Privacy Policy
1. Who we are
SikiaIQ is run by [COMPANY LEGAL NAME], registered in Kenya ([REGISTRATION NUMBER]), [ADDRESS] (“we”, “us”). We are registered with the Office of the Data Protection Commissioner (ODPC) as a data controller (registration number [ODPC CONTROLLER NUMBER]) and as a data processor (registration number [ODPC PROCESSOR NUMBER]). Contact: [SUPPORT EMAIL].
For your account, we are the data controller. For comments you analyse, you decide what is analysed and why, and we process them on your behalf as your data processor.
2. What we collect
| Information | Examples | Why |
|---|---|---|
| Account | name, email, phone (optional), business or organisation name, profile photo, team members you invite | to create and secure your account |
| Payments | plan, amount, date, payment reference. We never see or store card or M-Pesa PINs; Paystack handles payment details | to activate your plan and keep accounts |
| Comments you analyse | comments you paste, upload (files, screenshots) or import from a connected account, including commenters’ public names and what they wrote | to produce your analysis |
| Connected platforms | see section 6: page or channel names and IDs, posts, comments, and the access keys needed to read them | to import comments you choose to analyse |
| Analyses | reports, scores, findings, saved comparisons and poll summaries | so you can review and compare them |
| Usage and security | sign-ins, pages visited (once per day), device type, error logs | to keep the service secure and working |
| Newsletter | your email address (and your first name, if you give it), and when and how you agreed to receive it. Our email provider may also record whether an email was delivered, opened or a link was clicked | to send you the newsletter you asked for, and to improve it |
| Marketing choice | whether you agreed to receive news and offers, and when | to respect your choice |
3. How we use it, and our legal basis
- To provide SikiaIQ (contract): analyses, reports, emails about your account and analyses.
- To keep it secure and working (legitimate interest): preventing abuse, fixing errors, preventing duplicate free trials.
- To send news and offers (consent): only if you tick “Send me SikiaIQ news”. You can untick it at any time.
- To send our newsletter (consent): only if you subscribe using the form on our website and agree to receive it. Every email has an unsubscribe link, and you can also ask us to remove you. Withdrawing consent does not affect anything already sent.
- To meet legal duties (legal obligation): tax records and lawful requests.
We do not sell personal data, use it for advertising, build profiles of individual commenters, or use it to train AI models. For public figures, our reports never tie criticism or political opinions to a named person.
4. Who processes data for us
| Provider | What for |
|---|---|
| Supabase | database and sign-in |
| Hetzner | server that runs our analysis workflow |
| Cloudflare | secure connection and protection |
| Anthropic (Claude) and/or Google (Gemini) | AI that reads comments to produce your analysis, under their business API terms, which do not allow training on this data |
| Paystack | payments |
| Brevo | sending reports and account emails, storing our newsletter list and sending the newsletter |
| Apify | reading public comments from some platforms you ask us to analyse (for example Instagram, TikTok and review sites) |
| GitHub (or Cloudflare Pages) | hosting the website (no personal data stored) |
Some of these providers process data outside Kenya, including in the European Union and the United States. Where personal data leaves Kenya, we rely on the safeguards the Data Protection Act, 2019 requires for transfers abroad, such as written terms with each provider and, where needed, your consent. You can ask us for the list of countries at [SUPPORT EMAIL].
5. How long we keep it
- Account: while your account is open, then deleted within 30 days of closure.
- Comments and analyses: up to 12 months after they were created, or until you delete them, whichever is sooner. We review this regularly, at least every three months, and delete what is past that period.
- Access keys for connected accounts: until you disconnect, or the platform tells us you removed SikiaIQ, then deleted straight away.
- Newsletter subscribers: until you unsubscribe. After that we keep only a note that you opted out, so you are not added again by mistake.
- Payment records: as long as Kenyan tax law requires.
- Backups: deleted data leaves our backups within 7 days.
6. Connected platforms
You may connect accounts you manage so SikiaIQ can import comments for analysis. We ask only for read access, use it only to produce your analyses, never post or reply on your behalf, and show the data only to you and your team.
Facebook and Instagram (Meta)
With your permission through Facebook Login for Business, we read the list of Pages you manage, your Page posts and the comments and ratings on them, and, for a linked Instagram professional account, your media and its comments. You can remove SikiaIQ at any time in Facebook: Settings & privacy → Settings → Business integrations. When you do, Meta tells us and we delete your access keys and imported data as described on our data deletion page.
YouTube (Google)
SikiaIQ uses YouTube API Services to read comments on videos you choose. By using this feature you agree to the YouTube Terms of Service; Google’s handling of data is described in the Google Privacy Policy. You can revoke SikiaIQ’s access at Google security settings. SikiaIQ’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
TikTok
If you connect a TikTok business account, we read your videos’ basic details and the comments on them, only to produce your analyses. You can disconnect in SikiaIQ or remove access in your TikTok account settings.
If you connect a LinkedIn Page you administer, we read its posts and their comments. LinkedIn data from a Page is shown only to that Page’s administrators in SikiaIQ. You can remove access in your LinkedIn settings or disconnect in SikiaIQ.
7. Comments from other people
Comments you analyse may contain names and words of people who commented publicly. We process them only on your instructions and only to produce your analysis. If you are one of those people and want something removed, contact us and we will help, and pass your request to the account that analysed it where required.
8. Your rights
Under Kenya’s Data Protection Act, 2019 you can ask to be informed, access, correct, delete, object to processing, and receive a copy of your data. Email [SUPPORT EMAIL]; we reply within 7 days and complete requests within 30 days. You may also complain to the Office of the Data Protection Commissioner.
9. Security
Data is encrypted in transit, access is limited by strict database rules so each account sees only its own data, access keys for connected platforms are never sent to your browser, administrators use two-step sign-in, and every sensitive action is logged. If a breach affects your data, we will tell the ODPC within 72 hours and inform you without delay where required.
10. Children
SikiaIQ is for organisations and adults. It is not meant for anyone under 18.
11. Cookies and storage
We do not use advertising or tracking cookies. Your browser stores your sign-in session and a few settings (such as names you track in Mentions) so the service works.
12. Changes
We will post any change here with a new date, and email you about important changes.