🔒 Privacy Policy
Last updated: March 9, 2026
Opus ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction marketplace platform.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email, phone number, password
- Profile Information: Business name, specialization, location, bio, profile photos
- Identity Verification: ID documents, business licenses, certifications
- Payment Information: Mobile money details, bank account information
- Communications: Messages, support requests, reviews
1.2 Automatically Collected Information
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, features used, time spent
- Location Data: Approximate location based on IP address
- Cookies: Session and preference cookies (see Section 6)
1.3 Third-Party Information
- Payment verification from M-Pesa and payment processors
- Public business registration data
- Reviews and ratings from other users
2. How We Use Your Information
We use your information to:
- Provide Services: Create accounts, process transactions, facilitate connections between users
- Verify Identity: Confirm user identities and prevent fraud
- Improve Platform: Analyze usage patterns, develop new features
- Communicate: Send notifications, updates, marketing (with consent)
- Safety & Security: Detect fraud, enforce terms, protect users
- Legal Compliance: Comply with laws and legal requests
3. Information Sharing
We share information only as follows:
3.1 With Other Users
- Profile information visible to potential clients/providers
- Contact information shared when you accept a job or order
- Reviews and ratings publicly displayed
3.2 With Service Providers
- Payment processors (M-Pesa, banks)
- Email service providers
- Cloud hosting providers
- Analytics services
3.3 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights and safety.
3.4 Business Transfers
In case of merger, acquisition, or sale, user information may be transferred to the new owner.
4. Data Security
We implement robust security measures:
- Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
- Password Security: Passwords hashed using industry-standard algorithms
- Access Controls: Limited employee access to personal data
- Two-Factor Authentication: Optional 2FA for enhanced account security
- Regular Audits: Security assessments and vulnerability testing
Despite our efforts, no system is 100% secure. Report any security concerns to security@opus.co.ke.
5. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Restrict Processing: Limit how we use your data
To exercise these rights, contact us at privacy@opus.co.ke or use your account settings.
6. Cookies and Tracking
6.1 Types of Cookies
- Essential: Required for basic functionality (login, security)
- Functional: Remember preferences and settings
- Analytics: Understand how users interact with our platform
6.2 Managing Cookies
You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.
7. Data Retention
We retain your data as follows:
- Active Accounts: As long as your account is active
- Closed Accounts: Up to 2 years for legal and dispute purposes
- Transaction Records: 7 years for financial compliance
- Messages: Up to 1 year after account closure
Anonymized data may be retained indefinitely for analytics.
8. Children's Privacy
Opus is not intended for users under 18 years old. We do not knowingly collect information from children. If you believe a child has provided us with personal data, contact us immediately.
9. International Data
Opus is based in Kenya. If you access our platform from outside Kenya, your data may be transferred to and processed in Kenya. By using our platform, you consent to this transfer.
10. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before providing personal information.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. The "Last Updated" date indicates when changes were made.
12. Contact Us
Data Protection Officer
Email: privacy@opus.co.ke
Address: Opus Ltd., Nairobi, Kenya
Response time: Within 30 days
🇪🇺 For EU/EEA Users (GDPR)
If you are located in the EU/EEA, you have additional rights under GDPR:
- Right to lodge a complaint with a supervisory authority
- Right to withdraw consent at any time
- Right to object to processing based on legitimate interests
Our legal basis for processing includes: consent, contract performance, legitimate interests, and legal obligations.