Privacy Policy
Last updated: 12 May 2026
Who we are
Jabali Nexus™ is a product of Chuchi Enterprise Ltd, a Kenyan company based in Vipingo, Kilifi County. We are the "data controller" for personal data collected through our public website and licence server.
What we collect
Website visitors — Our website (jabalinexus.com) uses basic server logs that record IP address, browser type, referring page, and pages viewed. We use this for security monitoring and to understand which content is useful. We may use a privacy-respecting analytics tool such as Plausible or Google Analytics 4 (with IP anonymisation).
Customers (licence holders) — When you purchase Nexus, we collect:
| Data | Purpose | Retention |
|---|---|---|
| Name & email | Licence issuance, support, account recovery | For the life of your licence + 7 years (tax) |
| Payment record (last 4 digits, transaction ID) | Receipt, refund eligibility | 7 years (tax) |
| Licence key & installation domain | Activation, abuse prevention, heartbeats | For the life of your licence |
| IP address of activation | Abuse prevention, geographic licence enforcement | 2 years |
| Support correspondence | Resolving your tickets, improving the product | 3 years after last contact |
Contact form submissions — If you contact us through the contact form on this site, we collect your name, email, phone (optional), and the contents of your message. This is sent to support@jabalinexus.com and stored in our support system.
What we do NOT collect — We do not have access to operational data within your Nexus installation. That includes your projects, your BoQs, your stakeholder lists, your accounting records, your tenant data, or any documents you upload. All of that stays on your server. The licence server only records the licence key, your installation domain, and timestamps of activation and heartbeat pings.
Cookies
Our marketing site uses minimal cookies, primarily for the buyer portal session (license.jabalinexus.com/portal/) and any opt-in analytics. We do not use advertising cookies or sell data to third parties. You can disable cookies in your browser; the public site will continue to function with reduced personalisation.
Who we share data with
We share data only with:
- Paystack — our payment processor, for credit/debit/mobile money transactions
- Our hosting provider — Supreme Cluster (cPanel hosting), under standard hosting confidentiality
- Email infrastructure — our SMTP provider, to deliver licence emails and respond to support
- Kenyan tax and regulatory authorities — when legally required
We do not sell, rent, or lease personal data to anyone.
Your rights
Under Kenya's Data Protection Act, 2019, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion (subject to legal retention obligations such as tax records)
- Object to certain processing
- Withdraw consent for marketing communications at any time
Email support@jabalinexus.com with the subject "Data request" to exercise any of these rights. We respond within 30 days.
Security
We take reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), encryption of stored API keys and passwords (bcrypt), restricted server access, and regular backups. No system is perfectly secure; if a breach affects your data, we will notify you and the Office of the Data Protection Commissioner as required by law.
International transfers
Most of our infrastructure is hosted in Kenya. Some support tooling (e.g. email, analytics) may process data outside Kenya in countries with comparable data protection regimes. We use reputable providers and standard contractual safeguards.
Children
Nexus is a business product not intended for use by children under 18. We do not knowingly collect personal data from children.
Changes
We may update this Privacy Policy. The current version is always at jabalinexus.com/privacy.html. Material changes will be notified to licence holders by email.
Contact
Privacy questions? Email support@jabalinexus.com with subject "Privacy". Our data protection point of contact is the Managing Director.