Privacy Policy
Last Updated: August 11, 2026
1. Introduction
At CribSearch ("we," "our," or "us"), we are committed to respecting your privacy and protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you browse our property platform, request 360° virtual house tours, or book physical site visits across Kenya.
By accessing or using our website and services, you agree to the practices described in this policy, which complies with the Kenya Data Protection Act, 2019 (DPA).
2. Information We Collect
We collect information directly from you when you interact with our platform, as well as automatically through server logging and browser storage:
A. Account & Booking Data
- Full Name and Email Address
- Phone Number (for visit coordination)
- Account Passwords (encrypted via bcrypt)
- Visit booking history and saved preferences
B. Technical & Scout Data
- IP Address and browser metadata
- API Auth Tokens stored in LocalStorage
- Property location & geolocation queries
- Agent credentials for scout portal verification
3. How We Use Your Information
We process your personal information strictly for legitimate business and operational purposes:
Facilitating property visit requests between users and verified agents.
Managing secure account access via Sanctum API bearer tokens.
Analyzing search trends and 360° virtual tour views to enhance listing accuracy.
Preventing duplicate listings, scam viewing fees, and unauthorized scout entries.
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data to third-party advertisers. We only share information under the following circumstances:
Assigned Property Scouts
When you request a site visit for a specific house, your contact details (Name and Phone Number) are shared directly with the assigned property scout solely to coordinate your visit.
5. Cookies & Local Storage
We use browser localStorage to store API access tokens (`auth_token`) so you remain logged in across sessions. We also utilize essential cookies for CSRF security protection. You can clear local storage or cookies at any time via your browser settings.
6. Data Security & Your Rights
Under the Kenya Data Protection Act, you have the right to request access to your personal data, request corrections, or ask for the total deletion of your user profile and booking history.
We implement industry-standard database encryption, HTTPS protocols, and hashed password storage to safeguard your credentials against unauthorized access.
Data Privacy Questions?
Contact our Data Protection Compliance team in Nairobi, Kenya.