Privacy Policy

1. Who we are

BukuHub (“we,” “us,” or “our”) is a creator-economy platform based in Kenya. Our website is bukuhub.co.ke. We help creators, churches, NGOs, businesses, and campaigns monetise their audiences through M-Pesa payments, digital products, subscriptions, and donations.

2. What data we collect

When you sign up or use BukuHub, we collect:

• Account information — your name, email address, phone number, username, country, and profile photo.
• Content you create — posts, digital products, events, donation campaigns, and any media you upload.
• Payment information — M-Pesa transaction codes and metadata. We do not store your M-Pesa PIN or full card numbers.
• Usage data — pages viewed, features used, and interactions with our platform. This helps us improve the service.
• Social media data — if you connect a Facebook Page or Instagram Business Account, we store the Page name, Page ID, and access tokens needed to publish content on your behalf.

3. How we use your data

• To provide, maintain, and improve BukuHub.
• To process M-Pesa payments and show your transaction history.
• To publish content to your connected social media accounts (only when you explicitly request it).
• To send service-related emails (account updates, payment confirmations).
• To comply with legal obligations under Kenyan law.

We do not sell your personal data to third parties. We do not use your content or data to train AI models.

4. Facebook & Instagram integration

When you connect your Facebook Page or Instagram Business Account to BukuHub, we access the following through Meta's Graph API:

• Pages you manage — name, Page ID, and the ability to create posts on your behalf.
• Linked Instagram accounts — username, account ID, and the ability to publish images.

We only publish content when you explicitly click “Publish” or “Connect & Publish” in the BukuHub studio. We never post without your action. You can disconnect your accounts at any time from Dashboard → Social.

5. Data retention & deletion

We keep your data as long as your account is active. You can delete your data at any time:

• Delete your account — from Dashboard → Settings, or by emailing support@bukuhub.co.ke. All your personal data, posts, and uploads will be permanently removed within 30 days.
• Disconnect social accounts — from Dashboard → Social. This immediately revokes our access to your Facebook Page and Instagram account. You can also remove BukuHub from your Facebook settings at Facebook Business Integrations.
• Request data deletion — email support@bukuhub.co.ke with the subject “Data Deletion Request.” We will confirm and complete the deletion within 30 days.

6. Cookies

We use essential cookies for authentication and security. We use optional analytics cookies to understand how people use BukuHub. You can disable analytics cookies through your browser settings without affecting core functionality.

7. Security

We encrypt data in transit (TLS) and at rest. Payments are processed directly through Safaricom's M-Pesa infrastructure — we never see or store your M-Pesa PIN. Access tokens for social media accounts are encrypted and stored securely.

8. Changes to this policy

We will notify you of significant changes via email or through a notice on the platform. Continued use of BukuHub after changes means you accept the updated policy.

9. Contact us

Questions about this policy? Reach out at support@bukuhub.co.ke.