Privacy Policy

PaidFiles (“we”, “us”) operates sisonke.website, a service for selling digital files and taking payment by M-Pesa. We are based in Kenya and we are the data controller for the information described here.

For questions about this policy, email support@sisonke.website.

When you buy a file

• The M-Pesa phone number you enter, stored in international format (for example 2547…).
• The payment status and the M-Pesa confirmation code, so we can prove the payment happened.
• A random access token that unlocks your purchase. It carries no personal information.

When you sell

• Your account email address, shop name, and public shop link.
• An optional WhatsApp number and email for expiry notices. Without these you simply miss the reminders.
• Your uploaded files, their sizes, prices, and sales counts.

When you just visit

We record security events: rate-limit counters, abuse reports, and Cloudflare Turnstile bot-check outcomes. We do not build advertising profiles and we do not sell data to anyone.

• To deliver the payment. The phone number is sent to Safaricom M-Pesa to raise the payment prompt. Without it, nothing happens.
• To prove the payment later. If your callback fails, we match your receipt code to your number so we can restore your access. This is why we need both.
• To keep the ledger honest. Receipts and order records are kept for tax and dispute handling. We keep order records even if a seller is removed, for exactly this reason.
• To stop abuse. Rate limits and bot checks need to know how many attempts came from one address or number.

• Safaricom M-Pesa (Daraja) — the phone number and amount, to process your payment. They are independent controllers.
• Cloudflare — your IP address and a bot-check token, if the Turnstile challenge runs.
• Cloudflare R2 — encrypted storage of files and thumbnails.
• Supabase, Vercel, Resend, Upstash — our infrastructure providers, which process data on our instructions.

• We do not sell or rent your data. There is no advertising network tracking on this site.
• Your purchased files are private. Links are unguessable random tokens, and they expire. They are never indexed by search engines.
• Sellers cannot see your number. A seller sees that a sale happened. The phone number stays with us.
• We do not require a phone number to browse a shop.

• Order and payment records: kept for as long as we may need them for tax and disputes — in practice several years.
• Your purchase access token: works until the file you bought expires, then stops working.
• Uploaded files: until you delete them, until the plan runs out, or until we remove the shop. Files expire on their own by default.
• Security logs (rate limits, abuse reports): short retention, months rather than years.

Under the Kenyan Data Protection Act you may ask us to confirm what we hold about you, correct it, or delete it. Email us and we will respond within 30 days.

Two honest caveats. First, we cannot return money for a purchase simply because you deleted your data — the payment record has to survive for tax and dispute purposes. Second, deleting your shop removes your files but keeps the orders attached to it.

Files are stored privately and served through short-lived signed URLs. Paid links are single-purpose random tokens. We use bot protection on payment and recovery, and rate limits on anything that could be used to spam a stranger’s phone.

No system is perfect. If you find a hole, email us rather than publishing it, and we will fix it.

We set no advertising or tracking cookies. The app stores your session and, briefly, a polling secret in your browser’s local storage so the payment confirmation page can keep checking whether your payment cleared. That entry is scoped to one order and removed when it resolves.

If this policy changes in a way that affects you, we will update the date above. Material changes affecting existing buyers will be announced in the app.