Privacy policy

What we collect, why, who sees it, and your rights.

Last updated 14 October 2026

This policy explains what personal data Katafy collects, why, who we share it with and what rights you have. Katafy (trading as KATAFY MEDIA, Nairobi, Kenya) is the data controller. We follow Kenya's Data Protection Act, 2019. Questions or requests: business@katafy.co.ke.

The short version

We only collect what we need to run campaigns, pay clippers and answer enquiries.
We never sell your data.
Clipper handles on our public pages are shortened (for example @tun***), and you can ask us to remove yours.
You can ask to see, correct or delete your data at any time.

1. What we collect

If you're a clipper

Identity and contact: your name, phone number and the name your M‑Pesa line is registered to.
Social accounts: the TikTok, Instagram or YouTube handles you clip from, and the links to clips you submit.
Performance: view counts for your clips, read from the platform's public counters and from analytics screenshots you send us.
Payments: what we paid you, when, and the M‑Pesa transaction reference.
Community: messages you post in our WhatsApp group or Discord server, which other members can see.

If you're a client or prospect

Your name, company, role, email and phone number, and what you tell us on calls, in email or when you book through Calendly.
Campaign details, invoices and payment records.

If you visit katafy.co.ke

We use Vercel Web Analytics, which counts visits without cookies and without identifying you.
Some pages load content from other services, which may set their own cookies: the Calendly booking widget, TikTok video players and, if you press play, YouTube (in its privacy-enhanced mode). The clipper leaderboard reads public numbers from a Google Sheet.

2. Why we use it, and on what basis

To run campaigns and pay clippers: checking clips and views, paying you on M‑Pesa and keeping payment records. Basis: our agreement with you (the Clipper Terms).
To prevent fraud: spotting bought views, duplicate clips and fake accounts. Basis: our legitimate interest in paying only for real views, and our clients' interest in the same.
To answer enquiries and serve clients: calls, proposals, campaign reports and invoices. Basis: taking steps toward or performing a contract.
To show public results: campaign totals and a clipper leaderboard with shortened handles. Basis: our legitimate interest in being transparent. You can opt out.
To meet legal duties: tax and accounting records. Basis: legal obligation.

We don't use your data for automated decisions that have legal or similarly significant effects on you. A person at Katafy reviews every payout.

3. Who we share it with

Safaricom (M‑Pesa), to send payouts.
Service providers that run our tools: Google (Forms, Sheets, Drive, Gmail), Calendly, Vercel (website hosting), WhatsApp (Meta) and Discord. They process data on our behalf or under their own privacy policies.
Clients, who see campaign results: clip links, platforms and view counts. They don't get your phone number or M‑Pesa details.
Authorities, when the law requires it.

Some of these providers store data outside Kenya, mainly in the United States and the European Union. We only use providers that protect personal data to a standard the Data Protection Act accepts.

4. How long we keep it

Clipper and payout records: for as long as you clip with us, then for as long as tax and accounting law requires (usually up to 5 years after the last payment).
Client and prospect records: while we're working together or talking, then up to 2 years unless a contract or the law needs longer.
Clip performance data: for as long as the campaign report is useful to the client, usually 2 years. Public leaderboard entries come down when you ask.

5. Your rights

Under the Data Protection Act you can ask us to:

tell you what personal data we hold about you and give you a copy;
correct anything that's wrong or incomplete;
delete your data, where we no longer need it or have no legal reason to keep it;
stop or limit how we use it, including taking your handle off the public leaderboard;
send your data to you or another service in a usable format.

Email business@katafy.co.ke and we'll reply within 14 days. If you're not happy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

6. Security

Clipper and client records are kept in access-controlled accounts with two-step sign-in, and only the people who run campaigns and payouts can see them. Phone numbers and M‑Pesa details never appear on our website. No system is perfectly secure; if a breach affects you, we'll tell you and the Data Commissioner as the law requires.

7. Age

You must be 18 or older to clip for Katafy and receive payouts. Our website and campaigns aren't aimed at children.

8. Changes

We'll update this page when how we handle data changes, and change the date at the top. For bigger changes we'll also tell clippers in the WhatsApp group and Discord.