Last updated: October 27, 2026
This Privacy Policy explains how Digipedia Limited ("Digipedia", "we", "us", or "our") collects, uses, and protects information in connection with the Central Realty platform (the "Platform"). It applies to the marketing site, every Organization's authenticated portal, and each Organization's own public property site hosted on the Platform.
Central Realty is a property management platform used by Organizations (landlords, agents, and property managers) to manage properties, units, tenants, billing, and related services. Most of the personal data processed through the Platform — tenant records, lease details, payment history — is entered and controlled by the Organization using it, not by Digipedia directly. Section 5 explains this distinction in more detail.
| Category | Examples |
|---|---|
| Account & Organization data | Name, email, phone number, username, role, and the Organization's business/contact details provided at signup or in System Information. |
| Tenant & property data | Entered by an Organization: tenant names and contact details, lease terms, unit and property records, arrears and payment history, maintenance requests. |
| Payment data | M-Pesa transaction references and confirmation details processed via Safaricom's Daraja API. We do not store M-Pesa PINs or full mobile money account credentials. |
| Communications | SMS delivery logs (recipient number, message, delivery status) for reminders and notifications sent through the Platform; support and contact-form messages; chat-widget conversation transcripts. |
| Usage & technical data | Log data, session identifiers, IP address, browser/device information, and cookies necessary for the Platform to function (see Section 9). |
We share data only as needed to operate the Platform:
We do not sell personal data. We do not share an Organization's tenant data with any other Organization on the Platform — every Organization's data is isolated from every other's.
For data an Organization enters about its own tenants and staff, that Organization is the data controller and Digipedia is the data processor, acting on the Organization's instructions to provide the Platform. If you are a tenant or staff member of an Organization and want to exercise a data-protection right over your own information, please contact that Organization directly; we will support them in responding to you. For data about the Organization itself and its own account holders, Digipedia is the data controller.
We retain data for as long as the related account or Organization is active, and for a reasonable period afterward to allow for data export, to meet legal, tax, or accounting obligations, and to resolve disputes. Soft-deleted records (for example, a removed Organization or invoice) are retained for a period before permanent deletion, consistent with the Platform's own audit-trail requirements.
We apply technical and organizational measures appropriate to the sensitivity of the data involved, including encryption of sensitive credentials at rest (such as M-Pesa and SMS gateway API keys), per-tenant data isolation, and access controls limiting staff access to what their role requires. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted over the internet.
Subject to applicable law (including Kenya's Data Protection Act, 2019), you may have the right to access, correct, or request deletion of your personal data, object to certain processing, or request a copy of your data in a portable format. To exercise these rights over data controlled by an Organization (most tenant and staff data), please contact that Organization first. For data Digipedia controls directly, contact us using the details in Section 12.
The Platform uses strictly necessary cookies to maintain your login session and protect against cross-site request forgery. We do not use third-party advertising cookies. Disabling cookies in your browser may prevent parts of the Platform from working correctly.
The Platform is intended for use by adults managing or renting property. We do not knowingly collect personal data from children. Where a tenant record legitimately includes a minor as an occupant, that data is controlled by the relevant Organization under Section 5.
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and material changes will be communicated to Organization Owners by email. Continued use of the Platform after a change takes effect constitutes acceptance of the updated Policy.
Questions about this Privacy Policy, or requests relating to your personal data, can be sent to [email protected].