Privacy Policy

Last updated: 13 August 2026

This Privacy Policy explains what personal data Fliptel Jobs ("we", "us") collects when you use fliptel.jobs (the "Service"), why we collect it, who we share it with, and the choices and rights you have. It should be read together with our Terms of Service.

1. Who we are

Fliptel Jobs operates this Service in Kenya and processes personal data as a data controller under the Data Protection Act, 2019. Questions or requests relating to your data can be sent via our Contact Us page.

2. Data we collect

Category	Examples	Source
Account data	Name, email address, phone number, password (stored hashed)	Provided by you at signup
Payment data	Phone number used for M-Pesa, payment amount, transaction reference, payment status, gateway response	Provided by you, and received back from Paystack after a charge
Usage data	Pages viewed, search filters used (e.g. faculty, location, job type), approximate access timing	Collected automatically as you use the Service
Technical data	IP address, browser type, session and authentication cookies	Collected automatically

What we don't collect. We never receive or store your M-Pesa PIN. Payment authorisation happens directly between you, Safaricom, and Paystack.

3. How we use your data

To create and maintain your account and authenticate you when you log in;
To initiate M-Pesa payment requests via Paystack and to confirm, via Paystack's webhook or verification API, whether a payment succeeded, so we can grant or extend your subscription access;
To operate free-access links distributed via SMS, including recording that a link was used and for how long access should last;
To show, filter, and personalise job listings;
To respond to messages sent through our Contact Us page;
To detect and prevent abuse, fraud, or misuse of payment or free-access mechanisms;
To comply with legal obligations.

4. Sharing your data

We do not sell your personal data. We share limited data with:

Paystack (payment processor) — your email and phone number, and the payment amount, to initiate and verify M-Pesa charges. Paystack's own privacy policy governs its handling of this data as an independent processor/controller for payment purposes.
Safaricom / M-Pesa, via Paystack, to complete the mobile money transaction.
Hosting and infrastructure providers who store data on our behalf under contractual confidentiality obligations.
Authorities, where required by law or to protect the rights, safety, or property of Fliptel Jobs or others.

5. Cookies and similar technologies

We use a small number of cookies:

Essential cookies — session and authentication cookies (e.g. to keep you logged in and to remember temporary access granted through a free-access link) and a CSRF-protection cookie. These are required for the Service to function and cannot be turned off.
Preference cookie — remembers your cookie-consent choice so we don't ask again on every page.

We do not currently use third-party advertising or analytics cookies. If that changes, we will update this policy and the cookie banner shown on the site before any non-essential cookie is set. You can control or delete cookies through your browser settings at any time, though disabling essential cookies will prevent login and payment flows from working correctly.

6. Data retention

We retain account data for as long as your account is active, and payment records for as long as required for accounting, tax, and dispute-resolution purposes. You can request deletion of your account as described in Section 8; some payment records may be retained longer where we have a legal obligation to do so.

7. Security

We use industry-standard measures, including password hashing and signature verification on payment webhooks, to protect your data. No system is completely secure, and we encourage you to use a unique password for your account.

8. Your rights

Under the Data Protection Act, 2019, you have the right to:

Be informed of how your data is used (this policy);
Access the personal data we hold about you;
Request correction of inaccurate data;
Request deletion of your data, subject to legal retention requirements (e.g. payment records);
Object to or restrict certain processing;
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been infringed.

To exercise any of these rights, contact us via the Contact Us page.

9. Children

The Service is not directed at children, and you must be at least 18 years old to create an account.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and where changes are significant we will highlight them via the Service.

11. Contact

Questions about this Privacy Policy or your data can be sent via our Contact Us page.