Privacy notice

The website and Yakini are run by Intevia Ltd, Nairobi, Kenya (“we”, “us”). We decide how the personal data described here is used. You can reach us about privacy at privacy@yakini.io.

This notice covers the public website at yakini.io and the request form on its contact page.

It doesn’t cover the data the Yakini product processes for our customers. That processing is governed by each customer’s agreement with us, under which the customer decides how its data is used. Organizations that run Yakini themselves are responsible for their own installations.

• We use no analytics, advertising or tracking of any kind, and the website sets no cookies.
• Everything on the website, its fonts included, comes from our own servers: there are no third-party scripts, fonts or embeds.
• If you choose a light or dark theme, the choice is kept in your browser’s local storage, on your device. It is never sent to us.
• Like any web server, ours receive technical details with each request, such as your IP address and the page asked for. We use them only to deliver the website, keep it secure and fix problems, and we keep the logs that record them for a limited time.

When you use the form on the contact page, we store:

• what kind of request it is: a demo, sales, a security review, a partnership or something else;
• your name, your work email address and your company;
• if you give them, your job title, your company’s size, your country, what you’re interested in, and your message;
• the page of the website you sent it from, and when you sent it.

We don’t store your IP address or your browser’s details with your request, and no cookies or tracking are involved.

To protect the form from abuse, we limit how many requests can come from one IP address in a short time. Those counts are kept only in our server’s memory, never stored. The form also has a field people can’t see: requests that fill it in are treated as automated, answered as if accepted, and not stored. If the same address sends the same kind of request again within 10 minutes, we treat it as one request rather than storing it twice.

We use your request only to answer you: to reply, to arrange a demo, and to follow up on what you asked about. We don’t sell it, use it for advertising, or add you to a mailing list.

We rely on our legitimate interest in answering people who contact us and, when you ask about using Yakini, on taking the steps you ask for before a possible contract.

When we receive your request, we send you one confirmation email, without a copy of your message, and we send your request to our sales inbox. We send at most one confirmation to the same address in 24 hours, and when an unusual number of requests arrive within an hour we keep them all but send no emails about the extra ones. Our emails are sent through Microsoft Azure Communication Services.

• The people at Intevia Ltd who run our Yakini installation and handle requests, and our sales inbox.
• Microsoft, which delivers our emails, and the provider that hosts our servers, each only as needed to provide their service to us.
• Nobody else, unless the law requires it.

We keep a request for 24 months after it last changed, then delete it automatically. Requests we mark as spam are deleted 30 days after we mark them. You can ask us to delete yours at any time; deleting it also cancels any email about it that hasn’t been sent yet.

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, and object to how we use it. Write to privacy@yakini.io.

If you aren’t satisfied with our answer, you can complain to the Office of the Data Protection Commissioner in Kenya, or to the data protection authority where you live.

The sign-in page and the Yakini app use a cookie that keeps you signed in. It is needed for the app to work and is never used for tracking. What the app does with your organization’s data is set out in your organization’s agreement with us.

When what we do with personal data changes, we update this notice and the date at the top.