Legal

Privacy Policy

Last updated 05 Oct 2026

This Privacy Policy explains what personal information Bildfie collects, how we use it, and the choices you have. It applies to everyone who uses our platform — clients, providers, and visitors alike.

1. Data controller

Bildfie is the controller of the personal information described here. You can reach us at support@bildfie.com for any privacy request.

2. What we collect

Information you give us

  • Account — name, email address, phone number, password (hashed), photo.
  • Profile — headline, bio, skills, location, work history, education, certifications, portfolio items.
  • Transactions — project briefs, bids, messages, milestone approvals, ratings and reviews.
  • Payments — wallet transactions, M-Pesa/bank references. Card and bank credentials are handled directly by our payment gateway (IntaSend); we do not store them.

Information we collect automatically

  • Device and browser information (user-agent, IP address, referrer).
  • Log data (page requests, timestamps, error events).
  • Cookies and similar technologies — see our Cookie Policy.

3. Why we use it

  • To operate the platform: authenticate you, run projects, process payments, deliver notifications.
  • To match clients with relevant providers based on skills, location, availability.
  • To detect and prevent fraud, spam, and abuse.
  • To comply with legal and tax obligations.
  • To improve the platform — anonymised analytics on how features are used.
  • To communicate with you about your account, transactions, and (where you opt in) marketing.

4. Legal bases (for users covered by GDPR / DPA 2019)

We process your data on the following grounds: contract (to provide the Service you signed up for), legitimate interest (fraud prevention, product improvement), consent (marketing emails, non-essential cookies), and legal obligation (tax, KYC).

5. Who we share with

  • Other users — the parts of your profile you make public, and information necessary for a transaction (name, phone, address) is shared with the counterparty of that transaction.
  • Payment gateways — IntaSend and, indirectly, Safaricom M-Pesa for mobile-money transactions.
  • Cloud infrastructure — hosting, email delivery, SMS delivery providers, on a data-processor basis.
  • Regulators and law enforcement — when compelled by law or to protect the platform from misuse.

We do not sell your personal information to advertisers.

6. How long we keep it

Account and transaction records are retained for as long as your account is open, and for at least 7 years thereafter to comply with Kenyan tax law. Support tickets and abuse reports are retained for 3 years. Server logs are retained for 90 days. When retention obligations expire we either delete or anonymise your data.

7. Where it's stored

Our primary infrastructure is hosted with providers in the East African region and Europe. Where data crosses borders we rely on standard contractual clauses or equivalent safeguards.

8. Your rights

You can:

  • Access, correct, or delete your account data (Settings → Account).
  • Object to certain processing or ask us to restrict it.
  • Withdraw consent for marketing at any time (unsubscribe link in every email).
  • Export your data in a machine-readable format — email the address above.
  • Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local regulator.

9. Children

The Service is not intended for anyone under 18. If you become aware that a child has provided us with personal information without parental consent, please contact us and we will delete it.

10. Security

We take reasonable technical and organisational measures to protect your personal data — TLS in transit, hashed passwords, access controls, and regular reviews. No system is 100% secure; if a breach occurs and there is a risk to your rights, we will notify affected users within 72 hours.

11. Changes

Material changes will be notified via email or in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions and rights requests: support@bildfie.com.