Effective date: 26 October 2026
LeadsFactory uses personal data only to connect businesses with likely buyers and to prove the sales that follow. We never sell personal data, and anyone can stop our messages by replying STOP.
1. Who is responsible
STABLE STRUCTURAL & CIVIL ENGINEERS, trading as LeadsFactory (P.O BOX 76702-00620 NAIROBI, Kenya), is responsible for this data. We adhere to requirement by the Office of the Data Protection Commissioner as data controller and processor. Contact for privacy questions: support@aileverage.site.
For contact lists that a business uploads to LeadsFactory, that business is the data controller and we process the data on its behalf.
2. Whose data, and what
| Who | Data we hold | Where it comes from |
| Businesses using LeadsFactory | Business name, registration number and certificate, business address and proof of address (a utility bill or bank statement), official email, main phone and WhatsApp number, staff size, website and social pages, products and sales figures, payout and billing details | The business, at signup (including the documents it uploads for vetting) and in its settings |
| Leads (possible buyers) | Name, organisation, role, business email or phone, what they asked for or published, location | Public tenders, company registries, public posts and feeds, business ad forms and websites, referral partners, contact-finding services |
| Buyers confirming a purchase | Name, phone or email, the purchase, payment reference and amount | The business, the payment provider, the buyer |
| Referral partners | Name, contact details, payout details | The partner |
We collect work contact details, not private personal ones, and we do not collect sensitive personal data. A bank statement uploaded as proof of address is used only to confirm the business name and address; you may cover the transactions and balances before uploading it.
Marketplace buyers. When you order, ask for a quote, buy, book a test drive or apply for a loan on the LeadsFactory Marketplace (marketplace.aileverage.site), we collect your name, phone and/or email, town or site location, what you chose and its estimated price, your question, and any drawings you attach. With your consent we pass all of it straight to the supplier or lender you chose, or, for a general request, to the vetted supplier we pick. They contact you about that request. Your drawings are opened only through private links given to that supplier and LeadsFactory staff.
3. Why we use it, and on what basis
Under Kenya’s Data Protection Act, 2019:
- To provide the service to businesses and partners, and to bill fees: performance of our contract.
- To contact leads about a business’s offer: legitimate interest, for organisations that have published a need or a request. Consent is used where the law requires it, including for WhatsApp.
- To vet a business before its account starts (checking its registration, address, contacts, online presence and offer): steps taken at the business’s request before entering a contract, and legitimate interest in keeping the service free of fraud.
- To confirm a purchase with a buyer: legitimate interest in accurate, fair billing.
- To keep financial records and prevent fraud: legal obligation and legitimate interest.
We use AI to research leads, draft messages and read proof of payment. A person can always review a billing decision or a disputed sale.
4. Messages and opting out
We send WhatsApp messages only to people who opted in, contacted the business first, or are confirming their own purchase. Emails say who sent them and why.
Reply STOP, use the opt-out link, or email hello@aileverage.site, and we stop contacting you for that business. We keep only the minimum record needed to honour that request.
5. Who we share it with
We share personal data only with the business the lead or buyer relates to, and with these service providers, under contract and only for our service:
| Provider | Purpose | Location |
| Render | Hosting and database | Germany (EU) |
| Anthropic | AI research, writing and document reading | United States |
| Meta (WhatsApp) | WhatsApp messages | Global |
| Resend | Email delivery | Ireland (EU) |
| Paystack, PayPal | Payments and payouts | Nigeria / Kenya, global |
| Contact-finding services (Hunter, Apollo) | Finding business contact details | United States |
| Ad platforms (Meta, TikTok, LinkedIn, Google) | Running a business’s approved adverts | Global |
Where data leaves Kenya, we rely on the safeguards the Act requires: providers’ data protection terms and standard contractual protections. We also disclose data when the law or a court requires it.
When a business chooses Creatify to make its ad videos, Creatify (United States) receives the business’s product details and website for that purpose.
6. How long we keep it
- Leads never contacted, or who did not respond: deleted 24 months after last activity.
- Billing records, proof of sales and invoices: 5 years, as Kenyan tax law requires.
- Business and partner accounts: while active, then 12 months after closure, except billing records.
- Vetting documents (registration certificate, proof of address): read only by LeadsFactory staff and our AI checker to approve the business; kept while the account is active, then 12 months after closure. Documents from rejected applications are deleted 12 months after the decision.
- Marketplace requests and drawings: requests are kept like other leads (24 months after last activity); attached drawings are deleted automatically 24 months after they were sent.
- Opt-out records: kept so we never contact that person again.
7. Your rights
You can ask to be told what data we hold about you and get a copy of it. You can ask us to correct or delete it, or object to how we use it, including direct marketing. You can also withdraw consent at any time.
Email hello@aileverage.site. We may ask you to prove your identity first. We respond within the time the Act and its regulations require.
If you are not satisfied, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
8. Security
Data is encrypted in transit. Access is limited to the people and systems that need it: vetting documents and buyers’ drawings open only through private links for LeadsFactory staff and the supplier concerned. Payment card details are handled by Paystack and PayPal, never stored by us. Our websites use only the cookies needed to keep you signed in to your dashboard; we do not use advertising or tracking cookies. We will notify the Commissioner and affected people of a data breach as the Act requires.
9. Children
LeadsFactory is a business service for people aged 18 or over. We do not knowingly collect children’s data.
10. Changes
We will post updates on this page with a new effective date, and tell businesses of material changes by email.