Privacy Policy
Last updated 13 September 2026
This policy explains how valupro ("valupro", "we", "us"), operated by VelocityStack in Nairobi, Kenya, collects, uses, shares and protects personal data when you use valupro.pro and the valupro application. We process personal data in line with the Kenya Data Protection Act, 2019.
1. Who is responsible for your data
For account, sign-in and billing data, VelocityStack is the data controller. For the property and client records that a valuation firm enters into valupro (for example client names, contact details, property and title details, photos and reports), the firm is the data controller and valupro processes that data on the firm's instructions as its data processor.
2. Data we collect
- Account data from Google sign-in: your name, email address and profile picture.
- Firm and profile data: firm name, address, phone, VRB and ISK registration numbers, KRA PIN and VAT settings, qualifications, logo, company seal and signature images you upload.
- Records your firm creates: enquiries, contacts, organisations, quotes, instructions, inspection notes, GPS coordinates, photos, comparables, valuations, reports and invoices.
- Billing data: plan, payment references, amounts and payment status. Card and M-Pesa details are handled by Paystack; we do not receive or store full card numbers or M-Pesa PINs.
- Technical data: session cookies needed to keep you signed in, and server logs such as IP address, browser type and request times used for security and troubleshooting.
3. Google user data
valupro uses Google sign-in only to authenticate you. We request the basic openid, email and profile scopes and receive your name, email address and profile picture. We use this information to create and secure your account, show who you are inside your firm's workspace, and send you service emails such as invitations and report notifications.
We do not access your Gmail, Google Drive, Calendar, contacts or any other Google data. We do not sell Google user data, use it for advertising, or share it with third parties except the service providers listed below that are needed to run valupro, or where required by law. Your name and email are visible to other members of the firm you belong to.
valupro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use data
- To provide valupro: sign-in, firm workspaces, the CRM, the valuation workspace, report generation and verification.
- To send service emails: team invitations, fee quotes, issued reports, invoices and billing notices.
- To process subscription payments and keep billing records.
- To secure the service, prevent abuse and fix problems.
- To comply with legal, tax and accounting obligations.
Our legal bases are performance of our contract with you or your firm, our legitimate interests in running a secure service, and compliance with law. We do not use your data for automated decisions that have legal effects on you.
5. Public report verification
When a firm signs a report, valupro creates a verification code and QR code printed on the report. Anyone with that code can open a verification page showing the report reference, firm, signing valuer, property description, valuation date, the values stated in the report and a document fingerprint. This lets banks and other recipients confirm a report is genuine. Verification pages are excluded from search engines.
7. International transfers
Some of our providers store or process data outside Kenya, including in the United States and the European Union. Where data is transferred, we rely on providers that apply appropriate safeguards for personal data, as required by the Data Protection Act, 2019.
8. How long we keep data
We keep account and firm data for as long as the firm's account is active. Valuation reports and invoices are kept for as long as the firm needs them for professional and legal record-keeping, and billing records for at least the period required by Kenyan tax law. When a firm closes its account, we delete or anonymise its data within 90 days of a written request, except records we must keep by law.
9. Security
Data is encrypted in transit, access to each firm's workspace is restricted to its members, signed reports are protected by a document fingerprint, and payment details are handled by Paystack. No system is completely secure, and we will notify affected users and the Office of the Data Protection Commissioner of a data breach where the law requires.
10. Your rights
You have the right to be informed about, access, correct and delete your personal data, to object to or restrict its processing, and to data portability. You can remove valupro's access to your Google account at any time from your Google Account permissions. To exercise your rights or delete your account, email simon@velocitystack.xyz. If your data was entered by a valuation firm, we may refer your request to that firm as the data controller. You may also complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
12. Children
valupro is a professional tool and is not intended for anyone under 18.
13. Changes to this policy
We may update this policy. We will change the date at the top and, for material changes, notify account holders by email or in the application before the change takes effect.
14. Contact
VelocityStack, Nairobi, Kenya. Email simon@velocitystack.xyz.