles the card details directly.
• Our email and hosting providers, purely so the site runs and messages reach you.
• Anyone the law obliges us to tell, such as a court order or a tax authority.

We never share your details with the platforms you are applying to. We have no relationship with them.

Payment and order records are kept for five years, because Kenyan tax law requires us to keep transaction records for that long. Support emails are kept for two years. Server logs are kept for 30 days. Anything else we delete when you ask.

Email [email protected] from the address on your account and say what you want deleted. You do not have to explain why.

• We confirm within two working days and complete the deletion within 30 days.
• We delete your name, email, phone number, messages and community posts.
• We keep the bare transaction record — reference, amount, date — where tax law requires it, with your name and contact details stripped out.
• Deleting your data closes your account, so download anything you still want first.

Under the Data Protection Act, 2019 you can ask us for a copy of what we hold about you, ask us to correct anything wrong, object to how we use it, or ask us to stop. Use the same address above and we will answer within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner in Kenya.

We use essential cookies only — the ones that keep you signed in and keep your checkout working. There are no advertising or tracking cookies on this site, so there is nothing here to consent to.

If this policy changes we update the date at the top of the page. Questions go to [email protected]. See also our terms of service and refund policy.