Privacy Notice
Last updated: 5 July 2026
1. Who we are
HAVA.AI is operated by HAVA REALTY, based in Nairobi, Kenya ("we", "us"). We are the data controller for personal data we collect through the HAVA.AI platform. Contact: havarealtyai@gmail.com.
2. Personal data we collect
- Account data — name, email, phone, password hash, WhatsApp number, profile photo;
- Seller business data — legal/trading name, KRA PIN, business registration number, country, currency, bio, website;
- Listing content — addresses, photos, descriptions, prices and other details you publish;
- Inquiries and messages — leads, support tickets, AI assistant conversations;
- Usage data — pages viewed, searches, device identifiers, IP address, browser, approximate location, cookies;
- Reviews and ratings — that you submit about service providers.
Payment card details are collected and processed by Paddle, not by us.
3. How we use it
- Provide the service: account creation, listing publication, matching renters to homes, AI assistant responses;
- Customer support, including responding to inquiries and complaints;
- Security, fraud prevention, abuse detection, enforcement of our Terms;
- Service improvement and analytics (aggregated where possible);
- Transactional communications (account, billing, service updates);
- Marketing communications you have consented to (you can unsubscribe at any time);
- Legal and regulatory compliance.
4. Legal bases
We process personal data under one or more of: contract performance (to provide the service you signed up for), legitimate interests (security, fraud prevention, product improvement), consent (marketing and optional cookies), and legal obligation.
5. Sharing
We share personal data with:
- Service providers / subprocessors — cloud hosting, database, file storage, email delivery, analytics, customer support tooling, AI model providers used to power the assistant;
- Paddle, our Merchant of Record, for sale of subscriptions, subscription management, payments, tax compliance and invoicing;
- Professional advisers — legal, accounting and audit, where necessary;
- Authorities where required by law or to protect rights, property or safety.
We do not sell your personal data.
6. International transfers
Some of our service providers operate outside Kenya (including in the United States and the European Union). Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or the recipient being located in a jurisdiction recognised as providing adequate protection.
7. Retention
We retain personal data for as long as your account is active and as needed to provide the service. After account deletion, we delete or anonymise personal data within 90 days, except where longer retention is required for legal, tax, accounting or fraud-prevention purposes.
8. Your rights
Subject to applicable law (including Kenya's Data Protection Act, 2019 and, where applicable, GDPR), you have the right to: access your data, correct it, request deletion, object to or restrict processing, withdraw consent, request portability and lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local supervisory authority. We aim to respond within one month.
To exercise any of these rights, email havarealtyai@gmail.com.
9. Security
We use appropriate technical and organisational measures including encryption in transit, access controls, least-privilege roles and row-level database security to protect personal data. No system is perfectly secure; we will notify affected users and authorities of breaches as required by law.
10. Cookies
We use essential cookies to keep you signed in and to operate the platform, plus optional analytics cookies to understand usage. You can manage cookies in your browser settings.
11. Contact
HAVA REALTY — Nairobi, Kenya. Privacy enquiries: havarealtyai@gmail.com.