Our role
When you upload contacts and send messages, you are the data controller and Beep Africa acts as your data processor: we process that data only on your instructions to deliver your messages and reports. For our own customer accounts, billing and marketing, Beep Africa is the data controller. We comply with Kenya’s Data Protection Act 2019 and its regulations.
How we handle data
- We use your contact and message data only to provide our services, never to market to your contacts or sell their data.
- Access is limited to staff who need it, protected by role-based permissions, logging and confidentiality obligations.
- Data is encrypted in transit, and our platform supports IP-restricted access, sub-user permissions and API key management.
- Mobile network operators and messaging partners receive only what they need to deliver each message.
How long we keep data
| Data | How long we keep it |
|---|---|
| Message content and delivery reports | Up to 12 months, so you can view reports and resolve disputes, then deleted or anonymised |
| Contact lists and groups you upload | Until you delete them or close your account, then deleted within 90 days |
| Account, invoices and payment records | At least 5 years, as Kenyan tax law requires |
| Sender ID registration documents | For as long as the sender ID is active, plus the period the networks require |
| Security and access logs | Up to 12 months |
| Support conversations | Up to 24 months |
We may keep data longer where the law requires it or to deal with a legal claim. You can export your reports from your dashboard at any time.
People’s rights
Under the Data Protection Act, people have the right to be informed, to access their data, to object to processing (including direct marketing), and to ask for correction or deletion.
If someone asks us about data you control, we’ll pass the request to you and help you respond. To make a request about data we control, email [email protected]. We respond within the time the law requires.
Transfers outside Kenya
Some messages travel through partners outside Kenya, for example when you message international numbers or use WhatsApp, which Meta operates. We only transfer data where the Data Protection Act allows it and with appropriate safeguards.
Data breaches
If we become aware of a personal data breach affecting your data, we will notify you without undue delay so you can meet your own obligations, and notify the Office of the Data Protection Commissioner where the law requires.
Your responsibilities
- Have a lawful basis, usually consent, for every contact you upload.
- Keep opt-out and suppression lists up to date.
- Upload only the data needed for your messages.
Contact and complaints
Questions about data protection: [email protected]. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
Contact us
Beep Africa Technologies Limited, 1st Floor, Studio House, Marcus Garvey Road, Kilimani, Nairobi (opposite chaka place).
Phone and WhatsApp: +254 725 333 888 · Contact form