Privacy policy

This policy covers visitors to tazamio.co.ke and authorized administrators using the Tazamio control plane. Tazamio is the service operator and can be contacted at hello@tazamio.co.ke for privacy questions.

Public browsing does not require an account. If you consent to audience analytics, we record limited page and video interactions such as plays, completion milestones, shares and navigation, together with a randomized session reference and time. We do not use this to identify you by name.

For administrators, we process authentication sessions, security events, audit logs, configuration, provider connection metadata and operational records needed to run the service. Stored provider secrets are encrypted and are never returned to the browser after saving.

• Deliver videos, pages and requested features.
• Secure the service, prevent abuse and maintain audit trails.
• Measure content performance only when analytics consent is present.
• Operate publishing, quality-control and automation workflows configured by an administrator.
• Respond to enquiries, rights requests and content reports.

Essential cookies support secure administrator sessions, OAuth hand-offs and your saved consent choice. Optional audience analytics remains off until accepted. You can withdraw that choice at any time through “Cookie settings” in the footer.

See the Cookie Policy for the current storage list and durations.

Tazamio uses Vercel for the web application and supported workflows, Supabase for PostgreSQL, and Cloudflare R2 for media delivery. Those providers process limited technical data to provide their services. When an administrator connects YouTube, TikTok, Instagram or Facebook, publication data is also handled under that platform’s privacy terms.

Infrastructure and connected platforms may process data outside Kenya. We select reputable providers and use technical and contractual safeguards available to us.

We retain records only while reasonably needed for the purposes above, security, dispute resolution and legal obligations. Administrator sessions expire after 12 hours. Short-lived OAuth transaction cookies expire after 10 minutes. Operational and analytics records are periodically reviewed and may be aggregated or deleted when no longer needed.

Controls include encryption in transit, encrypted provider secrets, least-privilege access, secure cookies, request validation, rate limits and audit logging. No online service can promise absolute security.

You may ask about, correct or request deletion of personal information we hold about you, object to or restrict certain processing, or withdraw consent. Rights vary by location and may be limited where retention is required for security or law. Email hello@tazamio.co.ke; we may need to verify the request.

Tazamio publishes family content but does not currently offer public user accounts or knowingly solicit personal information from children. Family recommendations remain contextual rather than behaviorally personalized. A parent or guardian who believes a child supplied information should contact us.

We may update this policy when the service or applicable requirements change. The date above identifies the current version. Material changes to optional-data practices will trigger an updated consent choice where appropriate.