Privacy policy
Last updated: October 2026
This policy explains what personal data Humus Technologies Limited ("Humus", "we", "us") handles when you visit humus.ke, use the goAML demo, contact us, or receive an email from us, and what we do with it. We are based in Nairobi, Kenya, and we handle personal data in line with the Kenya Data Protection Act, 2019.
Who we are
Humus Technologies Limited (formerly WaveOdooApps Consulting Limited), Nairobi, Kenya. We decide how and why the personal data described on this page is used, which makes us the data controller. You can reach us at hello@humus.ke.
What we collect, and why
When you visit the website. Our hosting provider's servers automatically record technical details such as your IP address, browser type, the pages requested, and the date and time. We use these records to deliver the site, keep it secure and fix faults. They are kept in standard server logs for a limited period. We do not use them to identify you. We do not run analytics, advertising or tracking tools on the site today. If that changes, we will update this page first.
Fonts. The fonts on our pages are hosted on our own server, so loading a page does not send your details to any other company.
The goAML demo. The demo runs entirely in your browser. Whatever you type, import or generate stays on your device. We do not receive it, store it or see it, and the demo sets no cookies and stores nothing in your browser. We still suggest you use fictional data when you try it.
When you contact us. If you email us or ask for a walkthrough, we receive your name, email address, organisation and whatever else you tell us. We use it to reply, to discuss our products and to keep a record of the conversation. We rely on your request, and on our legitimate interest in running our business, as the reasons for doing so. Our email is provided by Google Workspace.
Business outreach. We may contact people who work at banks, microfinance banks, SACCOs and other financial institutions in Kenya to tell them about our products. We take business contact details from public sources such as the directories of the Central Bank of Kenya and the Sacco Societies Regulatory Authority, and from the institutions' own websites. We write to people one at a time about their professional role, and recipients never see each other's addresses. Every message tells you how to opt out. If you ask us to stop, we stop, and we keep your address on a suppression list so we do not contact you again. We rely on our legitimate interest in telling relevant organisations about our products, and we respect your right to object.
Social media. Our pages link to our LinkedIn page. If you follow or message us there, LinkedIn handles that data under its own privacy policy.
Who we share it with
We use a small number of service providers to run the business: our web hosting provider, Google (email) and LinkedIn. They handle personal data only to provide those services. We do not sell personal data. We may disclose it if the law requires us to.
Transfers outside Kenya
Some of these providers, such as Google, process data in other countries. We use providers that apply appropriate safeguards, and we share only what is needed for the service.
How long we keep it
Correspondence and business contact details are kept while we are in touch and normally for up to three years after our last contact, unless the law requires longer. Opt-out requests are kept for as long as needed to honour them. Server logs are kept for a short period set by our hosting provider.
Security
The site is served over HTTPS, access to our systems is limited to people who need it, and we do not collect payment details or ask for sensitive personal data on this site.
Your rights
You may ask us to tell you what personal data we hold about you, to correct it, or to delete it. You may object to us using it, in particular for direct marketing, restrict how we use it, withdraw consent you have given, and ask for a copy of it in a usable format. To use any of these rights, email hello@humus.ke with "Privacy request" in the subject. We will respond within the time the law requires.
If you are not happy with how we have handled your data, you may complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).
Children
Our site and products are meant for businesses. They are not directed at children, and we do not knowingly collect their data.
Changes to this policy
If we change this policy, we will post the new version here and update the date at the top. If a change affects how we use personal data you have already given us, we will tell you directly.
Contact
Questions about this policy: hello@humus.ke.