Privacy policy
Wasanii United is a booking and music platform for Kenyan creators. This page says, in plain words, what we collect about you, why, who can see it, how long we keep it, and how to have it removed. It applies to wasaniiunited.com, the members app, every artist page we host, and the emails we send.
1 · Who we are
Wasanii United Ltd ("Wasanii United", "we") is a company registered in Kenya and is the data controller for the personal data described here under the Data Protection Act, 2019. You can reach the person responsible for data protection at privacy@wasaniiunited.com.
2 · What we collect
We collect only what the platform needs to do the thing you asked it to do. Nothing on this list is bought from anyone or inferred about you.
| When | What | Why |
|---|---|---|
| You create an account | Name, email address, phone number, county and town, the role you chose (creator, client or agency) and, for creators, your designation and genre. A password, held only by our sign-in provider (Amazon Cognito) in hashed form — we never see it. | To run your account, verify your email, and show clients who they are booking. |
| You book or get booked | The gig: title, fee, dates, who the two parties are, messages between them, the escrow state and the record of payment and release. | To hold the money in escrow and pay it out when the work is delivered — the whole point of the platform. |
| You pay or get paid | The payment reference and amount from the rail you used (M-Pesa, card or bank transfer), and the payout number or account a creator gives us. Card numbers are handled by the payment provider and never stored by us. | To match a payment to a gig and to pay creators out. |
| You upload music, video or photos | The files, their titles and prices, and the fact that a buyer has bought them. | To publish your artist page and store, and to let buyers play what they paid for. |
| You publish an artist page | Whatever you choose to put on it: bio, photos, releases, shows, merch, press kit, contact details. | This is public by your choice. Everything else about your account stays private. |
| You join an artist's mailing list | Which artist's list you joined, when, and from where; whether each email was delivered and opened; your topic preferences. | So the artist can email you, and so you can leave in one click. See section 5. |
| You leave a review or report | The stars and words you wrote, tied to the gig they are about. | Reviews are shown on the creator's page; reports go to our trust team only. |
| You ask us for a theme | The description, colours and reference images you upload. | To design it. Images sit in a private bucket that only our team can open. |
| You use the app | Which page of the members app you have open, your browser and operating system name, and the time of your last visit. Sign-in attempts, and every action an administrator takes on an account, are written to an audit log. | To show who is online to clients, to stop abuse, and so that what our own staff do is on record. |
We do not collect your precise location, your contacts, or anything from other apps. We do not use advertising trackers or sell data to anyone.
3 · How we use it
- To provide the service you signed up for — accounts, bookings, escrow, payouts, artist pages, stores and mailing lists. This is performance of our contract with you.
- To keep the platform safe — verifying emails, blocking disposable addresses, rate limits, the audit log, and reviewing reports. This is our legitimate interest in running a trustworthy marketplace.
- To email you about your own account — verification codes, booking updates, escrow releases, replies. These are not marketing and you cannot opt out of them while you have an account.
- To send artists' emails you asked for — only after you said yes on that artist's page. Consent, withdrawable in one click.
- To meet legal duties — tax and anti-money-laundering records for payments, and responding to lawful requests.
We do not make automated decisions about you that have legal or similarly significant effects.
4 · Who sees it
Other members see what the platform needs them to: a client sees the creator's public page and the gig they share; a creator sees the client's name and the brief. Your email address and phone number are shown to the other party in a booking only once escrow is funded and only inside the platform.
Artists whose list you joined see your name, the date you joined, where you joined from, and whether their emails reached and were opened — but never your email address, which is shown to them masked (for example j•••••@gmail.com). Wasanii United sends on their behalf, so a list can never be lifted out of the platform.
Our own team — administrators — can see account details to resolve disputes, review reports and answer support. Every such action is logged.
Providers we use to run the platform, who process data only on our instructions:
| Provider | What they do for us | Where |
|---|---|---|
| Amazon Web Services | Our servers, database, file storage and sign-in (Cognito). Passwords never leave Cognito. | United States (us-east-1) |
| Netlify | Serves the website and the app to your browser. | Global network |
| Google (Gmail API) | Delivers the mailing-list emails artists write, from a Wasanii United account. See section 6. | Global |
| Payment rails (M-Pesa, card and bank providers) | Move the money. They see the payment; they do not see your bookings or messages. | Kenya |
Some of these providers are outside Kenya. We transfer data to them under the safeguards the Data Protection Act allows, and only what each one needs. We disclose data to authorities only when the law requires it, and we will tell you when we are allowed to.
5 · Mailing lists
Joining. When you are signed in and visit an artist's page, we may ask once whether you would like to join their mailing list. Nothing happens unless you say yes. "Not now" hides the question for that artist for thirty days; the box "don't ask me again" turns it off for every artist, and you can turn it back on under Emails from artists in the members app.
What is sent. The artist writes the words; we add a fixed header and footer, deliver it, and record whether it was delivered and — through a one-pixel image — whether it was opened. Artists are limited to one email a day and three a week. Replies go to the artist.
Leaving. Every email carries an unsubscribe link that works with one click and no sign-in, plus a one-click unsubscribe header that Gmail and Apple Mail turn into their own button. You can also narrow a list to certain topics, leave any list, or leave every list, under Emails from artists.
6 · Google
Mailing-list emails are sent through the Gmail API from a Google account that belongs to Wasanii United — not from yours. The only permission we ask Google for is gmail.send: the ability to send. We cannot read, search or modify any mailbox, including our own, through this connection. The authorisation is granted once by a Wasanii United administrator and can be revoked at any time from that Google account's security settings.
Wasanii United's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to send the emails described in section 5; it is not transferred to anyone else, not used for advertising, and not read by humans except as needed for security or to comply with the law.
7 · Cookies and local storage
We set no advertising or analytics cookies. Your browser keeps three things for us, all in local storage on your own device: your light/dark choice, your sign-in session while you are signed in, and — in the demo version of the app only — the demo's sample data. Clearing your browser's site data removes all three.
8 · How long we keep it
- Your account — until you delete it, plus thirty days in case you change your mind.
- Bookings and payments — seven years after the gig, as Kenyan tax and financial rules require, even after the account is gone. Names on those records are kept; everything else about the account is removed.
- Messages — until either party deletes the thread or the account is deleted.
- Mailing lists — when you leave a list we keep the fact that you left (so the artist cannot re-add you) and remove the rest. When your account is deleted, every list membership goes with it.
- Uploaded music and images — until you remove them or delete the account. Buyers keep access to what they bought.
- Audit and sign-in logs — twelve months.
- Theme request images — until the request is answered, then ninety days.
9 · Your rights
Under the Data Protection Act, 2019 you have the right to be told what we hold about you, to receive a copy of it, to have mistakes corrected, to have it deleted, to object to or restrict how we use it, and to withdraw consent you gave earlier. Most of this you can do yourself in the members app — edit your profile, delete your uploads, leave mailing lists, delete your account. For anything else, email privacy@wasaniiunited.com from the address on your account and we will answer within fourteen days. You can also complain to the Office of the Data Protection Commissioner of Kenya at odpc.go.ke.
10 · Security
Every action in the platform is checked on our servers against who you are signed in as; nothing is trusted from the browser alone. Passwords are held only by Amazon Cognito. Administrators sign in with a second factor. Uploaded files sit in private storage and are served through short-lived signed links. Unsubscribe links are cryptographically signed for one person and one list. Rate limits apply to every action. If a breach ever affects your data we will tell you and the Commissioner within seventy-two hours of becoming aware of it.
11 · Children
Wasanii United is for people aged eighteen and over. We do not knowingly collect data from anyone younger; if you believe we have, tell us and we will remove it.
12 · Changes to this policy
When this page changes in a way that matters we will update the date at the top and, for significant changes, tell members by email or in the app before they take effect. Earlier versions are available on request.