NIRVANA Privacy policy
NIRVANA (“we”, “us”) operates the website https://nirvanaexpress.co.ke. It lets hosts, affiliates and creators on Kiwi Stays create marketing posts for listings and publish them to the Facebook Page, Instagram professional account or Threads profile they choose to connect. This policy explains what we collect, why, who we share it with, and how you can control it. We handle personal data in line with the Kenya Data Protection Act, 2019.
NIRVANA is an independent service. It is not affiliated with, endorsed by or sponsored by Meta Platforms, Inc.
What we collect
| Data | Why we need it |
|---|---|
| Kiwi Stays account details: user ID, name, email or phone | To sign you in and show your own listings and referral activity |
| Listing details and photos from Kiwi Stays: title, location, price, image links | To build the posts you create |
| Facebook: your Facebook user ID, the names and IDs of the Pages you manage, and a Page access token | To publish to the Page you choose. Tokens are stored encrypted |
| Instagram: the ID and username of the professional account you connect, and an access token | To publish to that account. Tokens are stored encrypted |
| Threads: the ID and username of the Threads profile you connect, and an access token | To publish to that profile. Tokens are stored encrypted |
| Posts and campaigns you create: caption, photo or video, schedule, approval time, result and any error message | To publish, retry and show your post history |
| Performance numbers that Meta returns for posts we published for you (for example reach and engagement), where available | To show you how your posts perform |
| Referral link activity: clicks on your Kiwi Stays referral link and the bookings that came through it (affiliates) | To track referrals and show campaign results |
| Technical logs: IP address, time of actions, browser details | Security, fraud prevention and troubleshooting |
We do not read your private messages, your followers' personal information, or posts we did not publish for you.
How we use it
- To publish the posts and campaigns you create or approve to the accounts you connected.
- To draft captions with an AI service when you ask us to.
- To show your post history, schedule and results.
- To keep the service secure and to fix problems.
- To meet legal obligations.
We publish only content that belongs to a campaign you created or approved. In an automatic campaign you set the limits (which accounts, and how many posts per week) and we choose listings within those limits; you can review, pause or cancel posts at any time.
We process your data with your consent, which you give when you connect an account, and to provide the service you asked for. You can withdraw consent at any time by disconnecting an account or asking us to delete your data.
Data we receive from Facebook, Instagram and Threads
When you connect an account, Meta asks you to grant NIRVANA access. We use that access only to list the Pages or accounts you manage, to publish the content described above, and to read performance numbers for posts we published. In addition:
- We use data received from Meta only to provide the features you asked for.
- We do not sell, license or rent it, and we do not give it to data brokers or advertising networks.
- We do not use it for advertising, to build profiles about people, or for surveillance.
- We share it only with the service providers listed below, and with authorities when the law requires it.
- We delete it when you disconnect, when you remove NIRVANA in Meta's settings, or when you ask us to.
You can remove our access at any time in the settings of that account on Facebook, Instagram or Threads (under the apps and websites or business integrations you have authorised), or by pressing Disconnect in NIRVANA. When you remove us, we stop using your tokens and delete them.
Who we share data with
- Meta Platforms (Facebook, Instagram and Threads), to publish your posts. Meta's own policies apply to data on its services.
- Kiwi Stays, our sister product, which supplies your account, listing and referral data. We read from it and do not change your listings.
- OpenAI, our AI caption provider. When you ask for a caption we send it the listing details needed to write one (such as title, location, price and description). We do not send it your Facebook, Instagram or Threads tokens, account IDs or performance data.
- Our hosting provider, which stores our servers and database.
- Authorities, only when the law requires it.
Meta, OpenAI and our hosting provider may process data outside Kenya. Where that happens we rely on providers that protect data to a standard the Kenya Data Protection Act accepts.
How long we keep it
- Access tokens: until you disconnect or request deletion, then removed.
- Post history and results: while your account is active, or until you ask us to delete it.
- Security logs: up to 12 months.
Security
Passwords are never stored by NIRVANA; sign-in is checked against your Kiwi Stays account. Access tokens are encrypted at rest, connections use HTTPS, and every form is protected against cross-site requests.
Cookies
We use only the cookies needed to keep you signed in and to protect forms against cross-site requests. We do not use advertising or cross-site tracking cookies.
Your rights
You may ask to see, correct or delete your data, or object to how we use it. Follow the steps on the data deletion page or email support@nirvanaexpress.co.ke. We reply within 14 days. You may also complain to the Office of the Data Protection Commissioner of Kenya.
Children
This service is for adults who promote property listings. It is not intended for anyone under 18.
Changes
If we change this policy we will update the date above and, for significant changes, tell signed-in users.
Contact
NIRVANA
Email: support@nirvanaexpress.co.ke
Phone: +254 715 720 201