Legal
Privacy Policy
Last updated 8 October 2026
1. Who is responsible
JMSURF Technologies, Devan Plaza, 5th Floor, Westlands, Nairobi, Kenya, runs JMSURF RMS. For tenants' details that a landlord or agency puts into the app, that landlord or agency decides what is collected and we process it on their behalf.
2. What we collect
- Account details: names, email addresses, phone numbers and passwords (stored encrypted) of landlords, agency staff, caretakers and tenants who use the portal.
- Property records: properties, units, leases, meter readings, maintenance requests and documents.
- Tenant details: names, phone numbers, email addresses, ID numbers where the landlord records them, lease terms, rent balances and payment history.
- Payment information: amounts, phone numbers and references needed to send payment prompts and match payments. We do not store card numbers.
- Technical data: device and browser type, pages used and error reports, so we can keep the service secure and fix problems.
3. How we use it
- To run the service: leases, invoices, receipts, statements, reminders and the tenant portal.
- To send payment prompts and match payments to the right tenant and unit.
- To send the reminders and notices the landlord sets up, by SMS, WhatsApp or email.
- To keep accounts secure, prevent fraud and fix errors, and to bill the landlord's plan.
4. Who we share it with
We do not sell personal data. We share only what is needed with service providers that help us run JMSURF RMS, such as hosting, SMS, WhatsApp, email delivery and payment providers. They may only use it to provide their service to us.
We may disclose data where the law requires it.
5. How long we keep it
We keep data while the workspace is active. If it is closed we archive it so it can be restored or exported; landlords can ask us to delete it permanently, except records the law requires us to keep (for example tax and payment records).
6. Security
Each workspace's data is kept separate and access is controlled by roles. Tenants see only their own tenancy in the portal. Connections are encrypted and data is backed up regularly.
7. Your rights
Under the Kenya Data Protection Act, 2019 and similar laws, you can ask to see, correct, export or delete your personal data, and object to certain uses of it.
To make a request, email [email protected]. Tenants can also contact their landlord or agency directly. You may complain to the Office of the Data Protection Commissioner.
8. Changes
We may update this policy. The date at the top shows when it last changed; significant changes will be announced in the app or by email.