1. Purpose
This policy keeps the platform safe and lawful for everyone. It applies to every account holder, staff user and anyone using the Service through your account. It forms part of the Terms of Service.
2. What is not allowed
You must not use the Service to:
- break any law, including the Computer Misuse and Cybercrimes Act, 2018, the Data Protection Act, 2019, the Kenya Information and Communications Act, and consumer-protection, anti-fraud and anti-money-laundering laws;
- commit or assist fraud, including fake payments, payment reversals abuse, identity theft or impersonating another person or business;
- access, or try to access, accounts, routers, systems or data without authorisation, or probe, scan or attack the Service or other networks;
- upload or spread malware, or interfere with the operation or security of the Service;
- intercept or monitor the content of your customers' communications, except where the law clearly permits it;
- send spam or unsolicited bulk SMS, WhatsApp or email, or messages to people who have not agreed to receive them;
- collect or use personal data unlawfully, or use the Service to stalk, harass or discriminate against anyone;
- share accounts or credentials, resell access to the Service without our written agreement, or create accounts to evade a suspension or limit;
- overload the Service, scrape it, or circumvent rate limits, bot checks or other security controls;
- infringe intellectual-property rights, or host or distribute unlawful content through captive portals or messages.
3. Your security duties
- Use strong, unique passwords and protect staff accounts; remove staff who leave.
- Keep router credentials, RADIUS secrets, API keys and wallet codes confidential.
- Report suspected vulnerabilities or breaches to us promptly. Good-faith security reports are welcome; do not access or alter data that is not yours while investigating.
4. Account abuse and what we do about it
When we become aware of a possible breach we investigate. Depending on how serious it is, we may:
- contact you and ask you to fix the problem;
- issue a written warning;
- temporarily restrict features (for example messaging or withdrawals) or make the account read-only;
- suspend the account;
- close the account permanently;
- preserve evidence and report the matter to the relevant authorities, and pursue legal remedies for any loss caused.
We act proportionately and, except where there is urgency, a legal restriction, or a risk of harm or evidence being destroyed, we tell you first and give you a chance to respond. How to appeal is explained in the Legal Requests & Enforcement Policy.
5. Reporting abuse
To report abuse, fraud, spam or a security issue involving the Service, email kendagortech@gmail.com with as much detail as possible (dates, phone numbers, transaction references, screenshots). We acknowledge reports within 2 working days.